Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/a11c3d35-93bc-3ae5-84df-411739062d18.roa
File:                     a11c3d35-93bc-3ae5-84df-411739062d18.roa (raw, json)
Hash identifier:          Gxk46D7+VsQzAp6cGy7Ct17QtIB++lzzg0x/iqWVD9A=
Subject key identifier:   F7:E4:86:D0:53:3A:80:4B:E5:82:68:9F:60:4E:D4:CE:C9:6B:F6:96
Certificate issuer:       /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial:       010D0C9F43285848DD3BAD47D5A32AC3078E8680
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/a11c3d35-93bc-3ae5-84df-411739062d18.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     393457
IP address blocks:        64.191.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:ad:47:d5:a3:2a:c3:07:8e:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=4baa0f23-db2b-4a3f-a0fe-40bf6b8110b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:14:f7:73:e5:cc:5c:fe:c4:fa:2c:79:34:
                    67:7a:ef:7c:07:ff:d7:f3:bf:9c:1c:87:60:5b:8d:
                    8f:11:19:36:84:ea:ca:e4:e8:85:fa:bd:c9:59:50:
                    70:5e:18:eb:3d:cc:9d:be:ef:3d:bd:1a:de:f2:7e:
                    fd:db:6a:1d:7f:9d:44:de:27:7c:f5:12:6c:da:ad:
                    64:5c:d7:12:10:89:4b:f8:21:a9:f6:87:fa:1f:06:
                    65:61:8e:8c:84:84:01:b6:6f:9e:e2:8f:65:5b:34:
                    4c:22:71:d5:88:fc:20:24:db:46:d7:9e:50:ed:c4:
                    54:ba:f5:b9:9d:28:8f:44:a1:e1:a8:ba:46:40:90:
                    e6:05:6b:78:d1:71:c4:6e:eb:53:10:60:2e:80:ee:
                    99:c0:42:22:f9:51:43:94:f1:2a:04:37:c4:dd:e4:
                    16:97:d3:26:1d:a7:05:61:62:23:99:16:94:20:ed:
                    a3:a4:4a:8e:e4:17:cc:a1:21:ed:c0:e8:08:6a:41:
                    a8:26:bb:d9:db:c8:fb:2f:4e:6f:66:63:15:2d:bf:
                    cb:2a:bd:ea:93:82:8f:a1:11:00:02:40:97:47:79:
                    a4:b1:32:03:80:ec:a0:c2:12:3c:5a:23:5c:27:2b:
                    3a:34:1d:00:8e:2d:88:e2:c9:40:92:a2:82:2d:33:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E4:86:D0:53:3A:80:4B:E5:82:68:9F:60:4E:D4:CE:C9:6B:F6:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/a11c3d35-93bc-3ae5-84df-411739062d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:18:57:5a:2a:6a:48:cf:47:b9:d5:65:e3:91:f1:38:d8:e9:
         ba:ee:0b:e3:27:ef:9e:89:0c:f5:21:41:b3:75:b4:8e:cf:1f:
         0e:a7:da:66:8a:3c:cd:c1:14:fe:54:ca:04:d2:54:95:8a:4d:
         d8:94:90:84:18:cf:2b:91:53:ae:aa:48:ef:e4:3b:08:63:cd:
         6f:0d:1b:a7:95:df:2f:00:37:69:6a:59:2a:d7:1b:96:26:db:
         2f:7c:f2:8e:b6:4a:dd:d0:09:bc:79:84:85:fb:c4:c4:80:7d:
         0c:07:c1:7d:38:08:58:6b:6e:bc:3e:0f:2b:c1:2a:8a:f3:c1:
         9b:b6:c6:cf:ba:ab:a5:55:60:ee:d7:bd:0a:f3:21:cd:c8:b3:
         d3:6c:1e:aa:25:9a:39:eb:bb:70:f8:2d:b8:85:fe:db:1f:36:
         d8:b0:91:40:ad:48:ac:bd:8c:b5:a8:27:60:1d:52:ea:f8:24:
         d8:2c:7d:49:02:55:f4:fa:95:fa:4c:7f:0a:a6:6b:59:62:22:
         bd:36:46:ab:3b:41:27:29:47:00:cb:78:3a:92:52:de:8a:25:
         ce:92:bf:92:62:14:bb:37:33:59:28:d2:90:35:77:95:37:37:
         dc:e6:9c:ca:a7:79:cd:c4:55:59:4f:5c:5a:f6:e6:fb:ce:53:
         c4:a7:2f:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO61H1aMqwweOhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVmZjgxNmYtNDJlZi00N2E2LWJhNjEtNzA3NWFkYjg1
MzI5MB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk
NGJhYTBmMjMtZGIyYi00YTNmLWEwZmUtNDBiZjZiODExMGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSMU93PlzFz+xPoseTRneu98B//X87+cHIdg
W42PERk2hOrK5OiF+r3JWVBwXhjrPcydvu89vRre8n7922odf51E3id89RJs2q1k
XNcSEIlL+CGp9of6HwZlYY6MhIQBtm+e4o9lWzRMInHViPwgJNtG155Q7cRUuvW5
nSiPRKHhqLpGQJDmBWt40XHEbutTEGAugO6ZwEIi+VFDlPEqBDfE3eQWl9MmHacF
YWIjmRaUIO2jpEqO5BfMoSHtwOgIakGoJrvZ28j7L05vZmMVLb/LKr3qk4KPoREA
AkCXR3mksTIDgOygwhI8WiNcJys6NB0Aji2I4slAkqKCLTN90QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPfkhtBTOoBL5YJon2BO1M7Ja/aWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZm
ODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1YWRiODUzMjkvYTExYzNkMzUtOTNiYy0z
YWU1LTg0ZGYtNDExNzM5MDYyZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWVmZjgxNmYtNDJlZi00N2E2LWJh
NjEtNzA3NWFkYjg1MzI5L2VlZmY4MTZmLTQyZWYtNDdhNi1iYTYxLTcwNzVhZGI4
NTMyOS5jcmwwHwYDVR0jBBgwFoAU6ll783GIb8wezeqNVRDlPcsR9H0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZmODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1
YWRiODUzMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQL8uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUYV1oqakjPR7nVZeOR8TjY6bruC+Mn756JDPUhQbN1tI7PHw6n2maK
PM3BFP5UygTSVJWKTdiUkIQYzyuRU66qSO/kOwhjzW8NG6eV3y8AN2lqWSrXG5Ym
2y988o62St3QCbx5hIX7xMSAfQwHwX04CFhrbrw+DyvBKorzwZu2xs+6q6VVYO7X
vQrzIc3Is9NsHqolmjnru3D4LbiF/tsfNtiwkUCtSKy9jLWoJ2AdUur4JNgsfUkC
VfT6lfpMfwqma1liIr02Rqs7QScpRwDLeDqSUt6KJc6Sv5JiFLs3M1ko0pA1d5U3
N9zmnMqnec3EVVlPXFr25vvOU8SnL6w=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:08 2025 by rpki-client