Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f7580811-5ea7-31f7-a991-c96a57af8a8c.roa
File:                     f7580811-5ea7-31f7-a991-c96a57af8a8c.roa (raw, json)
Hash identifier:          McA/5V0pxmbfpfJoXJDSchKaZgRcpCFkBmIpy9Wnt5M=
Subject key identifier:   05:3D:4C:F6:C3:01:CE:EF:A7:59:27:6A:A4:1F:A2:DE:6B:19:2D:4E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A427584E0E34ABB911DE79180
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f7580811-5ea7-31f7-a991-c96a57af8a8c.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        170.114.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:84:e0:e3:4a:bb:91:1d:e7:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=e39bff89-cade-498c-b188-15939281bc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:1a:f0:ae:93:4a:7a:df:fe:33:09:9d:ff:
                    d4:41:d9:62:af:0a:a3:ac:a8:8d:87:10:af:0a:c1:
                    f6:01:d0:03:98:61:35:55:4f:b6:e0:ab:92:44:11:
                    0e:58:be:00:95:1f:66:53:5e:23:a4:8a:f6:70:95:
                    27:30:3c:28:e5:77:13:a3:70:d9:3d:11:7c:cf:02:
                    64:19:f0:78:f9:ef:29:b2:db:8c:2d:d4:ae:65:a5:
                    9d:bb:88:f4:a6:14:cc:e0:2f:c1:57:25:c6:08:a7:
                    df:d5:e0:85:35:f1:9c:2c:26:b9:63:67:71:5c:53:
                    e9:90:d9:29:92:30:b2:97:4f:a6:ac:11:39:9e:63:
                    58:63:43:86:3e:99:e9:27:cb:fc:9c:5c:1c:86:e2:
                    b7:21:1b:f4:d5:22:60:01:7a:ee:42:63:5b:3a:a9:
                    19:cd:1b:56:8d:27:fc:49:24:c6:57:5a:01:9e:b9:
                    4f:01:71:81:82:15:47:4c:66:65:d7:bf:ee:44:96:
                    16:5d:01:b1:49:f1:62:f3:9c:27:e9:61:9a:b2:f2:
                    f9:03:5c:10:b1:37:f9:94:e1:e5:ec:84:e7:ed:e0:
                    41:1a:d0:80:d1:7f:9b:1b:f5:31:52:d5:32:48:6d:
                    42:89:bd:9b:66:3a:e3:4f:40:6d:16:7a:b2:a9:61:
                    9b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3D:4C:F6:C3:01:CE:EF:A7:59:27:6A:A4:1F:A2:DE:6B:19:2D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f7580811-5ea7-31f7-a991-c96a57af8a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:da:f9:8b:17:ef:b8:9f:4f:77:a0:87:cc:1a:19:4c:a5:
         25:eb:7e:48:8e:63:37:3e:01:12:ca:c4:75:e4:6c:9b:b5:30:
         9f:a2:a9:58:e1:84:5c:4e:2b:2c:31:05:5c:69:f9:d4:99:42:
         09:f4:97:ae:e6:cb:fa:0d:c6:26:50:23:28:ca:b0:7a:31:94:
         0f:b3:72:1f:1e:e5:a2:9c:4e:50:25:2d:b3:0a:8d:72:d3:6d:
         3c:94:55:b4:da:e3:1b:48:52:3b:ce:90:df:f9:66:c6:ab:c4:
         e1:ce:3c:c8:57:34:3a:e8:ea:bc:d5:aa:d2:6b:6a:37:ec:66:
         fe:a9:f3:42:2a:18:3b:cc:51:42:e1:13:38:f7:e5:14:38:b7:
         a5:80:83:70:71:68:55:81:43:df:5a:e1:b9:e7:bc:b4:c1:ec:
         bb:3e:ec:7f:17:f1:7d:4c:09:4b:8a:c6:b9:a4:5e:ba:c7:c1:
         e5:12:20:54:c4:6c:86:c3:de:59:1b:8d:12:6c:52:1b:58:7a:
         7d:92:5c:67:0d:d0:d1:11:bd:cc:65:fa:8c:1c:38:3c:7c:29:
         19:85:23:cc:72:95:af:89:3c:fb:e4:19:a1:1b:40:0d:e6:79:
         96:32:6f:b0:87:0f:41:a2:d2:fd:c0:5f:35:3a:64:40:52:f5:
         dc:fd:b8:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYTg40q7kR3nkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk
ZTM5YmZmODktY2FkZS00OThjLWIxODgtMTU5MzkyODFiYzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0psa8K6TSnrf/jMJnf/UQdlirwqjrKiNhxCv
CsH2AdADmGE1VU+24KuSRBEOWL4AlR9mU14jpIr2cJUnMDwo5XcTo3DZPRF8zwJk
GfB4+e8pstuMLdSuZaWdu4j0phTM4C/BVyXGCKff1eCFNfGcLCa5Y2dxXFPpkNkp
kjCyl0+mrBE5nmNYY0OGPpnpJ8v8nFwchuK3IRv01SJgAXruQmNbOqkZzRtWjSf8
SSTGV1oBnrlPAXGBghVHTGZl17/uRJYWXQGxSfFi85wn6WGasvL5A1wQsTf5lOHl
7ITn7eBBGtCA0X+bG/UxUtUySG1Cib2bZjrjT0BtFnqyqWGb9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAU9TPbDAc7vp1knaqQfot5rGS1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjc1ODA4MTEtNWVhNy0z
MWY3LWE5OTEtYzk2YTU3YWY4YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAu32vmLF++4n093oIfMGhlMpSXrfkiOYzc+ARLKxHXkbJu1MJ+iqVjh
hFxOKywxBVxp+dSZQgn0l67my/oNxiZQIyjKsHoxlA+zch8e5aKcTlAlLbMKjXLT
bTyUVbTa4xtIUjvOkN/5ZsarxOHOPMhXNDro6rzVqtJrajfsZv6p80IqGDvMUULh
Ezj35RQ4t6WAg3BxaFWBQ99a4bnnvLTB7Ls+7H8X8X1MCUuKxrmkXrrHweUSIFTE
bIbD3lkbjRJsUhtYen2SXGcN0NERvcxl+owcODx8KRmFI8xyla+JPPvkGaEbQA3m
eZYyb7CHD0Gi0v3AXzU6ZEBS9dz9uN0=
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:24:24 2025 by rpki-client