Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3acec9a-6a65-3215-9f41-4229fdbbc463.roa
File:                     d3acec9a-6a65-3215-9f41-4229fdbbc463.roa (raw, json)
Hash identifier:          /F5l5PhLVhOcZP9cnr7tYR9J0w7vYxnnztmJ052MrHs=
Subject key identifier:   A4:C3:47:85:9D:68:F1:BC:0A:AE:A8:A3:A4:ED:BF:79:85:8B:B3:B0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AB07BCFDFB00520301900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3acec9a-6a65-3215-9f41-4229fdbbc463.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        144.129.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:b0:7b:cf:df:b0:05:20:30:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c4d7a70d-549d-4738-9ff3-5819723788ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:c0:fe:82:cf:e4:31:58:fb:39:53:5a:16:
                    97:68:7e:ac:cb:b1:88:91:0b:91:cf:79:93:0a:dd:
                    04:46:7c:d1:c2:d2:c0:59:89:8f:f3:be:c7:f1:c0:
                    e3:51:d2:24:0d:ea:bb:a3:8b:c9:94:a9:be:00:58:
                    e9:2d:f2:6d:84:4c:d2:9b:7c:f3:b3:a0:8c:dc:bb:
                    04:4e:bb:19:ef:41:0e:14:7e:d7:63:3c:a7:bd:ef:
                    27:92:df:f5:a0:f2:1d:cb:11:a0:5c:ec:e9:0f:de:
                    7d:e6:4b:12:d7:95:50:ec:4a:20:fa:cb:c6:9c:6e:
                    ba:71:f8:53:16:b0:20:3c:d9:06:fa:38:04:ca:fa:
                    90:d9:35:99:08:43:ef:65:2f:9a:cf:5c:a2:c5:3b:
                    08:5a:f5:93:e8:c4:d4:cf:af:11:56:32:fb:98:96:
                    6d:55:b5:91:e1:a9:76:0e:5c:d2:01:64:40:d1:e5:
                    8f:fe:b6:57:e0:d7:0f:e3:22:a3:9b:b8:d9:82:41:
                    fe:93:56:f6:fb:3e:bc:62:f7:d5:25:50:27:67:c3:
                    c7:bf:39:17:9e:9d:a8:f1:57:cd:96:ad:3d:2a:21:
                    23:1d:d3:99:97:2f:58:dc:44:86:f4:0e:bb:94:46:
                    9b:56:73:01:9c:27:37:8d:1e:b2:01:17:34:70:b1:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C3:47:85:9D:68:F1:BC:0A:AE:A8:A3:A4:ED:BF:79:85:8B:B3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3acec9a-6a65-3215-9f41-4229fdbbc463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.129.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:88:ac:7a:0c:35:ab:39:ae:1a:61:3e:58:f7:a1:08:6d:0e:
         81:1a:b7:6e:5d:0f:e9:a6:e0:73:7a:cc:ce:b6:b5:14:6f:2b:
         5c:41:d0:9f:59:22:88:3c:99:55:a0:a4:b1:28:e7:3a:a8:d0:
         0e:40:43:54:d3:f3:34:93:9a:d7:be:69:13:2d:1b:58:c3:fc:
         91:0e:1e:34:fd:c7:c2:75:d7:6c:8d:6b:0c:ad:26:5b:55:99:
         d0:00:1a:67:94:f8:33:37:11:ea:af:ab:f3:db:b3:b2:da:47:
         60:15:ab:5d:2a:56:03:84:a4:e5:c7:63:73:e7:6a:6b:c1:1e:
         fa:1d:c8:3d:7d:85:09:83:85:05:3d:41:69:24:c5:8e:71:ea:
         fc:13:3c:13:54:8e:ea:21:a2:fb:bd:15:a7:8c:28:7b:5e:90:
         e6:34:92:24:02:0d:f7:a1:82:0b:1e:19:79:65:23:d5:55:1d:
         40:37:4b:a3:25:71:a8:87:35:6b:ef:fc:43:02:84:8a:af:10:
         f5:85:6b:ac:1d:59:43:15:e8:c6:ba:0a:77:24:e2:5a:bc:62:
         91:fe:ed:5f:dc:d4:39:50:0e:e1:c5:bc:87:da:c7:92:1c:d1:
         7a:a4:70:81:2f:dd:1c:6f:7d:14:58:5d:00:21:62:84:31:f8:
         07:8f:ab:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCrB7z9+wBSAwGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YzRkN2E3MGQtNTQ5ZC00NzM4LTlmZjMtNTgxOTcyMzc4OGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnLA/oLP5DFY+zlTWhaXaH6sy7GIkQuRz3mT
Ct0ERnzRwtLAWYmP877H8cDjUdIkDeq7o4vJlKm+AFjpLfJthEzSm3zzs6CM3LsE
TrsZ70EOFH7XYzynve8nkt/1oPIdyxGgXOzpD9595ksS15VQ7Eog+svGnG66cfhT
FrAgPNkG+jgEyvqQ2TWZCEPvZS+az1yixTsIWvWT6MTUz68RVjL7mJZtVbWR4al2
DlzSAWRA0eWP/rZX4NcP4yKjm7jZgkH+k1b2+z68YvfVJVAnZ8PHvzkXnp2o8VfN
lq09KiEjHdOZly9Y3ESG9A67lEabVnMBnCc3jR6yARc0cLHy9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKTDR4WdaPG8Cq6oo6Ttv3mFi7OwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDNhY2VjOWEtNmE2NS0z
MjE1LTlmNDEtNDIyOWZkYmJjNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGkIGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGIrHoMNas5rhphPlj3oQhtDoEat25dD+mm4HN6zM62tRRvK1xB0J9Z
Iog8mVWgpLEo5zqo0A5AQ1TT8zSTmte+aRMtG1jD/JEOHjT9x8J112yNawytJltV
mdAAGmeU+DM3Eeqvq/Pbs7LaR2AVq10qVgOEpOXHY3PnamvBHvodyD19hQmDhQU9
QWkkxY5x6vwTPBNUjuohovu9FaeMKHtekOY0kiQCDfehggseGXllI9VVHUA3S6Ml
caiHNWvv/EMChIqvEPWFa6wdWUMV6Ma6Cnck4lq8YpH+7V/c1DlQDuHFvIfax5Ic
0XqkcIEv3RxvfRRYXQAhYoQx+AePq8w=
-----END CERTIFICATE-----
Generated at Sun May 11 04:48:28 2025 by rpki-client