Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa
File:                     4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa (raw, json)
Hash identifier:          9/zGVHZAsfM1KXLtAqr8DP2Tu0b3b4iiWgnF8ZnLC4E=
Subject key identifier:   40:79:76:A3:36:AF:8E:08:5D:81:5A:68:1D:5C:55:D2:97:51:33:62
Certificate issuer:       /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial:       010D0C9F432858496A199D88EDA0ED9F5E9F4500
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     21777
IP address blocks:        199.189.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:9d:88:ed:a0:ed:9f:5e:9f:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=9bef8eec-e7fd-4c69-8c36-9d05c2f6cb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:09:fc:94:3a:95:72:cc:6b:fd:14:b2:86:
                    9a:12:e3:a6:d4:f7:a1:c3:d4:95:10:5b:d0:5d:56:
                    b7:3d:74:b5:07:b3:2f:dd:68:60:af:5a:88:5f:50:
                    c9:17:a2:cc:c2:c8:a8:27:1e:e9:bb:1f:96:96:12:
                    4f:c6:32:39:4c:3d:33:bc:93:a1:3f:6c:1c:95:4e:
                    8e:e3:91:ef:d8:b7:4a:86:bf:db:bf:9e:d6:b6:c8:
                    fa:ae:ab:ef:fa:5e:f8:fd:a7:60:91:4a:5b:94:4d:
                    33:8f:73:ab:05:1e:07:1f:b2:13:9b:e3:8e:70:27:
                    69:6a:f2:d5:96:44:21:7d:9e:3a:1b:c2:d9:20:d5:
                    78:b0:11:68:d2:a0:ad:95:9a:7a:25:88:2e:39:9d:
                    31:30:1d:2c:e6:94:b8:94:c8:3a:d5:8b:98:f2:2d:
                    ac:73:ad:b3:84:cf:fd:13:0b:0e:2b:86:3e:e9:6d:
                    e9:e8:12:bb:42:91:9a:ab:cd:1e:59:fd:f2:b8:e6:
                    b1:55:55:00:eb:ee:cb:f2:9b:39:d8:03:b1:7b:cf:
                    62:d5:82:33:c2:4c:16:af:25:5a:8c:71:c8:02:99:
                    43:ee:37:01:d5:e1:10:94:c3:bb:6d:3c:25:a2:3b:
                    07:fe:cf:f2:39:ed:f1:f9:c2:ff:df:e9:da:49:a5:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:79:76:A3:36:AF:8E:08:5D:81:5A:68:1D:5C:55:D2:97:51:33:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl

            X509v3 Authority Key Identifier:
                keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:90:fe:f0:9c:cb:f3:ab:7f:6f:51:a9:90:f7:f8:ff:a4:05:
         56:33:76:4d:4f:e3:8c:09:14:d7:b8:71:39:6d:7c:02:25:b4:
         3c:17:0c:20:1b:f6:6d:88:e6:27:98:f4:60:b4:98:c2:ee:41:
         b0:ab:46:1c:4c:75:ac:25:41:e7:b3:42:84:1f:0c:7e:33:83:
         80:8c:4a:f0:7c:1f:82:7f:f3:a7:aa:9f:c4:7e:a0:71:ea:eb:
         c6:15:2f:02:12:d4:8f:25:63:0c:57:ae:15:3c:36:bf:7d:4c:
         3d:88:61:54:08:b7:50:0c:d1:0c:22:8e:05:3f:78:9e:2c:6b:
         d5:36:4d:0f:74:4f:3b:36:7c:6f:fb:2a:6a:3d:3c:9b:eb:3f:
         29:03:4a:f3:32:af:8f:b2:c5:75:63:74:af:45:1d:e0:2c:1d:
         c3:65:71:2c:0f:c8:01:00:57:e6:ca:48:42:df:df:71:41:9b:
         a3:bc:2b:f2:2b:d7:73:ea:93:c1:3e:83:ed:84:d4:48:05:63:
         47:7b:7c:3c:6f:0b:8c:b1:14:ce:c7:9c:f4:c9:a4:fc:db:f4:
         01:af:92:df:d9:62:65:9a:f3:ee:ce:e7:52:3c:e5:0c:c3:6e:
         3d:c9:59:5f:5f:be:a6:3a:87:f0:9b:a8:4d:6b:b7:bc:9a:b8:
         18:6d:ed:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZ2I7aDtn16fRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0
YTBlMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
OWJlZjhlZWMtZTdmZC00YzY5LThjMzYtOWQwNWMyZjZjYjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7sJ/JQ6lXLMa/0UsoaaEuOm1Pehw9SVEFvQ
XVa3PXS1B7Mv3Whgr1qIX1DJF6LMwsioJx7pux+WlhJPxjI5TD0zvJOhP2wclU6O
45Hv2LdKhr/bv57Wtsj6rqvv+l74/adgkUpblE0zj3OrBR4HH7ITm+OOcCdpavLV
lkQhfZ46G8LZINV4sBFo0qCtlZp6JYguOZ0xMB0s5pS4lMg61YuY8i2sc62zhM/9
EwsOK4Y+6W3p6BK7QpGaq80eWf3yuOaxVVUA6+7L8ps52AOxe89i1YIzwkwWryVa
jHHIAplD7jcB1eEQlMO7bTwlojsH/s/yOe3x+cL/3+naSaVuxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEB5dqM2r44IXYFaaB1cVdKXUTNiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1
YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvNGFkZmZhYWQtMDk0Zi0z
YzVjLWJlNDQtYjI4ZThlODVhM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx
NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk
NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz
NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx70eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKQ/vCcy/Orf29RqZD3+P+kBVYzdk1P44wJFNe4cTltfAIltDwXDCAb
9m2I5ieY9GC0mMLuQbCrRhxMdawlQeezQoQfDH4zg4CMSvB8H4J/86eqn8R+oHHq
68YVLwIS1I8lYwxXrhU8Nr99TD2IYVQIt1AM0QwijgU/eJ4sa9U2TQ90Tzs2fG/7
Kmo9PJvrPykDSvMyr4+yxXVjdK9FHeAsHcNlcSwPyAEAV+bKSELf33FBm6O8K/Ir
13Pqk8E+g+2E1EgFY0d7fDxvC4yxFM7HnPTJpPzb9AGvkt/ZYmWa8+7O51I85QzD
bj3JWV9fvqY6h/CbqE1rt7yauBht7ZI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:23 2025 by rpki-client