Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa
File:                     0f9a93b5-1896-3553-add4-16df12179fd0.roa (raw, json)
Hash identifier:          Ne+0orzEVrJ11NnI4hZqpH30uJkf6O3+VPHm+1Dd25E=
Subject key identifier:   AC:E2:18:54:EB:19:6C:D0:39:71:DF:C9:55:CF:56:85:8D:B3:30:D3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848ED4C6D385C7A012A8A922120
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa
Signing time:             Tue 18 Feb 2025 20:07:27 +0000
ROA not before:           Tue 18 Feb 2025 20:07:27 +0000
ROA not after:            Mon 19 May 2025 19:07:27 +0000
asID:                     16509
IP address blocks:        208.214.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ed:4c:6d:38:5c:7a:01:2a:8a:92:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 18 20:07:27 2025 GMT
            Not After : May 19 19:07:27 2025 GMT
        Subject: CN=0076ff28-eb8d-4602-86d8-ac881ac58cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:57:0d:41:27:28:42:68:7b:3b:65:a0:bb:
                    7a:58:92:ba:ba:a4:0d:c3:5c:ed:55:26:65:1b:47:
                    b2:e6:96:39:e1:e0:4f:02:7a:c0:2d:1c:4b:31:dd:
                    d3:3a:c6:a0:79:4e:b9:f8:57:87:cc:c1:b2:b6:2e:
                    a7:90:ce:0f:94:02:c9:6b:71:f0:8d:5d:28:fc:51:
                    63:2a:17:6a:cc:18:e9:e3:eb:fc:04:f1:f1:7c:52:
                    8f:6b:4e:66:be:fb:07:8a:cc:89:1e:7a:72:06:8a:
                    1e:d0:1d:bd:97:60:85:c5:29:1c:d6:46:81:56:78:
                    88:51:2b:ca:1e:56:8e:05:eb:6e:18:0d:bc:fe:7b:
                    c9:ff:d1:b0:ec:2d:6e:ec:82:1b:0c:16:6d:5f:6d:
                    42:f6:eb:e1:ec:cd:f8:44:64:62:fc:ce:83:21:de:
                    6e:2c:b0:c5:d5:99:60:e2:b3:20:d4:9b:c2:c9:41:
                    0d:cd:3d:54:4c:e5:c0:ba:a9:bc:19:b4:68:3d:97:
                    be:9f:16:fa:74:53:1a:3f:b5:54:52:4d:fc:a5:50:
                    0c:cd:65:59:75:fa:b0:ac:83:13:da:79:d5:cd:af:
                    e1:ce:de:ac:cf:8a:a4:c2:49:30:42:71:df:1d:9f:
                    db:86:0f:8f:10:43:6e:69:84:a2:2b:e1:db:e7:3f:
                    bd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E2:18:54:EB:19:6C:D0:39:71:DF:C9:55:CF:56:85:8D:B3:30:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:26:77:e7:0f:5d:07:7b:05:c6:88:b9:63:bc:67:bb:fd:
         73:70:0e:65:e3:03:fc:25:a6:c5:4d:c9:80:a2:0c:6e:f0:ee:
         c4:b0:5b:cd:01:cb:3b:18:76:79:8d:77:32:c0:fe:a9:99:41:
         0a:c4:52:9b:94:a5:3c:71:40:11:f9:ad:a5:53:58:7d:da:13:
         c8:e1:d8:fd:bc:91:e6:9c:69:93:1e:76:77:41:d3:8b:70:08:
         b1:19:24:5c:1c:a7:d2:04:a9:6c:c1:76:dc:3a:32:55:e2:59:
         ed:95:81:1d:a9:35:41:33:7f:ad:5d:df:df:e1:83:9e:38:f6:
         5c:95:2d:95:c9:45:50:62:84:87:67:39:43:61:b1:44:43:6a:
         ab:ff:e5:cb:51:06:5d:ac:74:8e:02:b2:81:40:31:15:3b:06:
         46:b4:92:44:f5:ee:89:01:40:b0:98:a8:4b:42:37:d6:f8:4e:
         85:ca:ef:86:c8:9f:99:e2:01:d4:82:a6:9d:fb:f4:21:98:6b:
         39:57:e2:84:58:1f:25:44:be:54:4a:42:cf:01:e6:6f:b9:8a:
         e3:13:1c:fd:dc:b4:42:6a:90:78:42:e4:0d:bc:71:a2:6d:f1:
         06:d4:9d:d1:c2:d5:13:21:5d:fa:9b:5b:5c:1b:9b:9c:cc:6a:
         ee:5e:f4:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtTG04XHoBKoqSISAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIxODIwMDcyN1oXDTI1MDUxOTE5MDcyN1owLzEtMCsGA1UEAxMk
MDA3NmZmMjgtZWI4ZC00NjAyLTg2ZDgtYWM4ODFhYzU4Y2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLBXDUEnKEJoeztloLt6WJK6uqQNw1ztVSZl
G0ey5pY54eBPAnrALRxLMd3TOsageU65+FeHzMGyti6nkM4PlALJa3HwjV0o/FFj
KhdqzBjp4+v8BPHxfFKPa05mvvsHisyJHnpyBooe0B29l2CFxSkc1kaBVniIUSvK
HlaOBetuGA28/nvJ/9Gw7C1u7IIbDBZtX21C9uvh7M34RGRi/M6DId5uLLDF1Zlg
4rMg1JvCyUENzT1UTOXAuqm8GbRoPZe+nxb6dFMaP7VUUk38pVAMzWVZdfqwrIMT
2nnVza/hzt6sz4qkwkkwQnHfHZ/bhg+PEENuaYSiK+Hb5z+9eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKziGFTrGWzQOXHfyVXPVoWNszDTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGY5YTkzYjUtMTg5Ni0z
NTUzLWFkZDQtMTZkZjEyMTc5ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTtJnfnD10HewXGiLljvGe7/XNwDmXjA/wlpsVNyYCiDG7w7sSwW80B
yzsYdnmNdzLA/qmZQQrEUpuUpTxxQBH5raVTWH3aE8jh2P28keacaZMedndB04tw
CLEZJFwcp9IEqWzBdtw6MlXiWe2VgR2pNUEzf61d39/hg5449lyVLZXJRVBihIdn
OUNhsURDaqv/5ctRBl2sdI4CsoFAMRU7Bka0kkT17okBQLCYqEtCN9b4ToXK74bI
n5niAdSCpp379CGYazlX4oRYHyVEvlRKQs8B5m+5iuMTHP3ctEJqkHhC5A28caJt
8QbUndHC1RMhXfqbW1wbm5zMau5e9G8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:19:52 2025 by rpki-client