Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f0d22b76-e797-3089-8dfe-00a9447c23e8.roa
File:                     f0d22b76-e797-3089-8dfe-00a9447c23e8.roa (raw, json)
Hash identifier:          kxoOXTi1Tl321IL0FrvDuWx7w0QmVRb5egHQSKfYNQ4=
Subject key identifier:   3F:5B:5B:99:62:88:0A:3D:EA:04:62:D8:5C:FA:B5:7F:0F:BF:55:C8
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F43285849B2AF6139DBE16B0D46393680
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f0d22b76-e797-3089-8dfe-00a9447c23e8.roa
Signing time:             Wed 30 Apr 2025 13:01:02 +0000
ROA not before:           Wed 30 Apr 2025 13:01:02 +0000
ROA not after:            Tue 29 Jul 2025 13:01:02 +0000
asID:                     3300
IP address blocks:        204.140.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:af:61:39:db:e1:6b:0d:46:39:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Apr 30 13:01:02 2025 GMT
            Not After : Jul 29 13:01:02 2025 GMT
        Subject: CN=fe4499db-1d33-4aba-b97e-73047bff34f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fb:9b:87:6c:b5:1c:84:21:e1:3b:7b:ca:01:
                    57:b3:c3:0a:7d:81:d5:83:59:50:fe:5d:ae:a4:9a:
                    a2:e9:87:0b:5c:88:91:5d:5b:c3:6f:c2:81:d4:5f:
                    a9:be:37:40:5b:1d:c8:c6:13:21:f4:a8:33:58:50:
                    96:e2:4c:d4:44:81:fa:67:39:f9:8b:ef:3b:2e:39:
                    d5:a9:ea:c7:f6:9b:f2:c9:0a:be:d7:f0:13:5e:62:
                    9e:2c:28:9e:08:9c:be:9c:01:14:e0:6e:e2:c3:cc:
                    48:af:9a:05:6e:bd:e9:0f:c0:39:a1:cd:4c:32:d0:
                    1e:d6:27:24:a1:c7:c6:1e:ec:02:2b:33:75:48:db:
                    2e:4c:24:50:07:3b:e1:a1:db:0f:0b:58:3c:82:d3:
                    c0:79:6d:88:dd:7b:84:3e:e7:40:ba:c1:50:a3:c7:
                    70:7d:52:14:c5:d0:a2:c3:ca:2d:cf:cc:b0:e3:c9:
                    7a:d0:5b:e7:2a:80:d5:55:86:e5:a7:44:b6:57:00:
                    47:86:9f:d5:c2:e3:79:4b:26:d8:af:ed:14:b0:e4:
                    dd:d9:72:66:95:fb:c3:0d:9a:e3:64:55:35:a6:e3:
                    66:13:3d:2c:83:73:43:a0:fb:a7:a6:45:8a:1c:17:
                    33:7a:5d:06:ea:df:0b:23:ad:3a:a4:50:f7:52:a6:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5B:5B:99:62:88:0A:3D:EA:04:62:D8:5C:FA:B5:7F:0F:BF:55:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f0d22b76-e797-3089-8dfe-00a9447c23e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.140.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:a7:76:01:9a:6e:1f:67:eb:04:1d:f2:46:16:d3:09:10:
         db:82:c5:2c:4b:0d:cd:8f:94:e1:da:d2:08:ec:3a:dc:78:9b:
         8b:2c:7b:4c:ee:9b:71:87:7e:7b:0d:71:38:36:bf:14:2c:dc:
         82:b6:42:fa:43:ef:02:76:9f:79:3a:48:dc:75:9c:2b:28:de:
         a3:7d:b7:73:71:5a:00:e4:25:a5:b2:09:8c:cf:bd:0c:2e:a3:
         7e:fb:38:68:af:c7:35:df:fd:d4:b5:20:13:cc:b7:a1:e1:50:
         78:e3:95:c6:ab:28:93:e2:50:a1:14:fe:93:f5:b8:51:d3:81:
         b8:cc:50:2f:31:6f:70:11:64:11:80:0f:a4:f5:e1:20:7e:e7:
         a5:20:4f:2f:26:95:6a:20:b6:e0:ba:f8:04:21:4a:12:4a:ff:
         27:f8:b4:34:a5:09:5c:98:ac:37:6d:0c:fe:ca:72:bc:4b:6e:
         d8:91:d7:7c:b8:bc:e8:f1:87:32:41:17:b9:04:5b:78:76:35:
         2a:b6:c8:34:6b:c6:98:83:0e:98:21:ad:e5:7a:e9:89:67:3b:
         73:fe:97:af:d6:6d:64:7c:42:34:3b:6c:49:ce:c1:8d:34:05:
         4f:f8:31:14:6b:05:1b:95:e5:f9:b5:de:e7:8d:97:2c:cd:a5:
         11:02:4c:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2E52+FrDUY5NoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2
ZDcxMB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk
ZmU0NDk5ZGItMWQzMy00YWJhLWI5N2UtNzMwNDdiZmYzNGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/ubh2y1HIQh4Tt7ygFXs8MKfYHVg1lQ/l2u
pJqi6YcLXIiRXVvDb8KB1F+pvjdAWx3IxhMh9KgzWFCW4kzURIH6Zzn5i+87LjnV
qerH9pvyyQq+1/ATXmKeLCieCJy+nAEU4G7iw8xIr5oFbr3pD8A5oc1MMtAe1ick
ocfGHuwCKzN1SNsuTCRQBzvhodsPC1g8gtPAeW2I3XuEPudAusFQo8dwfVIUxdCi
w8otz8yw48l60FvnKoDVVYblp0S2VwBHhp/VwuN5SybYr+0UsOTd2XJmlfvDDZrj
ZFU1puNmEz0sg3NDoPunpkWKHBczel0G6t8LI606pFD3UqZtSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD9bW5liiAo96gRi2Fz6tX8Pv1XIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4
NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvZjBkMjJiNzYtZTc5Ny0z
MDg5LThkZmUtMDBhOTQ0N2MyM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx
NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx
NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx
MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzIxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQ8p3YBmm4fZ+sEHfJGFtMJENuCxSxLDc2PlOHa0gjsOtx4m4sse0zu
m3GHfnsNcTg2vxQs3IK2QvpD7wJ2n3k6SNx1nCso3qN9t3NxWgDkJaWyCYzPvQwu
o377OGivxzXf/dS1IBPMt6HhUHjjlcarKJPiUKEU/pP1uFHTgbjMUC8xb3ARZBGA
D6T14SB+56UgTy8mlWogtuC6+AQhShJK/yf4tDSlCVyYrDdtDP7KcrxLbtiR13y4
vOjxhzJBF7kEW3h2NSq2yDRrxpiDDpghreV66YlnO3P+l6/WbWR8QjQ7bEnOwY00
BU/4MRRrBRuV5fm13ueNlyzNpRECTNo=
-----END CERTIFICATE-----
Generated at Sun May 11 19:26:35 2025 by rpki-client