Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b709961-b94e-3153-8311-07728bdc145d.roa
File:                     7b709961-b94e-3153-8311-07728bdc145d.roa (raw, json)
Hash identifier:          pYdy7MtoJIn34IbCNISxG0f9x4I8fA1DD+r4Qlnt11c=
Subject key identifier:   EF:5C:9A:CA:9C:A3:CB:3C:DF:66:8E:6D:1C:98:35:29:7B:3E:0B:D2
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849B149F772B7E0AD5ABBB70180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b709961-b94e-3153-8311-07728bdc145d.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     7029
IP address blocks:        67.224.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f7:72:b7:e0:ad:5a:bb:b7:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=3074a470-73d9-417e-baa2-a2fb04b4b0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:cd:7c:f2:b0:56:80:ef:16:7e:60:c2:0e:
                    0c:9e:54:d8:f7:61:a9:6f:0f:5e:12:52:fa:61:61:
                    f6:28:c7:6a:12:13:41:8a:75:8b:45:56:5a:62:69:
                    6c:e0:c9:36:d2:11:e3:2a:b0:48:72:f2:78:cb:de:
                    b7:0e:7d:bd:ac:38:38:0d:57:67:c6:6c:8b:7a:6b:
                    c0:f0:11:24:52:21:86:73:42:9f:eb:04:1a:8a:43:
                    bd:01:c3:59:61:32:8b:0c:5f:b9:94:b9:97:13:46:
                    e4:7c:7c:27:00:65:38:3e:56:bd:74:6c:d5:b7:36:
                    bb:6f:e4:dd:56:80:70:b0:f2:0a:4f:03:72:18:0c:
                    b4:33:88:62:aa:02:98:2b:56:45:ca:0c:fe:ad:78:
                    52:2d:8e:2c:22:9f:e8:7a:76:36:3d:70:36:68:41:
                    8c:f3:a7:d0:02:58:52:ff:72:22:a0:bc:51:b6:b9:
                    5e:13:db:59:b4:48:ea:56:21:be:78:45:3e:7b:7a:
                    bb:1a:d4:c1:e4:02:35:71:5d:d7:47:be:57:61:55:
                    94:47:67:2c:e7:f9:82:03:eb:a7:0e:72:8a:af:80:
                    e7:0b:48:b0:37:68:21:88:07:dd:a1:52:42:ee:f2:
                    cb:fe:fb:d3:8f:45:ce:da:f1:d4:94:f9:01:39:4a:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5C:9A:CA:9C:A3:CB:3C:DF:66:8E:6D:1C:98:35:29:7B:3E:0B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b709961-b94e-3153-8311-07728bdc145d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.224.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:4f:98:28:28:3f:d0:62:84:5f:7e:c7:bd:90:e1:f7:40:77:
         e7:fe:91:ab:15:d9:6e:a1:f0:62:1f:d6:1f:84:d1:f7:dc:f5:
         af:cf:6b:b8:eb:92:b1:a7:ed:82:f7:c1:cb:0b:e4:14:85:df:
         27:8d:d6:b6:d9:db:31:77:d2:d7:92:3f:10:fd:36:62:df:b7:
         bf:28:dd:82:10:48:01:3f:7a:d5:e6:a5:49:ed:25:f8:3d:01:
         cf:51:6d:58:b8:da:c1:41:01:44:26:16:99:27:2f:6a:83:03:
         75:4f:8d:9f:ef:69:b5:ce:c6:46:0e:dc:9f:6a:8c:22:df:5f:
         46:56:d9:87:02:d8:37:77:3d:bc:c3:bd:cd:1a:cc:b4:4d:46:
         97:df:22:af:c3:6d:2a:eb:ff:5f:9c:ba:34:42:e3:34:1b:65:
         d4:1a:ae:5d:6a:fe:be:9e:5d:f7:c2:e2:93:70:31:03:15:a3:
         4a:e0:1f:e4:19:e4:fa:15:62:aa:75:8d:c6:e9:22:64:a9:2c:
         06:b7:67:08:b2:91:d5:ec:b7:d5:15:27:4f:a4:d8:ab:e9:f3:
         d4:eb:79:d6:c1:3c:44:04:5e:15:88:ee:87:88:9d:9f:b3:00:
         dc:42:06:99:11:2f:c1:7c:6b:b9:d0:5e:a8:e3:fa:5f:ef:21:
         da:1f:08:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfdyt+CtWru3AYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
MzA3NGE0NzAtNzNkOS00MTdlLWJhYTItYTJmYjA0YjRiMGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY3NfPKwVoDvFn5gwg4MnlTY92Gpbw9eElL6
YWH2KMdqEhNBinWLRVZaYmls4Mk20hHjKrBIcvJ4y963Dn29rDg4DVdnxmyLemvA
8BEkUiGGc0Kf6wQaikO9AcNZYTKLDF+5lLmXE0bkfHwnAGU4Pla9dGzVtza7b+Td
VoBwsPIKTwNyGAy0M4hiqgKYK1ZFygz+rXhSLY4sIp/oenY2PXA2aEGM86fQAlhS
/3IioLxRtrleE9tZtEjqViG+eEU+e3q7GtTB5AI1cV3XR75XYVWUR2cs5/mCA+un
DnKKr4DnC0iwN2ghiAfdoVJC7vLL/vvTj0XO2vHUlPkBOUos4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO9cmsqco8s832aObRyYNSl7PgvSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2I3MDk5NjEtYjk0ZS0z
MTUzLTgzMTEtMDc3MjhiZGMxNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+AAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFPmCgoP9BihF9+x72Q4fdAd+f+kasV2W6h8GIf1h+E0ffc9a/Pa7jr
krGn7YL3wcsL5BSF3yeN1rbZ2zF30teSPxD9NmLft78o3YIQSAE/etXmpUntJfg9
Ac9RbVi42sFBAUQmFpknL2qDA3VPjZ/vabXOxkYO3J9qjCLfX0ZW2YcC2Dd3PbzD
vc0azLRNRpffIq/DbSrr/1+cujRC4zQbZdQarl1q/r6eXffC4pNwMQMVo0rgH+QZ
5PoVYqp1jcbpImSpLAa3ZwiykdXst9UVJ0+k2Kvp89TredbBPEQEXhWI7oeInZ+z
ANxCBpkRL8F8a7nQXqjj+l/vIdofCDQ=
-----END CERTIFICATE-----
Generated at Sat May 10 18:56:45 2025 by rpki-client