Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa
File:                     585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa (raw, json)
Hash identifier:          le7NdVdHN7z58dBzGOqBJligeFsJPWfBZ9NFYEO4QKE=
Subject key identifier:   75:6E:D9:DB:CF:03:F6:28:58:76:B3:1C:A9:D3:71:CE:E9:97:FD:BA
Certificate issuer:       /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial:       010D0C9F43285848F926AC4D339FEE80EA2C18E0
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     22438
IP address blocks:        162.211.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ac:4d:33:9f:ee:80:ea:2c:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=f23d9628-fdea-4c42-a0c3-69cbeaf282b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ff:05:58:e3:ed:ba:f6:9c:4b:d3:0f:c8:5c:
                    52:f3:e5:3d:db:bf:6b:ca:15:a2:0d:de:4c:e7:7d:
                    55:9b:b7:e3:45:21:d1:9e:89:a6:02:7e:a6:a5:c5:
                    d0:b7:25:75:d0:6b:dc:87:b0:c6:ed:16:ce:9a:f6:
                    1b:2c:b8:68:90:85:19:ca:16:18:2d:92:72:24:63:
                    ac:e3:44:c4:e1:d6:9d:9b:b5:2d:66:f3:7c:be:72:
                    cc:4a:4b:6a:ea:b0:a8:b8:a2:b9:bb:39:c2:cd:c0:
                    ed:3b:72:15:c5:e7:77:83:0b:34:97:a5:00:05:30:
                    07:b6:d8:5d:16:a4:c8:16:5d:be:63:32:b7:d9:e9:
                    25:02:9d:3e:e0:2d:b9:ee:18:61:af:f4:49:a0:70:
                    00:2f:6d:50:72:f7:c3:54:10:74:d3:8a:66:e5:4f:
                    de:35:ad:ef:ef:c9:f8:c6:d3:08:15:d4:df:37:2d:
                    2a:e6:37:55:28:27:ec:dd:e0:48:f5:32:1e:47:77:
                    4b:3a:81:62:42:fe:34:ea:f2:ad:ce:d5:08:3e:bc:
                    bd:4f:16:4c:00:53:61:6f:12:a4:eb:93:a2:34:37:
                    a4:43:f0:bb:2b:59:ce:a1:23:c6:87:d3:e6:e4:3a:
                    4c:e1:da:8c:df:ff:d7:af:5a:a5:eb:eb:0c:fb:5b:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6E:D9:DB:CF:03:F6:28:58:76:B3:1C:A9:D3:71:CE:E9:97:FD:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:d6:a6:eb:d0:49:d0:d8:87:4c:d1:dc:d2:d4:22:7e:55:
         b5:da:bc:4a:38:4c:1e:d8:ac:78:9d:bc:31:70:32:78:5f:ea:
         ba:49:80:5e:c1:57:25:53:18:f1:f8:74:7a:fa:22:48:55:96:
         6c:5d:8f:f0:56:00:5d:05:70:c8:a8:e7:c2:ee:c5:cb:89:61:
         c2:10:59:5f:65:4e:2c:e7:f2:66:39:e8:41:24:8f:8c:4d:eb:
         df:9c:fe:a8:61:d7:55:07:b3:8a:03:65:0f:6c:c0:4e:78:f2:
         59:6b:33:5a:0d:f4:fb:0e:ac:e0:26:4d:45:1a:5f:95:e2:9d:
         c3:66:2e:4a:6e:5b:37:a8:4f:e8:f2:3d:59:ac:0e:15:92:39:
         84:e9:81:66:68:f5:86:d8:c7:64:b7:5b:80:83:32:e0:64:5b:
         cc:5e:e2:92:7a:09:b4:8a:99:3b:1f:eb:69:a1:91:b8:cf:80:
         c4:4a:25:cd:08:0b:c3:12:1e:e5:12:68:88:00:cf:0e:51:6a:
         23:e9:6b:9b:71:30:a2:bd:6b:04:96:dd:61:84:5e:e1:09:11:
         5f:e8:56:ef:30:dc:d1:f1:36:11:e6:4e:e9:5d:14:b6:5d:1f:
         71:03:a7:0d:28:9a:81:e0:de:7e:06:d4:10:dd:9f:ea:dd:1f:
         00:60:50:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqxNM5/ugOosGOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUxOTIxY2ItNmI2Yy00MDZhLTg4YzQtN2YyMmFjMTI1
NDdjMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjIzZDk2MjgtZmRlYS00YzQyLWEwYzMtNjljYmVhZjI4MmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv8FWOPtuvacS9MPyFxS8+U9279ryhWiDd5M
531Vm7fjRSHRnommAn6mpcXQtyV10Gvch7DG7RbOmvYbLLhokIUZyhYYLZJyJGOs
40TE4dadm7UtZvN8vnLMSktq6rCouKK5uznCzcDtO3IVxed3gws0l6UABTAHtthd
FqTIFl2+YzK32eklAp0+4C257hhhr/RJoHAAL21QcvfDVBB004pm5U/eNa3v78n4
xtMIFdTfNy0q5jdVKCfs3eBI9TIeR3dLOoFiQv406vKtztUIPry9TxZMAFNhbxKk
65OiNDekQ/C7K1nOoSPGh9Pm5DpM4dqM3//Xr1ql6+sM+1vttQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVu2dvPA/YoWHazHKnTcc7pl/26MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5
MjFjYi02YjZjLTQwNmEtODhjNC03ZjIyYWMxMjU0N2MvNTg1ZjBmYzEtYmQ0ZC0z
MmFkLTgzMzktYzJhMTZiM2YwOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUxOTIxY2ItNmI2Yy00MDZhLTg4
YzQtN2YyMmFjMTI1NDdjLzRlMTkyMWNiLTZiNmMtNDA2YS04OGM0LTdmMjJhYzEy
NTQ3Yy5jcmwwHwYDVR0jBBgwFoAUjdDPHbObXlsM6MEnYkdtzgryKxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5MjFjYi02YjZjLTQwNmEtODhjNC03ZjIy
YWMxMjU0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotNYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2d1qbr0EnQ2IdM0dzS1CJ+VbXavEo4TB7YrHidvDFwMnhf6rpJgF7B
VyVTGPH4dHr6IkhVlmxdj/BWAF0FcMio58LuxcuJYcIQWV9lTizn8mY56EEkj4xN
69+c/qhh11UHs4oDZQ9swE548llrM1oN9PsOrOAmTUUaX5XincNmLkpuWzeoT+jy
PVmsDhWSOYTpgWZo9YbYx2S3W4CDMuBkW8xe4pJ6CbSKmTsf62mhkbjPgMRKJc0I
C8MSHuUSaIgAzw5RaiPpa5txMKK9awSW3WGEXuEJEV/oVu8w3NHxNhHmTuldFLZd
H3EDpw0omoHg3n4G1BDdn+rdHwBgUPw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:46 2025 by rpki-client