Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa
File:                     f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa (raw, json)
Hash identifier:          0mY3VJw1a6Y2DMn/Os8z6+MDa7gjQGR6hLB7oX1zxFU=
Subject key identifier:   53:86:7E:A9:CB:18:61:DB:DF:5D:09:EB:8D:1B:BE:AC:A3:99:54:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F7EFBDD8365F346B1F180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.249.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:7e:fb:dd:83:65:f3:46:b1:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=c05c1312-85ef-40a7-b60a-fc75f11160e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:c5:d3:a6:06:b6:34:26:47:65:17:6a:c3:
                    35:be:df:38:06:30:06:aa:cd:dc:8b:a0:b2:b6:61:
                    ba:c9:3f:ee:dc:bb:07:04:df:46:db:f6:f8:0f:22:
                    56:92:cf:7e:b3:6f:da:da:3e:87:ab:5b:8f:47:81:
                    d3:29:f0:02:a8:9d:d2:d3:df:06:44:c9:85:e2:ae:
                    fb:22:7c:12:01:da:a4:b6:6e:8a:93:f4:5e:2e:0a:
                    9b:3b:5a:99:91:f1:60:c9:8b:2e:8f:16:27:1f:d8:
                    1f:fd:8a:a0:8c:bc:b3:d8:2f:27:02:f0:dc:df:cb:
                    0d:d4:99:7f:e5:95:3e:c4:01:d9:21:e1:41:27:f1:
                    c7:00:0d:85:0d:1c:b7:00:55:53:f4:77:51:30:0c:
                    0d:01:d0:14:fd:2f:0e:a8:88:1f:32:93:1a:c4:1d:
                    7d:ee:4b:36:22:80:9e:eb:ed:76:ca:da:8f:65:c7:
                    da:0b:4c:16:b2:7b:60:65:72:17:77:35:aa:89:c3:
                    91:f0:16:d6:fa:96:6e:7e:7e:be:e6:85:d5:c0:f0:
                    39:45:6d:23:ec:a5:0c:9c:15:95:cd:cb:d9:5e:93:
                    29:dc:8d:45:0a:e2:5b:69:3e:0d:ac:9d:26:ad:f5:
                    fe:bd:63:aa:08:db:70:e7:ac:72:8d:41:0b:f7:35:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:86:7E:A9:CB:18:61:DB:DF:5D:09:EB:8D:1B:BE:AC:A3:99:54:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:b3:7e:23:ed:09:ac:a9:96:9c:ee:0a:d9:c8:2c:17:88:f1:
         28:58:8c:d7:4f:3e:ee:a3:41:69:57:0e:bc:4d:8e:b9:4d:34:
         b4:4f:74:22:90:59:5c:be:00:9a:14:35:eb:9e:50:17:7f:de:
         2f:5d:40:33:e8:f6:ea:8d:0c:30:f5:28:7a:02:b8:40:1b:22:
         3c:96:94:91:26:bb:5e:64:f4:08:7d:a9:8a:70:0c:b1:b0:f3:
         a6:a7:15:8e:5c:60:33:19:bb:c7:21:ba:51:95:4c:5b:ea:1b:
         61:bb:98:b1:18:8c:cd:6c:64:87:67:8f:55:51:59:ef:3e:d8:
         c8:c2:ed:b6:d5:86:1b:59:51:23:b0:e9:63:61:5e:66:ca:e4:
         0f:b8:42:c8:2c:48:0c:d4:c2:74:d1:a4:a2:15:76:2d:cc:f7:
         7d:67:1b:ae:84:3e:cb:f6:1a:1c:0c:27:61:e1:42:15:5f:10:
         12:5d:0b:0b:0b:39:db:27:06:24:be:71:f2:f4:a2:ee:2a:55:
         3e:c2:c4:75:39:a4:3f:f9:6d:75:e1:2b:1c:d3:28:2f:b3:62:
         80:de:73:c8:2b:e6:ab:3c:70:12:9d:8f:f2:e4:66:15:2d:81:
         42:9b:94:fd:36:76:b2:bb:c2:c6:02:54:0d:fd:d6:29:05:0e:
         1a:db:10:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3773YNl80ax8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk
YzA1YzEzMTItODVlZi00MGE3LWI2MGEtZmM3NWYxMTE2MGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHvF06YGtjQmR2UXasM1vt84BjAGqs3ci6Cy
tmG6yT/u3LsHBN9G2/b4DyJWks9+s2/a2j6Hq1uPR4HTKfACqJ3S098GRMmF4q77
InwSAdqktm6Kk/ReLgqbO1qZkfFgyYsujxYnH9gf/YqgjLyz2C8nAvDc38sN1Jl/
5ZU+xAHZIeFBJ/HHAA2FDRy3AFVT9HdRMAwNAdAU/S8OqIgfMpMaxB197ks2IoCe
6+12ytqPZcfaC0wWsntgZXIXdzWqicOR8BbW+pZufn6+5oXVwPA5RW0j7KUMnBWV
zcvZXpMp3I1FCuJbaT4NrJ0mrfX+vWOqCNtw56xyjUEL9zX08QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOGfqnLGGHb310J640bvqyjmVTjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjBmZWY0ZWMtYTc0YS0z
YzA0LWFlODgtYTlhMDAzYzBlNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrvnCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALKzfiPtCayplpzuCtnILBeI8ShYjNdPPu6jQWlXDrxNjrlNNLRPdCKQ
WVy+AJoUNeueUBd/3i9dQDPo9uqNDDD1KHoCuEAbIjyWlJEmu15k9Ah9qYpwDLGw
86anFY5cYDMZu8chulGVTFvqG2G7mLEYjM1sZIdnj1VRWe8+2MjC7bbVhhtZUSOw
6WNhXmbK5A+4QsgsSAzUwnTRpKIVdi3M931nG66EPsv2GhwMJ2HhQhVfEBJdCwsL
OdsnBiS+cfL0ou4qVT7CxHU5pD/5bXXhKxzTKC+zYoDec8gr5qs8cBKdj/LkZhUt
gUKblP02drK7wsYCVA391ikFDhrbEEA=
-----END CERTIFICATE-----
Generated at Sun May 11 07:41:30 2025 by rpki-client