Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/b3842d34-f638-3a85-99e9-9c2e2f3422d8.roa
File:                     b3842d34-f638-3a85-99e9-9c2e2f3422d8.roa (raw, json)
Hash identifier:          EQLICeU8IkzCSSTj5GYjF/27sW5sKNV0UK/OO0r2PhM=
Subject key identifier:   55:58:E5:A6:98:D4:D8:C8:07:41:D0:12:5C:C8:F3:EB:3B:5D:C9:6D
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F43285849BC74A92C0C3B5B798F9AF180
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/b3842d34-f638-3a85-99e9-9c2e2f3422d8.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     32277
IP address blocks:        206.186.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:a9:2c:0c:3b:5b:79:8f:9a:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=072a8ba6-bfb9-4df2-8722-006923f34667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:e0:f2:79:82:7d:c5:28:a2:94:14:f4:cb:
                    15:50:92:24:76:b3:49:93:02:de:2b:ec:8b:06:11:
                    d1:37:20:76:18:3a:4f:7e:a8:be:fa:d5:13:4a:07:
                    ed:a0:93:f2:4a:88:98:ba:21:00:55:95:6d:dc:88:
                    da:72:dd:04:de:a7:20:2b:b3:bb:8a:31:29:f1:79:
                    b5:6d:3c:fc:23:f7:5d:f4:fa:20:c2:8b:56:0a:5f:
                    8e:29:f3:6d:80:dd:5c:22:6b:ed:bf:70:cd:9a:c8:
                    d1:64:68:45:1c:b3:ec:d7:40:1c:65:a2:a8:be:50:
                    78:72:59:22:de:c9:8f:33:49:bd:e7:3d:38:7a:7e:
                    5d:f7:22:84:79:d2:00:65:24:16:62:05:0f:56:94:
                    00:98:e4:4a:7f:bb:44:3e:01:d2:94:7c:ec:32:e2:
                    ae:1e:15:63:5c:28:25:8a:fd:83:c4:1d:2b:e0:59:
                    2b:d3:a5:fd:ea:d0:77:a8:a1:50:b5:3d:b7:02:65:
                    11:a3:a6:44:0c:82:b2:be:ca:a0:f2:b3:66:02:74:
                    b6:a1:e6:af:39:ea:32:61:e0:39:11:f6:02:a1:4f:
                    6b:98:a8:79:ad:0f:d3:d8:c9:e6:1a:3e:dc:6e:0d:
                    60:f4:b1:14:34:0c:2e:49:eb:10:16:dc:97:a2:fa:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:E5:A6:98:D4:D8:C8:07:41:D0:12:5C:C8:F3:EB:3B:5D:C9:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/b3842d34-f638-3a85-99e9-9c2e2f3422d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.186.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:54:16:db:54:ac:ec:50:87:d1:d4:b1:41:fb:e7:33:1f:
         9d:25:0a:f9:4e:62:1d:c3:05:39:91:ab:86:b9:db:74:fc:77:
         d3:3f:e3:bf:37:eb:fb:5e:3e:8a:6c:81:9b:22:60:48:96:41:
         2c:ba:6d:3f:75:96:71:bc:42:f1:4e:93:6e:37:b6:e2:a0:67:
         79:2b:4f:4a:94:ab:12:65:f3:a6:be:3e:2a:54:e0:af:04:5a:
         5c:a3:37:80:cc:bc:c0:67:99:19:7f:91:03:fe:af:3e:72:67:
         71:71:76:3c:2f:31:0e:c4:68:bb:cf:f7:41:98:5a:ca:80:ef:
         db:22:a7:f2:dd:b7:ed:94:38:e7:2b:cb:9d:e9:49:53:89:b4:
         e3:31:51:73:2e:d0:57:bb:a6:f9:82:52:e0:1a:ab:d6:98:45:
         b3:1b:c9:e3:31:8a:7b:ea:a3:5d:4b:b5:3b:f1:06:38:bd:3e:
         f9:92:24:99:93:e4:8c:53:52:ce:8b:74:9e:0a:c3:83:00:66:
         36:20:af:85:98:84:d7:00:54:70:f4:7b:3f:5e:be:03:dd:f3:
         ee:ca:3d:ca:da:91:b4:fe:52:51:4c:33:5d:94:f4:d3:71:b4:
         71:89:31:73:80:91:95:69:ea:67:68:a3:71:21:c9:f9:72:8a:
         28:a5:4c:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKksDDtbeY+a8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNmYjI5OTUtOWVlNS00MjNjLWE1MjEtOGQ2NDkwMzAz
ZTJkMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk
MDcyYThiYTYtYmZiOS00ZGYyLTg3MjItMDA2OTIzZjM0NjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD/g8nmCfcUoopQU9MsVUJIkdrNJkwLeK+yL
BhHRNyB2GDpPfqi++tUTSgftoJPySoiYuiEAVZVt3Ijact0E3qcgK7O7ijEp8Xm1
bTz8I/dd9PogwotWCl+OKfNtgN1cImvtv3DNmsjRZGhFHLPs10AcZaKovlB4clki
3smPM0m95z04en5d9yKEedIAZSQWYgUPVpQAmORKf7tEPgHSlHzsMuKuHhVjXCgl
iv2DxB0r4Fkr06X96tB3qKFQtT23AmURo6ZEDIKyvsqg8rNmAnS2oeavOeoyYeA5
EfYCoU9rmKh5rQ/T2MnmGj7cbg1g9LEUNAwuSesQFtyXovqbGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFVY5aaY1NjIB0HQElzI8+s7XcltMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hY2Zi
Mjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0OTAzMDNlMmQvYjM4NDJkMzQtZjYzOC0z
YTg1LTk5ZTktOWMyZTJmMzQyMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWNmYjI5OTUtOWVlNS00MjNjLWE1
MjEtOGQ2NDkwMzAzZTJkL2FjZmIyOTk1LTllZTUtNDIzYy1hNTIxLThkNjQ5MDMw
M2UyZC5jcmwwHwYDVR0jBBgwFoAUehSoKkY4vznA/kUKxvqKtp/wp5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hY2ZiMjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0
OTAzMDNlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzrosMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdcVBbbVKzsUIfR1LFB++czH50lCvlOYh3DBTmRq4a523T8d9M/4783
6/tePopsgZsiYEiWQSy6bT91lnG8QvFOk243tuKgZ3krT0qUqxJl86a+PipU4K8E
WlyjN4DMvMBnmRl/kQP+rz5yZ3FxdjwvMQ7EaLvP90GYWsqA79sip/Ldt+2UOOcr
y53pSVOJtOMxUXMu0Fe7pvmCUuAaq9aYRbMbyeMxinvqo11LtTvxBji9PvmSJJmT
5IxTUs6LdJ4Kw4MAZjYgr4WYhNcAVHD0ez9evgPd8+7KPcrakbT+UlFMM12U9NNx
tHGJMXOAkZVp6mdoo3EhyflyiiilTP4=
-----END CERTIFICATE-----
Generated at Wed May 7 00:44:29 2025 by rpki-client