Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa
File:                     f72adc35-9eb4-3118-8c85-285ff915009f.roa (raw, json)
Hash identifier:          ai0ijOvFuvdlKEZN9zsjnd3LJ7AKVJgpNSiVASwOC74=
Subject key identifier:   38:D7:73:FB:50:80:BC:9A:16:EC:16:61:2E:E5:C6:49:31:74:97:0C
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F43285848A400BE8D5E6EC3E30E3E5CC0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        50.116.96.0/21 maxlen: 21
                          96.125.168.0/22 maxlen: 22
                          108.179.208.0/22 maxlen: 22
                          108.179.216.0/21 maxlen: 21
                          198.154.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:be:8d:5e:6e:c3:e3:0e:3e:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=de693025-4478-44b9-ae60-3d7d3c853606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:7c:b7:67:49:d7:ef:5e:38:2c:88:72:4c:
                    8b:85:6e:3c:4f:9c:30:b9:3c:ff:44:d6:35:df:c6:
                    70:7a:df:19:c6:3f:c5:d4:b6:b1:eb:d7:cf:39:69:
                    e5:b0:a8:b1:db:6a:05:9d:57:90:4e:7f:3c:02:ca:
                    7a:00:2c:eb:84:ea:b3:05:da:84:b8:f9:99:a8:8e:
                    30:60:f1:ac:45:7b:cc:19:00:97:8e:8c:45:b6:4f:
                    e8:9e:04:fb:be:08:b5:a0:ee:0a:36:60:b3:6d:ab:
                    c5:80:9a:07:81:cb:e8:dd:d0:86:ae:65:8b:21:41:
                    96:49:47:2d:7e:1d:50:aa:32:95:e5:f7:b0:f0:01:
                    43:f6:de:e4:af:ca:b6:54:89:3d:b1:18:31:0a:93:
                    8a:4b:1c:4b:b6:69:f4:79:4d:c6:ca:46:78:55:ac:
                    a3:bb:b8:f1:14:1e:6a:2f:9e:7c:b9:14:db:db:43:
                    7b:c5:12:e8:8b:32:b5:8c:e9:5c:1d:75:f5:e5:ad:
                    b2:d3:fb:a9:70:d2:8b:e4:e9:fa:29:57:76:09:8a:
                    b9:4d:31:1e:c4:1e:c1:80:36:3a:af:30:0b:d5:00:
                    51:c6:4c:bc:79:a8:18:23:a0:73:a7:ec:1f:f2:d9:
                    80:ec:e9:0e:7a:fe:96:55:bf:cd:72:51:2c:53:f1:
                    81:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D7:73:FB:50:80:BC:9A:16:EC:16:61:2E:E5:C6:49:31:74:97:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.96.0/21
                  96.125.168.0/22
                  108.179.208.0/22
                  108.179.216.0/21
                  198.154.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:b0:e5:e4:55:34:8a:00:bb:a1:d4:df:a4:ef:a6:ac:78:9d:
         f7:b2:d3:92:2f:59:23:48:9a:88:88:ff:e7:e2:0f:06:6b:a3:
         f0:9a:f5:33:15:bb:33:3a:f5:7a:28:f4:9d:66:e2:39:44:b5:
         09:90:a3:36:11:50:e9:c8:92:9c:a1:6b:34:6c:c9:3f:29:09:
         ee:48:01:f8:96:56:ee:4d:a3:47:88:a8:9b:17:34:55:8d:d3:
         b6:75:ac:ea:37:c1:ff:f2:fa:d0:15:b4:76:4c:39:b5:5b:13:
         86:79:30:1a:ce:5e:c4:b0:1a:10:01:24:50:96:8a:b6:f6:a5:
         a9:3a:d2:12:20:12:00:c8:bc:cb:8e:38:99:29:43:b2:16:0f:
         be:61:f6:34:7c:28:72:52:81:48:c3:ed:9d:71:08:90:fb:03:
         49:84:41:b2:5d:03:b4:06:3f:6c:80:a4:56:c9:99:bf:81:de:
         bd:d0:8d:2d:82:74:fa:21:f7:2f:fe:81:91:32:87:dd:f5:33:
         90:1e:5e:88:33:11:1d:9e:b5:03:f5:ac:9f:76:10:24:c6:72:
         73:8d:68:d6:57:50:55:10:be:fa:91:5a:78:f5:70:c4:b5:d3:
         23:88:cc:f9:aa:a7:2b:bd:74:24:76:ea:ec:e6:24:1d:b8:20:
         6e:56:23:ce
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEikAL6NXm7D4w4+XMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZGU2OTMwMjUtNDQ3OC00NGI5LWFlNjAtM2Q3ZDNjODUzNjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0h8t2dJ1+9eOCyIckyLhW48T5wwuTz/RNY1
38Zwet8Zxj/F1Lax69fPOWnlsKix22oFnVeQTn88Asp6ACzrhOqzBdqEuPmZqI4w
YPGsRXvMGQCXjoxFtk/ongT7vgi1oO4KNmCzbavFgJoHgcvo3dCGrmWLIUGWSUct
fh1QqjKV5few8AFD9t7kr8q2VIk9sRgxCpOKSxxLtmn0eU3GykZ4Vayju7jxFB5q
L558uRTb20N7xRLoizK1jOlcHXX15a2y0/upcNKL5On6KVd2CYq5TTEexB7BgDY6
rzAL1QBRxky8eagYI6Bzp+wf8tmA7OkOev6WVb/NclEsU/GBuQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFDjXc/tQgLyaFuwWYS7lxkkxdJcMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvZjcyYWRjMzUtOWViNC0z
MTE4LThjODUtMjg1ZmY5MTUwMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDMnRgAwQC
YH2oAwQCbLPQAwQDbLPYAwQFxprgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAL+w5eRVNIoAu6HU36Tvpqx4
nfey05IvWSNImoiI/+fiDwZro/Ca9TMVuzM69Xoo9J1m4jlEtQmQozYRUOnIkpyh
azRsyT8pCe5IAfiWVu5No0eIqJsXNFWN07Z1rOo3wf/y+tAVtHZMObVbE4Z5MBrO
XsSwGhABJFCWirb2pak60hIgEgDIvMuOOJkpQ7IWD75h9jR8KHJSgUjD7Z1xCJD7
A0mEQbJdA7QGP2yApFbJmb+B3r3QjS2CdPoh9y/+gZEyh931M5AeXogzER2etQP1
rJ92ECTGcnONaNZXUFUQvvqRWnj1cMS10yOIzPmqpyu9dCR26uzmJB24IG5WI84=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:12:11 2025 by rpki-client