Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa
File:                     de7438ce-fca5-31f5-9f3b-71378f8444ba.roa (raw, json)
Hash identifier:          qX9mDONPPX7dnNSU87N7nmpC6/8hCZBN/Tu4ZUz7u3Y=
Subject key identifier:   C1:A6:87:9E:DC:FD:30:83:2D:26:D8:3E:57:72:7F:33:BC:A5:8B:FC
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584A374ACA07149077358E659FC0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     19795
IP address blocks:        129.33.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:ca:07:14:90:77:35:8e:65:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=350a0fd7-6a44-4228-a12f-b9adb7725824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:01:e6:73:04:09:de:94:de:92:df:a9:b9:
                    f8:b2:b4:7c:9c:10:8a:15:f6:76:60:ab:df:49:83:
                    ac:fe:49:db:af:d2:e2:3a:f2:de:f2:53:9b:d4:1b:
                    32:0d:b1:ae:b6:d1:4c:93:bd:45:a5:fd:3d:af:4a:
                    fe:6c:aa:0a:3b:41:8b:85:fc:1b:2b:9f:a4:36:7d:
                    2b:ec:33:18:97:18:47:31:fe:8a:7c:1b:59:ac:d8:
                    fa:26:2b:69:6b:84:d2:cc:c0:a9:3b:e7:bf:6b:42:
                    fc:8e:a0:ab:7a:d9:90:42:a6:f7:8d:d0:ef:83:e9:
                    ea:65:cc:e3:7f:bb:1f:45:09:64:54:6d:ab:ae:70:
                    ca:d8:72:5b:93:1c:3a:19:0a:93:6d:cb:50:df:78:
                    d4:c9:68:b3:b3:77:17:a2:89:2a:c8:db:dd:a7:a3:
                    a3:50:ad:70:12:3f:17:ed:1c:e2:5b:33:bb:13:62:
                    fd:09:e6:36:6d:9c:ce:6b:97:36:39:97:91:8f:1c:
                    5a:fa:6e:e4:88:08:05:3f:d1:a0:27:06:07:3d:c1:
                    6d:77:68:71:3a:93:37:8c:59:89:1f:c6:e9:19:69:
                    06:e3:5b:05:d4:45:db:56:4a:3c:3e:0f:3c:22:08:
                    2f:31:c4:8e:a1:7f:d2:9a:ec:07:35:45:ab:2f:59:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A6:87:9E:DC:FD:30:83:2D:26:D8:3E:57:72:7F:33:BC:A5:8B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.33.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:95:1d:45:36:7a:20:56:22:87:ce:a9:54:7d:29:78:98:a7:
         c5:2d:db:7d:13:fb:f5:6c:04:32:65:32:99:3a:09:a2:fc:29:
         00:bf:35:ac:1e:a9:f5:b2:0a:58:0a:87:cf:c6:2f:78:58:7b:
         22:60:ab:ff:56:93:4a:49:b9:f1:77:0e:83:b7:6b:fd:8f:13:
         b7:c9:22:a8:ea:03:eb:39:13:cf:66:4b:ff:e0:1e:71:e4:49:
         05:35:c0:b0:cd:78:9d:e6:b4:e6:95:a9:c2:b7:08:12:89:a4:
         d5:2a:cf:bf:ce:6a:17:e1:b9:63:30:83:e6:b0:b0:af:86:7b:
         dc:c0:1c:08:6f:a9:84:aa:7e:5d:67:4d:25:e6:27:aa:0b:49:
         90:36:d7:86:bc:17:f1:bb:b3:cf:58:0f:19:bb:0b:e2:14:94:
         04:a3:28:c0:ab:46:1e:31:ee:8a:1f:d6:72:ad:88:e0:25:b7:
         16:a2:99:55:40:94:f2:4f:3c:a2:7b:df:bd:01:f5:5d:0c:65:
         b2:71:a8:92:06:a4:9b:64:e6:6f:63:52:bd:a3:6e:72:1f:e6:
         a7:62:7c:96:1c:91:15:36:ac:a7:e9:54:6e:2a:54:e2:a3:7d:
         90:e6:4f:a5:4c:39:a3:ca:2a:05:41:ba:85:96:e8:fb:61:60:
         e3:9f:ab:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsoHFJB3NY5ln8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
MzUwYTBmZDctNmE0NC00MjI4LWExMmYtYjlhZGI3NzI1ODI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbgB5nMECd6U3pLfqbn4srR8nBCKFfZ2YKvf
SYOs/knbr9LiOvLe8lOb1BsyDbGuttFMk71Fpf09r0r+bKoKO0GLhfwbK5+kNn0r
7DMYlxhHMf6KfBtZrNj6Jitpa4TSzMCpO+e/a0L8jqCretmQQqb3jdDvg+nqZczj
f7sfRQlkVG2rrnDK2HJbkxw6GQqTbctQ33jUyWizs3cXookqyNvdp6OjUK1wEj8X
7RziWzO7E2L9CeY2bZzOa5c2OZeRjxxa+m7kiAgFP9GgJwYHPcFtd2hxOpM3jFmJ
H8bpGWkG41sF1EXbVko8Pg88IggvMcSOoX/SmuwHNUWrL1nqLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGmh57c/TCDLSbYPldyfzO8pYv8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZGU3NDM4Y2UtZmNhNS0z
MWY1LTlmM2ItNzEzNzhmODQ0NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmVHUU2eiBWIofOqVR9KXiYp8Ut230T+/VsBDJlMpk6CaL8KQC/Nawe
qfWyClgKh8/GL3hYeyJgq/9Wk0pJufF3DoO3a/2PE7fJIqjqA+s5E89mS//gHnHk
SQU1wLDNeJ3mtOaVqcK3CBKJpNUqz7/OahfhuWMwg+awsK+Ge9zAHAhvqYSqfl1n
TSXmJ6oLSZA214a8F/G7s89YDxm7C+IUlASjKMCrRh4x7oof1nKtiOAltxaimVVA
lPJPPKJ7370B9V0MZbJxqJIGpJtk5m9jUr2jbnIf5qdifJYckRU2rKfpVG4qVOKj
fZDmT6VMOaPKKgVBuoWW6PthYOOfq98=
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:11:39 2025 by rpki-client