Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa
File:                     abfd22fc-71d6-3554-8616-e76f2c05b55a.roa (raw, json)
Hash identifier:          8W/gvGf+U5oSnoZSMC9681WJGggsdaTXTRTXwHiv7lU=
Subject key identifier:   F0:8E:F1:AD:60:3D:9E:92:2F:DF:14:4D:BD:D1:0D:8A:FD:AB:6C:3D
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F43285849BA15107F3F4B013C8E939400
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa
Signing time:             Sat 03 May 2025 04:36:37 +0000
ROA not before:           Sat 03 May 2025 04:36:37 +0000
ROA not after:            Fri 01 Aug 2025 04:36:37 +0000
asID:                     203724
IP address blocks:        208.65.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ba:15:10:7f:3f:4b:01:3c:8e:93:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: May  3 04:36:37 2025 GMT
            Not After : Aug  1 04:36:37 2025 GMT
        Subject: CN=a5614d0e-0cf8-4f3f-b2b6-d848276db4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:32:d4:7f:ba:5e:51:27:fa:3b:0a:c5:15:
                    88:14:ed:25:a9:95:62:5c:7e:a5:96:e1:e9:a7:9d:
                    5b:44:7c:99:ca:35:b4:0e:8b:2e:5a:1c:66:76:b3:
                    07:d0:5c:a7:50:39:2c:eb:88:99:6f:e0:a2:51:f1:
                    e4:67:31:c7:a2:7b:d5:af:67:84:4d:2f:8e:0c:8c:
                    06:53:c7:d4:8f:f8:3b:55:ef:4a:42:b1:73:48:85:
                    59:da:a5:ff:63:6f:55:14:c6:40:13:ce:58:48:8a:
                    ce:01:d7:ac:01:47:81:f4:f1:86:81:f6:b2:bf:38:
                    1f:d7:76:16:72:6a:85:37:b2:43:b8:15:3b:4d:50:
                    37:0d:82:11:a9:fd:bf:22:d7:10:4f:c0:49:69:9d:
                    3f:b6:eb:61:3d:b6:90:6d:d5:1a:47:38:16:cb:95:
                    1a:39:81:ff:e8:e9:b8:a7:9f:8f:97:ff:ac:44:7f:
                    37:13:9a:8f:f5:2d:ac:b7:38:8b:fd:9c:12:09:0a:
                    5f:34:19:e3:9d:62:90:fb:f8:d6:5c:16:e4:16:dc:
                    ed:0b:2e:77:b4:8b:5c:ca:fe:1f:eb:b5:38:ef:ee:
                    5b:c3:e5:ea:77:da:e1:6d:f6:4a:7b:01:4b:1f:8a:
                    30:ae:fa:5f:01:46:6f:d9:51:21:07:1f:66:f2:ac:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8E:F1:AD:60:3D:9E:92:2F:DF:14:4D:BD:D1:0D:8A:FD:AB:6C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:c4:b3:28:bd:d8:09:e4:8e:1b:3d:cd:a9:82:01:41:05:
         18:36:64:1f:a6:dc:1c:38:8b:a8:8e:2b:62:d1:0e:a5:63:e1:
         47:9c:14:c3:64:29:e9:05:2c:1d:95:6d:ea:4b:1c:81:0c:80:
         c9:fd:be:71:93:ad:40:a8:1c:cf:61:3e:50:21:82:96:a6:c5:
         3c:6b:22:ec:31:24:2e:b9:6b:5d:64:6a:9b:c5:42:d9:4c:9c:
         54:4d:4b:35:20:69:3c:b1:79:6c:d1:e5:08:f9:54:d7:e2:a8:
         75:c8:1d:cd:a9:50:cc:f4:b8:ef:aa:ec:49:b5:69:81:71:6d:
         47:92:35:b3:59:06:75:91:e7:4f:3f:bc:a7:3a:24:b8:07:62:
         00:43:b7:e4:75:6f:aa:ba:1d:90:c9:e6:75:f5:f1:e7:5a:14:
         a9:98:23:5a:ec:ae:65:8a:ac:0b:ba:77:8a:21:3d:44:53:f9:
         7b:1e:52:f6:cc:a3:ab:aa:f2:ad:6e:23:62:84:d8:76:bf:fa:
         d6:e8:c2:ae:5e:ee:9e:31:f8:94:53:78:88:ae:c0:54:42:ef:
         57:81:0b:12:df:4f:79:16:f3:dd:4f:f5:7d:18:e7:a0:79:a4:
         7b:26:ad:97:4a:af:75:06:6f:97:55:ea:44:54:ea:7a:78:29:
         77:da:55:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm6FRB/P0sBPI6TlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3
Yjc0MB4XDTI1MDUwMzA0MzYzN1oXDTI1MDgwMTA0MzYzN1owLzEtMCsGA1UEAxMk
YTU2MTRkMGUtMGNmOC00ZjNmLWIyYjYtZDg0ODI3NmRiNGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlicy1H+6XlEn+jsKxRWIFO0lqZViXH6lluHp
p51bRHyZyjW0DosuWhxmdrMH0FynUDks64iZb+CiUfHkZzHHonvVr2eETS+ODIwG
U8fUj/g7Ve9KQrFzSIVZ2qX/Y29VFMZAE85YSIrOAdesAUeB9PGGgfayvzgf13YW
cmqFN7JDuBU7TVA3DYIRqf2/ItcQT8BJaZ0/tuthPbaQbdUaRzgWy5UaOYH/6Om4
p5+Pl/+sRH83E5qP9S2stziL/ZwSCQpfNBnjnWKQ+/jWXBbkFtztCy53tItcyv4f
67U47+5bw+Xqd9rhbfZKewFLH4owrvpfAUZv2VEhBx9m8qzm5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCO8a1gPZ6SL98UTb3RDYr9q2w9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5
MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYWJmZDIyZmMtNzFkNi0z
NTU0LTg2MTYtZTc2ZjJjMDViNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl
ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5
N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll
OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EGUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzDxLMovdgJ5I4bPc2pggFBBRg2ZB+m3Bw4i6iOK2LRDqVj4UecFMNk
KekFLB2VbepLHIEMgMn9vnGTrUCoHM9hPlAhgpamxTxrIuwxJC65a11kapvFQtlM
nFRNSzUgaTyxeWzR5Qj5VNfiqHXIHc2pUMz0uO+q7Em1aYFxbUeSNbNZBnWR508/
vKc6JLgHYgBDt+R1b6q6HZDJ5nX18edaFKmYI1rsrmWKrAu6d4ohPURT+XseUvbM
o6uq8q1uI2KE2Ha/+tbowq5e7p4x+JRTeIiuwFRC71eBCxLfT3kW891P9X0Y56B5
pHsmrZdKr3UGb5dV6kRU6np4KXfaVQc=
-----END CERTIFICATE-----
Generated at Thu May 8 14:44:37 2025 by rpki-client