Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/7b468ffc-7e24-3f4e-aae4-e8762b3587a1.roa
File:                     7b468ffc-7e24-3f4e-aae4-e8762b3587a1.roa (raw, json)
Hash identifier:          D/ZF6tvsS5yHO7tqNYYzsNDu2qLGLC20fVs7zbEgayo=
Subject key identifier:   E7:9F:CC:14:B6:C2:50:0A:3E:7D:D9:6D:C8:3F:FF:0B:2D:CB:2C:E0
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F43285849B9AA042298103CE0F4647680
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/7b468ffc-7e24-3f4e-aae4-e8762b3587a1.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     19281
IP address blocks:        199.249.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:04:22:98:10:3c:e0:f4:64:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=30e8f946-73f3-4ec4-9b64-f6ec598f5d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:0e:26:20:37:2c:5e:a0:1d:60:f6:3f:8c:
                    e8:6c:65:fb:d9:69:19:a2:c8:2a:2e:0a:0d:a7:08:
                    e9:8a:13:69:20:00:d1:c2:93:82:65:2c:28:83:2d:
                    3d:bd:06:5f:d4:ad:3a:7c:00:aa:21:f5:af:60:f0:
                    77:4f:16:36:50:6d:be:9f:cd:3c:62:f0:92:5a:25:
                    6b:2f:0b:39:57:48:c6:2d:16:9a:f1:cd:c3:35:cd:
                    c7:d6:59:84:d7:f3:bf:43:88:9a:6b:5e:07:ef:cd:
                    8f:f0:03:3a:79:44:8a:b9:11:84:4a:6f:ad:81:35:
                    7e:32:76:a9:f7:e1:20:2f:93:e8:cc:6e:5d:c5:a0:
                    67:30:56:a7:9e:fd:9f:4d:4e:e1:23:07:08:9c:d1:
                    37:8a:ac:2e:60:4e:0a:c9:b9:b0:bf:4c:39:f6:69:
                    99:60:b6:82:13:f0:a3:47:c8:0e:8f:f1:b9:9e:db:
                    da:04:7f:19:47:93:e5:d8:db:e7:a0:e5:be:7d:24:
                    86:a0:fb:23:a2:cb:62:1a:e1:46:8d:42:d9:29:e8:
                    25:ba:09:3d:3e:80:5e:7b:6a:e2:82:7e:93:7b:89:
                    49:b0:20:1b:33:88:70:1b:0e:f9:28:b2:fb:e6:2b:
                    91:f5:2e:a2:86:f5:88:75:be:e4:fa:26:26:40:95:
                    c2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9F:CC:14:B6:C2:50:0A:3E:7D:D9:6D:C8:3F:FF:0B:2D:CB:2C:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/7b468ffc-7e24-3f4e-aae4-e8762b3587a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e4:4e:37:e9:31:d7:fa:21:65:88:e0:f6:d2:92:36:59:cb:
         c1:a0:fb:63:15:57:5f:f0:64:83:32:64:5b:e9:e4:6b:54:fa:
         0b:6d:1b:84:c5:cd:19:6e:a7:fd:ae:8d:24:8d:5c:5b:fa:3c:
         cb:7d:04:25:db:5a:eb:0d:e6:04:7b:3e:f3:ac:3b:c7:ff:d1:
         cd:de:ff:8a:cc:4b:f2:c7:ec:c1:7d:7f:ed:61:40:9a:58:82:
         e2:56:31:c1:77:2b:18:dc:5a:68:e5:c6:ca:3d:e2:53:29:5a:
         a8:7a:00:5f:78:59:80:c9:3c:0b:a1:96:0d:a0:71:bf:8b:21:
         2d:b1:06:ef:d9:e8:24:12:85:b1:e7:77:9e:36:d6:19:19:5a:
         91:86:75:85:ab:d5:e8:30:ac:8c:b9:79:fd:e4:d4:be:45:36:
         5e:75:15:d7:97:4f:39:64:aa:15:15:f0:b3:29:10:96:5a:34:
         96:52:00:ed:7f:c5:50:6b:d0:ff:77:16:3a:a8:b5:f9:c8:1f:
         05:60:bc:01:0d:b4:95:6d:42:13:51:58:ec:b7:79:52:85:a1:
         7c:9a:b8:0a:43:f0:0c:c9:b6:6f:11:e7:49:b9:ab:fd:e3:9c:
         e4:b7:0a:b0:cc:18:93:ab:27:06:c5:6a:da:dc:a6:94:b7:d3:
         77:38:38:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgQimBA84PRkdoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThmY2VmMzEtYmM2MS00MjE3LWE2NDgtMmQ1YmIwMGM5
M2E5MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk
MzBlOGY5NDYtNzNmMy00ZWM0LTliNjQtZjZlYzU5OGY1ZDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqoOJiA3LF6gHWD2P4zobGX72WkZosgqLgoN
pwjpihNpIADRwpOCZSwogy09vQZf1K06fACqIfWvYPB3TxY2UG2+n808YvCSWiVr
Lws5V0jGLRaa8c3DNc3H1lmE1/O/Q4iaa14H782P8AM6eUSKuRGESm+tgTV+Mnap
9+EgL5PozG5dxaBnMFannv2fTU7hIwcInNE3iqwuYE4Kybmwv0w59mmZYLaCE/Cj
R8gOj/G5ntvaBH8ZR5Pl2NvnoOW+fSSGoPsjostiGuFGjULZKeglugk9PoBee2ri
gn6Te4lJsCAbM4hwGw75KLL75iuR9S6ihvWIdb7k+iYmQJXCzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOefzBS2wlAKPn3Zbcg//wstyyzgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZj
ZWYzMS1iYzYxLTQyMTctYTY0OC0yZDViYjAwYzkzYTkvN2I0NjhmZmMtN2UyNC0z
ZjRlLWFhZTQtZTg3NjJiMzU4N2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNThmY2VmMzEtYmM2MS00MjE3LWE2
NDgtMmQ1YmIwMGM5M2E5LzU4ZmNlZjMxLWJjNjEtNDIxNy1hNjQ4LTJkNWJiMDBj
OTNhOS5jcmwwHwYDVR0jBBgwFoAUVLP5RXnTuHPWUn9Y82AjBARQS2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZjZWYzMS1iYzYxLTQyMTctYTY0OC0yZDVi
YjAwYzkzYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/n/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzkTjfpMdf6IWWI4PbSkjZZy8Gg+2MVV1/wZIMyZFvp5GtU+gttG4TF
zRlup/2ujSSNXFv6PMt9BCXbWusN5gR7PvOsO8f/0c3e/4rMS/LH7MF9f+1hQJpY
guJWMcF3KxjcWmjlxso94lMpWqh6AF94WYDJPAuhlg2gcb+LIS2xBu/Z6CQShbHn
d5421hkZWpGGdYWr1egwrIy5ef3k1L5FNl51FdeXTzlkqhUV8LMpEJZaNJZSAO1/
xVBr0P93FjqotfnIHwVgvAENtJVtQhNRWOy3eVKFoXyauApD8AzJtm8R50m5q/3j
nOS3CrDMGJOrJwbFatrcppS303c4OGY=
-----END CERTIFICATE-----
Generated at Tue Jul 1 02:04:35 2025 by rpki-client