Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a3be1b9-5faf-3314-abda-6b1ce0fcafe7.roa
File:                     0a3be1b9-5faf-3314-abda-6b1ce0fcafe7.roa (raw, json)
Hash identifier:          WS6sWi9xl5agK9QSSvvPiMKxpWtFeEbStlIiJs3mzuE=
Subject key identifier:   A1:7F:C5:37:49:67:00:FF:10:B8:80:4C:5B:7A:5E:8E:30:96:AA:19
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848FD17E5EFFE45D74E0CF07FE0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a3be1b9-5faf-3314-abda-6b1ce0fcafe7.roa
Signing time:             Mon 24 Feb 2025 11:54:33 +0000
ROA not before:           Mon 24 Feb 2025 11:54:33 +0000
ROA not after:            Sun 25 May 2025 10:54:33 +0000
asID:                     30036
IP address blocks:        63.142.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:17:e5:ef:fe:45:d7:4e:0c:f0:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 24 11:54:33 2025 GMT
            Not After : May 25 10:54:33 2025 GMT
        Subject: CN=40a16db8-8dba-46b6-ac10-e4c9b64e0282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:4b:e7:b5:8e:8e:16:fc:a7:52:d5:5e:70:
                    cb:25:14:26:4b:d3:59:c6:0c:6f:b6:fa:9a:a8:31:
                    b6:67:b0:b7:d7:1b:95:d7:f4:f8:91:e6:34:d5:65:
                    b8:b7:c5:ae:78:8a:8e:f4:27:ec:fa:c7:46:25:a7:
                    96:21:65:db:4f:cd:7a:cb:89:3e:81:0b:2b:74:51:
                    3d:a3:10:9f:d4:fe:3f:3b:22:0f:45:30:18:2c:29:
                    69:8b:31:b4:3d:b4:00:f3:0e:f4:e4:b4:d5:4e:e8:
                    11:55:f3:83:44:d1:bc:65:ce:9d:e9:52:fe:d2:18:
                    7a:d3:4f:0f:6a:23:e9:87:a7:b6:3d:30:3f:0f:35:
                    19:4e:73:59:1c:f7:d6:6c:da:a8:23:b0:a0:3c:21:
                    90:73:a8:72:04:b8:63:96:0f:b6:a3:74:0c:13:26:
                    85:06:b6:47:db:89:36:91:21:27:b9:8f:9b:9d:68:
                    b5:12:02:1a:26:f7:10:fd:48:68:c7:c3:a2:94:f0:
                    5b:2d:6b:c2:53:e3:7d:10:50:9d:1b:c5:fd:6c:74:
                    1e:ef:f1:ed:4f:d5:76:8e:0e:3d:0b:02:70:bd:30:
                    5c:cd:7e:ce:ef:9c:e6:d3:61:0a:d5:e2:70:d3:94:
                    56:10:c1:b8:92:0f:51:33:ec:e1:c7:02:36:a3:88:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7F:C5:37:49:67:00:FF:10:B8:80:4C:5B:7A:5E:8E:30:96:AA:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a3be1b9-5faf-3314-abda-6b1ce0fcafe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0a:c0:6a:76:3f:da:b6:25:f2:79:f4:67:01:44:92:b3:92:
         42:a7:0d:a1:7f:4a:b9:b2:27:2d:b7:d8:e9:c6:45:c9:a2:ad:
         79:6e:2d:a2:6e:e5:23:5a:82:71:2f:77:07:5f:92:60:c4:f5:
         2b:4a:fe:0e:a1:0b:1d:2f:c8:37:52:d7:dd:b7:a6:c4:27:6a:
         f1:38:b1:f4:95:05:00:5c:78:88:88:c7:a0:9c:31:ab:e0:f9:
         8b:9e:8a:06:b7:ff:eb:b7:4d:58:e3:71:44:3e:fd:de:37:57:
         25:03:00:a0:b4:85:25:eb:f8:76:97:ed:27:db:4c:86:10:6e:
         fd:02:a7:c6:8b:ef:61:8e:46:52:cf:97:bc:c9:30:b5:36:c3:
         5d:c8:6a:5a:6e:c4:0b:91:5b:2f:11:de:ff:0f:ac:8b:d2:0c:
         45:de:bc:a9:94:06:58:6f:a3:b0:b8:f6:16:66:de:90:17:ed:
         8d:69:c5:9a:65:d9:52:f9:89:5d:39:0f:35:b8:35:6a:82:4c:
         2e:b7:65:a0:a6:fd:f0:6e:30:2a:84:54:67:d3:57:da:23:f9:
         6d:74:2e:5f:b5:36:cc:a9:3f:ae:69:af:cf:c5:5e:3a:ef:29:
         d3:3c:4a:db:8d:1f:55:cf:8c:65:e5:6c:bc:79:f7:d9:3a:55:
         fe:02:48:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9F+Xv/kXXTgzwf+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIyNDExNTQzM1oXDTI1MDUyNTEwNTQzM1owLzEtMCsGA1UEAxMk
NDBhMTZkYjgtOGRiYS00NmI2LWFjMTAtZTRjOWI2NGUwMjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMtL57WOjhb8p1LVXnDLJRQmS9NZxgxvtvqa
qDG2Z7C31xuV1/T4keY01WW4t8WueIqO9Cfs+sdGJaeWIWXbT816y4k+gQsrdFE9
oxCf1P4/OyIPRTAYLClpizG0PbQA8w705LTVTugRVfODRNG8Zc6d6VL+0hh6008P
aiPph6e2PTA/DzUZTnNZHPfWbNqoI7CgPCGQc6hyBLhjlg+2o3QMEyaFBrZH24k2
kSEnuY+bnWi1EgIaJvcQ/Uhox8OilPBbLWvCU+N9EFCdG8X9bHQe7/HtT9V2jg49
CwJwvTBczX7O75zm02EK1eJw05RWEMG4kg9RM+zhxwI2o4jz0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKF/xTdJZwD/ELiATFt6Xo4wlqoZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGEzYmUxYjktNWZhZi0z
MzE0LWFiZGEtNmIxY2UwZmNhZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP44rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYKwGp2P9q2JfJ59GcBRJKzkkKnDaF/SrmyJy232OnGRcmirXluLaJu
5SNagnEvdwdfkmDE9StK/g6hCx0vyDdS1923psQnavE4sfSVBQBceIiIx6CcMavg
+Yueiga3/+u3TVjjcUQ+/d43VyUDAKC0hSXr+HaX7SfbTIYQbv0Cp8aL72GORlLP
l7zJMLU2w13IalpuxAuRWy8R3v8PrIvSDEXevKmUBlhvo7C49hZm3pAX7Y1pxZpl
2VL5iV05DzW4NWqCTC63ZaCm/fBuMCqEVGfTV9oj+W10Ll+1NsypP65pr8/FXjrv
KdM8StuNH1XPjGXlbLx599k6Vf4CSLQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 23:16:45 2025 by rpki-client