Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a43028c8-ac53-3f20-9ca7-3d7acc73ab2d.roa
File:                     a43028c8-ac53-3f20-9ca7-3d7acc73ab2d.roa (raw, json)
Hash identifier:          nBTKqQdhEyHMxc33IMDUM+0q51uKtseRiaoJwCwQ1Ps=
Subject key identifier:   BF:78:CC:9F:F2:A8:86:FB:7D:AF:87:84:F8:B0:B6:7A:9B:E8:71:16
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285849C20A21176A15F9F65C935F60
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a43028c8-ac53-3f20-9ca7-3d7acc73ab2d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     7018
IP address blocks:        64.40.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:21:17:6a:15:f9:f6:5c:93:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=a90e2799-59a5-42df-9fd1-4b167d1e5b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:6f:1c:e9:ee:b5:e6:9f:05:c4:4e:66:e9:
                    b1:ea:76:e6:3b:69:de:e8:50:dc:aa:34:9d:d6:38:
                    9f:cd:35:1d:5f:eb:c3:29:b9:47:f7:77:41:a3:30:
                    89:86:fb:a9:04:e4:a3:e7:fe:57:31:a2:dd:8a:a6:
                    52:17:10:a7:8c:2e:51:8c:cf:e5:a7:45:92:5d:a5:
                    73:8c:36:25:16:02:d9:ab:8d:ae:77:ee:cb:da:c4:
                    11:4e:44:fc:3f:5d:f9:41:fa:9a:fd:06:98:4c:7f:
                    db:59:69:d5:85:3f:89:08:24:92:17:60:4b:32:75:
                    b4:1a:5a:09:8c:f5:4f:f8:1a:9f:9a:94:fe:85:5f:
                    92:eb:f9:2f:3f:ea:70:ed:b5:b6:a0:99:57:67:01:
                    13:14:8e:a4:3e:1f:49:6c:aa:55:24:72:59:36:fb:
                    c4:a5:3d:10:cd:a2:8d:77:9c:a5:d4:8e:55:b4:17:
                    82:d8:62:4a:4a:56:e1:5f:a6:bf:db:cd:20:eb:76:
                    ef:b1:26:c2:54:75:82:ce:61:ec:b2:3f:bb:5a:ca:
                    61:6a:7f:9e:3c:ef:84:a6:4e:6e:37:07:f8:45:d3:
                    76:fb:fe:d6:c8:71:a5:ad:85:e4:22:cd:d1:73:6e:
                    5e:4e:b7:02:fd:03:7d:ed:7c:7b:41:09:86:ef:47:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:CC:9F:F2:A8:86:FB:7D:AF:87:84:F8:B0:B6:7A:9B:E8:71:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a43028c8-ac53-3f20-9ca7-3d7acc73ab2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:91:e4:bf:ca:07:b6:fb:7c:fa:4f:53:d0:51:1c:6a:8a:ed:
         3e:4c:32:07:04:44:96:5d:8a:63:c5:8a:eb:98:32:4a:cd:49:
         02:d5:b5:68:5d:d5:51:4b:8a:f1:f5:64:68:b2:d4:4a:ce:17:
         f1:8c:64:bc:93:81:9b:2a:42:a9:2f:68:3e:1d:55:09:98:ab:
         38:b4:b7:6a:f8:9a:94:eb:7f:d0:9a:4d:0f:54:43:c7:b3:50:
         f0:7b:3d:24:b0:88:8d:76:9e:60:bb:af:23:c1:84:75:39:8f:
         e0:2d:4c:43:08:16:f7:84:5a:ed:2b:cb:ad:79:6e:3f:e2:9f:
         29:41:39:74:5f:19:91:1b:be:b2:04:e4:d5:92:23:5c:c4:2c:
         51:c0:79:9b:46:b9:dd:72:f3:47:6d:a6:38:f2:ad:fa:1d:d0:
         03:c2:7b:36:32:9f:d1:d9:90:73:a1:71:01:36:fd:eb:59:11:
         ac:0a:ee:13:ac:66:05:31:f3:9b:ce:28:de:55:c4:23:a3:32:
         01:40:77:2a:92:38:2d:68:ac:38:ca:8e:b5:9a:79:72:80:e8:
         df:ae:99:f2:01:2c:61:e0:2b:33:52:89:0e:78:da:29:ae:cc:
         f4:02:8e:47:ca:62:a9:0f:af:62:76:ae:87:d3:b2:91:5c:99:
         a9:3d:4a:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiEXahX59lyTX2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YTkwZTI3OTktNTlhNS00MmRmLTlmZDEtNGIxNjdkMWU1Yjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRBvHOnuteafBcROZumx6nbmO2ne6FDcqjSd
1jifzTUdX+vDKblH93dBozCJhvupBOSj5/5XMaLdiqZSFxCnjC5RjM/lp0WSXaVz
jDYlFgLZq42ud+7L2sQRTkT8P135Qfqa/QaYTH/bWWnVhT+JCCSSF2BLMnW0GloJ
jPVP+BqfmpT+hV+S6/kvP+pw7bW2oJlXZwETFI6kPh9JbKpVJHJZNvvEpT0QzaKN
d5yl1I5VtBeC2GJKSlbhX6a/280g63bvsSbCVHWCzmHssj+7Wsphan+ePO+Epk5u
Nwf4RdN2+/7WyHGlrYXkIs3Rc25eTrcC/QN97Xx7QQmG70f2VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL94zJ/yqIb7fa+HhPiwtnqb6HEWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYTQzMDI4YzgtYWM1My0z
ZjIwLTljYTctM2Q3YWNjNzNhYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCieMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSR5L/KB7b7fPpPU9BRHGqK7T5MMgcERJZdimPFiuuYMkrNSQLVtWhd
1VFLivH1ZGiy1ErOF/GMZLyTgZsqQqkvaD4dVQmYqzi0t2r4mpTrf9CaTQ9UQ8ez
UPB7PSSwiI12nmC7ryPBhHU5j+AtTEMIFveEWu0ry615bj/inylBOXRfGZEbvrIE
5NWSI1zELFHAeZtGud1y80dtpjjyrfod0APCezYyn9HZkHOhcQE2/etZEawK7hOs
ZgUx85vOKN5VxCOjMgFAdyqSOC1orDjKjrWaeXKA6N+umfIBLGHgKzNSiQ542imu
zPQCjkfKYqkPr2J2rofTspFcmak9Sgs=
-----END CERTIFICATE-----
Generated at Fri May 9 05:10:48 2025 by rpki-client