Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/3a79f7e7-0f8c-3285-b759-432ce469fcdf.roa
File:                     3a79f7e7-0f8c-3285-b759-432ce469fcdf.roa (raw, json)
Hash identifier:          9yBfIQNZOuy/3KkiWI6nInOe8DktmnbMn7dTrLzzIkA=
Subject key identifier:   E3:D8:FF:9B:23:6D:DA:57:3B:B1:55:57:87:C7:73:D0:4E:12:C6:0A
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F43285849BDDA26A6EDBE5868981A9480
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/3a79f7e7-0f8c-3285-b759-432ce469fcdf.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     14977
IP address blocks:        146.166.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:26:a6:ed:be:58:68:98:1a:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=4bd72bda-0b46-468b-bf1a-3750c38c3b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:de:50:2d:78:49:41:3a:ec:fc:e9:5b:ac:
                    68:af:b7:20:07:45:18:14:a9:c6:47:4d:9d:d6:7c:
                    77:1a:21:b9:9c:01:ad:9b:f4:2e:e3:cb:12:d5:4d:
                    e0:74:eb:f1:2e:e6:da:79:79:ce:2d:4c:6c:8e:c2:
                    16:e3:41:e2:21:7e:df:39:02:ff:b9:0d:89:c6:90:
                    d4:de:63:2d:3a:cf:c1:00:e0:c4:10:55:18:58:e2:
                    e5:28:d2:cd:fc:9b:ae:7e:7f:9f:ff:aa:1c:d9:8b:
                    84:86:89:2a:25:d4:1f:e8:16:78:fe:f7:57:77:74:
                    dd:4b:81:57:87:8a:bb:8b:59:35:11:ad:83:e8:9c:
                    cc:41:f1:78:9d:d8:0c:15:8b:7b:e0:3d:d5:6b:b9:
                    c1:c0:82:1f:bb:9f:37:7e:f4:e4:88:79:5a:a8:ee:
                    25:42:af:46:06:6c:bf:dd:a3:9e:ac:f8:d6:45:b9:
                    84:b9:45:2a:a3:e6:68:41:aa:2f:16:d8:8a:14:12:
                    a8:f4:3a:8d:1e:8c:53:73:8e:cb:1f:be:ff:35:8a:
                    6c:c7:84:20:2b:30:3c:96:50:94:5f:4f:28:d3:7f:
                    f2:c6:5a:18:96:f7:12:0c:19:c2:7f:94:56:ab:d9:
                    28:e2:f5:8f:18:ee:27:4b:77:ab:1b:5f:2a:bf:78:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:FF:9B:23:6D:DA:57:3B:B1:55:57:87:C7:73:D0:4E:12:C6:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/3a79f7e7-0f8c-3285-b759-432ce469fcdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:45:69:d5:69:4c:41:3d:ce:85:68:4d:41:35:f7:f2:5d:23:
         72:b3:f2:c8:70:c1:d3:70:45:ff:bf:a8:c9:2c:b8:b3:30:00:
         fc:5a:31:7a:7c:97:37:72:78:f6:3e:53:96:77:fb:a0:c6:9f:
         af:05:56:ca:32:a5:0a:3f:38:00:6f:41:5b:60:06:85:b9:8b:
         28:aa:6b:19:db:8b:d7:e4:e0:2a:71:92:85:d2:aa:49:3d:3b:
         5a:db:8e:8b:56:6f:27:9a:11:1c:52:ae:09:18:25:fc:ff:1a:
         0e:6c:4e:72:59:c4:f9:a4:e9:17:02:58:68:3c:47:93:b3:d2:
         20:32:20:92:02:ce:ea:33:c2:39:83:d2:b1:e9:f3:5f:1c:f3:
         07:dd:7f:85:a9:76:c3:a0:9d:4d:76:f3:42:d6:41:94:14:40:
         11:97:a7:6a:b6:11:10:ca:cb:fc:0c:7a:13:de:8e:b7:9a:ad:
         93:b6:03:ec:06:1f:61:76:09:04:6a:1d:14:a2:67:f6:99:12:
         aa:ad:69:e6:42:74:fe:d9:68:70:75:1c:f9:00:a4:ed:f5:20:
         36:09:5f:02:73:37:c0:f8:24:51:56:87:f1:97:5e:53:25:c6:
         3d:ba:fa:9a:69:89:ce:ed:2a:81:be:0a:ef:55:2d:1e:5c:ed:
         c9:b3:af:12
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEm92iam7b5YaJgalIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm
ZDhmMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk
NGJkNzJiZGEtMGI0Ni00NjhiLWJmMWEtMzc1MGMzOGMzYjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDLeUC14SUE67PzpW6xor7cgB0UYFKnGR02d
1nx3GiG5nAGtm/Qu48sS1U3gdOvxLubaeXnOLUxsjsIW40HiIX7fOQL/uQ2JxpDU
3mMtOs/BAODEEFUYWOLlKNLN/Juufn+f/6oc2YuEhokqJdQf6BZ4/vdXd3TdS4FX
h4q7i1k1Ea2D6JzMQfF4ndgMFYt74D3Va7nBwIIfu583fvTkiHlaqO4lQq9GBmy/
3aOerPjWRbmEuUUqo+ZoQaovFtiKFBKo9DqNHoxTc47LH77/NYpsx4QgKzA8llCU
X08o03/yxloYlvcSDBnCf5RWq9ko4vWPGO4nS3erG18qv3ioRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOPY/5sjbdpXO7FVV4fHc9BOEsYKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5
MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvM2E3OWY3ZTctMGY4Yy0z
Mjg1LWI3NTktNDMyY2U0NjlmY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx
MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz
ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz
MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkqYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAxEVp1WlMQT3OhWhNQTX38l0jcrPyyHDB03BF/7+oySy4szAA/FoxenyX
N3J49j5Tlnf7oMafrwVWyjKlCj84AG9BW2AGhbmLKKprGduL1+TgKnGShdKqST07
WtuOi1ZvJ5oRHFKuCRgl/P8aDmxOclnE+aTpFwJYaDxHk7PSIDIgkgLO6jPCOYPS
senzXxzzB91/hal2w6CdTXbzQtZBlBRAEZenarYREMrL/Ax6E96Ot5qtk7YD7AYf
YXYJBGodFKJn9pkSqq1p5kJ0/tlocHUc+QCk7fUgNglfAnM3wPgkUVaH8ZdeUyXG
Pbr6mmmJzu0qgb4K71UtHlztybOvEg==
-----END CERTIFICATE-----
Generated at Sat May 10 06:27:23 2025 by rpki-client