Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1dd9d182-7927-3450-bca6-685e2b71e4f6.roa
File:                     1dd9d182-7927-3450-bca6-685e2b71e4f6.roa (raw, json)
Hash identifier:          WWLYv8mtT1vGLT0g9FI5VWhsf/Tqkm1w4CsmWHlfPaY=
Subject key identifier:   60:C4:F5:CA:A9:08:3E:31:30:82:07:69:6F:BB:27:51:51:FE:CF:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849B6DF5E3BF76FE799A854EF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1dd9d182-7927-3450-bca6-685e2b71e4f6.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     7342
IP address blocks:        199.7.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5e:3b:f7:6f:e7:99:a8:54:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=bc30024a-f874-4b85-98ce-00f1e9d32437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:41:51:7b:10:b5:1f:70:d7:2f:68:bd:ce:
                    2c:91:10:08:b9:5c:7e:73:b1:4f:59:72:14:00:11:
                    28:e7:fd:64:31:cf:2f:80:b8:22:3b:84:e7:11:ed:
                    92:cc:89:b9:6a:96:c1:cd:20:cd:a2:cd:a6:9f:61:
                    b3:7f:f9:dc:a7:83:02:c0:10:d7:a5:f7:4d:9f:49:
                    17:97:8a:39:41:73:22:78:1f:26:80:11:3a:80:62:
                    8a:b7:0d:ed:4c:4e:58:4b:d3:b7:33:10:82:24:83:
                    5e:f6:41:83:c2:83:02:68:ac:ec:f3:af:5f:a5:87:
                    bd:bf:45:f2:58:06:be:59:ba:8f:27:20:a4:ad:dd:
                    d8:b1:12:17:51:2b:87:5f:d8:e7:fb:d8:6b:ed:79:
                    ac:0f:da:22:03:1a:7c:c9:86:ab:48:97:39:d1:73:
                    22:97:a1:20:e6:c0:e4:9d:6a:54:43:65:1d:ff:f4:
                    eb:1b:01:a4:f7:12:49:5e:e5:78:2c:46:9a:7d:96:
                    52:9b:a6:48:24:7f:31:24:c3:00:ea:6b:66:4c:00:
                    ca:0f:59:eb:41:d6:1e:f2:db:a1:9e:4f:13:f9:ab:
                    e9:8c:8e:a6:80:0a:cf:f0:9f:af:1e:de:82:ed:66:
                    b2:3d:de:ba:08:6b:4e:dd:8a:20:34:ad:d7:d7:c8:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C4:F5:CA:A9:08:3E:31:30:82:07:69:6F:BB:27:51:51:FE:CF:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1dd9d182-7927-3450-bca6-685e2b71e4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:35:be:4d:48:69:94:79:01:52:52:dd:3b:74:0b:95:b5:55:
         39:dc:48:50:53:12:49:5d:a5:91:59:18:af:ac:63:5f:70:44:
         ba:6c:d5:e7:1c:31:08:a1:f8:2a:68:ca:4e:4a:97:cb:e2:a9:
         b7:ab:92:62:4b:83:fe:63:03:6d:da:f4:8a:4a:91:c5:e3:eb:
         49:8d:a3:ee:a8:46:2b:d4:76:4a:df:bd:1c:0a:95:15:e7:c4:
         55:a2:ad:da:a1:93:dd:79:24:ee:c2:33:f1:e4:cc:e4:1f:71:
         34:a5:da:38:a9:07:ed:70:68:fc:bb:fd:4b:0e:d8:1a:9d:a7:
         71:98:7d:40:1d:87:66:36:73:3f:f1:52:c2:4d:e6:d3:05:81:
         1e:25:e9:47:fa:7d:ee:8a:81:12:f0:9a:39:2d:4d:4a:fc:46:
         13:b1:2b:78:df:9f:0d:c0:9f:7a:3e:36:21:2a:8c:83:79:05:
         83:05:c2:1c:e4:8e:44:77:4b:1f:7e:2e:05:dc:3d:ce:09:8b:
         31:b5:05:b6:e2:1e:88:6c:d7:fa:b6:8e:d0:f9:f3:3e:95:c8:
         dd:eb:c2:4c:85:fb:f4:83:b5:87:0a:8f:9d:29:7f:01:79:fa:
         26:56:46:8a:39:fb:21:ae:9c:cb:05:43:99:21:00:ed:4c:5c:
         46:7d:c2:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2314792/nmahU7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk
YmMzMDAyNGEtZjg3NC00Yjg1LTk4Y2UtMDBmMWU5ZDMyNDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOlBUXsQtR9w1y9ovc4skRAIuVx+c7FPWXIU
ABEo5/1kMc8vgLgiO4TnEe2SzIm5apbBzSDNos2mn2Gzf/ncp4MCwBDXpfdNn0kX
l4o5QXMieB8mgBE6gGKKtw3tTE5YS9O3MxCCJINe9kGDwoMCaKzs869fpYe9v0Xy
WAa+WbqPJyCkrd3YsRIXUSuHX9jn+9hr7XmsD9oiAxp8yYarSJc50XMil6Eg5sDk
nWpUQ2Ud//TrGwGk9xJJXuV4LEaafZZSm6ZIJH8xJMMA6mtmTADKD1nrQdYe8tuh
nk8T+avpjI6mgArP8J+vHt6C7WayPd66CGtO3YogNK3X18hicwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDE9cqpCD4xMIIHaW+7J1FR/s9yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWRkOWQxODItNzkyNy0z
NDUwLWJjYTYtNjg1ZTJiNzFlNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwc7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAc1vk1IaZR5AVJS3Tt0C5W1VTncSFBTEkldpZFZGK+sY19wRLps1ecc
MQih+Cpoyk5Kl8viqberkmJLg/5jA23a9IpKkcXj60mNo+6oRivUdkrfvRwKlRXn
xFWirdqhk915JO7CM/HkzOQfcTSl2jipB+1waPy7/UsO2Bqdp3GYfUAdh2Y2cz/x
UsJN5tMFgR4l6Uf6fe6KgRLwmjktTUr8RhOxK3jfnw3An3o+NiEqjIN5BYMFwhzk
jkR3Sx9+LgXcPc4JizG1BbbiHohs1/q2jtD58z6VyN3rwkyF+/SDtYcKj50pfwF5
+iZWRoo5+yGunMsFQ5khAO1MXEZ9whQ=
-----END CERTIFICATE-----
Generated at Sun May 11 00:57:20 2025 by rpki-client