Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/17212433-e718-3268-954b-c2ed7cbdd41d.roa
File:                     17212433-e718-3268-954b-c2ed7cbdd41d.roa (raw, json)
Hash identifier:          WsXOfBHl8F7Xt8vnt2gZIjbbIS2ojl7IXCMwttp4r/4=
Subject key identifier:   F5:3C:70:93:DD:BF:13:BE:E0:21:2B:11:C9:2C:CC:43:D9:0D:27:08
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F432858489A3B4F1EA87EA9F72906DC80
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/17212433-e718-3268-954b-c2ed7cbdd41d.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     55154
IP address blocks:        199.96.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:4f:1e:a8:7e:a9:f7:29:06:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=876e6ad5-6c7e-4b91-bc24-ecb75f97737c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:38:9e:14:68:ed:e2:fa:93:97:0d:82:ac:
                    9e:6f:3b:9c:01:ea:3c:d1:7f:0c:e6:09:73:fe:2c:
                    97:27:a0:cd:b9:14:f0:8e:30:5b:76:97:35:26:46:
                    db:fc:db:e3:bc:70:9d:fb:f3:b1:ae:6e:8d:97:02:
                    99:b0:b2:96:70:e2:ac:2c:34:41:d1:28:b4:f4:97:
                    c6:80:49:db:4f:04:75:27:9f:6f:43:dc:67:1a:ba:
                    6a:43:e8:9d:1b:66:3f:f7:d7:24:92:9c:f3:08:19:
                    5f:c6:68:0f:61:fc:d6:ab:4b:ca:7b:88:2b:75:ec:
                    f5:da:de:ae:e5:96:8a:a1:51:6c:cf:b6:3a:80:69:
                    62:7d:a9:12:88:a9:e8:85:25:60:72:63:77:16:e6:
                    5a:1a:08:5e:66:03:c7:03:21:eb:1d:5a:d6:94:0f:
                    3c:dd:46:75:a1:1a:48:15:40:4c:98:42:ed:b1:8b:
                    a9:30:77:00:2a:55:01:a6:94:fa:87:6e:2d:db:b3:
                    1a:f2:76:67:ae:50:8b:7d:cc:53:f0:ac:c7:11:84:
                    33:af:d5:a4:ca:e5:d7:3f:15:42:cc:b7:b2:e8:78:
                    8e:21:73:f2:7a:a2:33:a0:f9:ca:4e:b2:f5:ed:b9:
                    27:d4:e4:2e:68:c0:78:df:c9:91:2d:6a:78:0d:d3:
                    b4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3C:70:93:DD:BF:13:BE:E0:21:2B:11:C9:2C:CC:43:D9:0D:27:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/17212433-e718-3268-954b-c2ed7cbdd41d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3e:39:b2:49:1a:0c:ab:27:f0:d1:fe:cd:2a:3b:57:45:35:
         94:54:b2:c6:3c:1b:79:c8:bb:ed:74:87:a5:5c:87:41:1a:af:
         7b:2a:a1:13:9d:a1:b0:7d:b0:eb:4c:ab:5b:83:ac:26:a9:42:
         74:f7:02:4e:8a:d7:9c:a3:e6:bf:a7:5b:77:ef:17:c8:44:7d:
         18:d8:44:bb:1d:5f:e6:d7:6e:20:ba:fa:93:49:47:d2:7d:cb:
         cf:3b:88:e4:cc:ea:c8:b9:9e:d2:ac:67:6f:3f:42:b2:6e:61:
         c2:44:55:b6:d5:23:68:41:1b:69:f4:46:61:bb:68:66:2f:91:
         c6:21:5a:e9:87:6c:b6:a5:a2:10:3a:7f:4b:cf:b4:5a:61:19:
         cd:9c:87:51:1d:50:f4:10:5e:70:c5:5b:49:83:67:ca:4f:27:
         22:db:c0:ea:ad:8f:46:bc:75:6f:38:c0:2c:22:46:55:8b:1b:
         82:8f:60:75:7a:e0:0c:40:6b:64:37:3d:d6:67:23:24:d5:28:
         76:b8:ec:d7:7d:3b:d3:4b:30:60:a3:6e:82:8d:3c:ca:8e:35:
         fa:1a:c5:50:c2:79:ed:05:37:0e:28:91:79:b9:cf:99:74:f9:
         90:0c:4f:94:bc:1d:49:ca:83:ed:1f:57:e6:72:67:32:38:93:
         de:a7:c3:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO08eqH6p9ykG3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4
ZWY1MB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ODc2ZTZhZDUtNmM3ZS00YjkxLWJjMjQtZWNiNzVmOTc3MzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluw4nhRo7eL6k5cNgqyebzucAeo80X8M5glz
/iyXJ6DNuRTwjjBbdpc1Jkbb/NvjvHCd+/Oxrm6NlwKZsLKWcOKsLDRB0Si09JfG
gEnbTwR1J59vQ9xnGrpqQ+idG2Y/99ckkpzzCBlfxmgPYfzWq0vKe4grdez12t6u
5ZaKoVFsz7Y6gGlifakSiKnohSVgcmN3FuZaGgheZgPHAyHrHVrWlA883UZ1oRpI
FUBMmELtsYupMHcAKlUBppT6h24t27Ma8nZnrlCLfcxT8KzHEYQzr9WkyuXXPxVC
zLey6HiOIXPyeqIzoPnKTrL17bkn1OQuaMB438mRLWp4DdO0UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPU8cJPdvxO+4CErEckszEPZDScIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0
Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvMTcyMTI0MzMtZTcxOC0z
MjY4LTk1NGItYzJlZDdjYmRkNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3
MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz
OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj
MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2BQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHc+ObJJGgyrJ/DR/s0qO1dFNZRUssY8G3nIu+10h6Vch0Ear3sqoROd
obB9sOtMq1uDrCapQnT3Ak6K15yj5r+nW3fvF8hEfRjYRLsdX+bXbiC6+pNJR9J9
y887iOTM6si5ntKsZ28/QrJuYcJEVbbVI2hBG2n0RmG7aGYvkcYhWumHbLalohA6
f0vPtFphGc2ch1EdUPQQXnDFW0mDZ8pPJyLbwOqtj0a8dW84wCwiRlWLG4KPYHV6
4AxAa2Q3PdZnIyTVKHa47Nd9O9NLMGCjboKNPMqONfoaxVDCee0FNw4okXm5z5l0
+ZAMT5S8HUnKg+0fV+ZyZzI4k96nw0I=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:12:47 2025 by rpki-client