Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9df0cb03-7dde-36cf-872f-a4b224e13041.roa
File:                     9df0cb03-7dde-36cf-872f-a4b224e13041.roa (raw, json)
Hash identifier:          hTUQyYZBQzfL6Qv6AwOUsh4Hko1gZsJEeZ/5U7fXzw0=
Subject key identifier:   71:87:89:12:3D:38:F6:A8:30:54:43:31:03:7F:7A:12:35:10:C3:A2
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848F65BE1CA33049103ECE01980
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9df0cb03-7dde-36cf-872f-a4b224e13041.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     396982
IP address blocks:        66.159.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e1:ca:33:04:91:03:ec:e0:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=6c00c8e7-2e5c-4ce0-ac0c-976801b1cdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:c4:37:61:03:a6:0b:3a:f8:c4:d8:2e:5e:
                    76:75:c4:27:b5:64:4f:5a:53:e6:01:ff:55:33:a9:
                    61:d0:bc:a9:a9:7f:48:be:7b:e7:b6:42:2f:cc:d9:
                    b0:8d:ee:d1:fe:34:74:c9:07:4d:ef:2d:76:87:82:
                    bd:d8:0e:11:3a:52:f6:96:74:d5:20:ff:ed:47:31:
                    56:cc:69:de:7c:2a:9c:2a:c3:6c:90:d6:16:90:b9:
                    2d:88:39:a6:06:1c:24:91:9c:16:54:d0:2b:24:46:
                    3f:e9:54:c1:01:97:3f:30:9c:34:48:dc:7c:16:87:
                    f6:e2:00:d3:81:2c:38:a8:12:f8:f8:31:88:fd:b3:
                    c0:b4:e0:a6:25:b1:c9:1f:ff:dc:66:2d:a8:fd:1b:
                    66:e8:67:1f:f4:4d:70:06:e8:ba:6a:a4:52:b4:7a:
                    a2:b5:cd:66:68:c0:fd:2d:66:c7:f3:9b:18:d6:f9:
                    03:77:3c:7b:bf:4a:6e:a7:99:1e:31:14:b6:8f:b1:
                    97:68:33:d8:3f:18:29:f6:1f:de:19:b6:09:78:b6:
                    2e:28:75:78:86:bd:b0:da:23:5a:cb:16:75:1a:dd:
                    e1:21:9f:46:c5:d1:cc:7a:b4:45:7d:81:1f:4e:b8:
                    d9:d3:e8:ad:4e:5b:80:5b:fd:79:94:0d:f9:12:cd:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:87:89:12:3D:38:F6:A8:30:54:43:31:03:7F:7A:12:35:10:C3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9df0cb03-7dde-36cf-872f-a4b224e13041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:d4:ea:e6:b8:52:20:ae:f7:b2:24:2b:e9:1c:26:f0:3a:7d:
         0c:d0:4e:99:e0:00:c4:9a:b5:c4:26:7f:be:5e:d1:c4:36:74:
         55:f8:29:34:f3:d5:2f:a4:af:57:b2:2b:95:45:e3:b0:44:88:
         39:e7:ca:da:8f:ca:b4:b9:f2:8c:ab:69:f5:ef:99:47:0a:cd:
         e3:d6:26:a9:99:68:86:59:ab:c6:86:b8:4f:f1:69:c0:5a:d2:
         7e:3a:d1:c8:3e:0d:45:08:f4:9d:3a:12:e1:62:8b:70:c3:78:
         8e:a2:c6:b6:42:f7:08:81:4e:46:1a:b2:72:4c:68:64:00:d6:
         3f:44:14:70:c5:ce:41:d4:24:a2:07:a6:56:ab:f0:70:25:17:
         2c:c5:eb:6f:2a:f5:d6:e5:2c:16:62:df:7c:21:f2:fb:e2:f5:
         f9:86:a9:7b:db:b0:0c:cc:c4:3d:f9:4d:24:ff:17:34:ca:03:
         fe:0b:25:ae:89:51:84:6e:2e:46:c8:2f:ca:9b:1a:c2:b1:f3:
         93:3a:d3:84:eb:eb:a1:75:67:53:6d:ba:c9:11:96:5f:33:aa:
         47:c6:c9:d3:84:ff:0a:92:7b:3f:98:86:8c:1f:9c:11:ef:a0:
         e7:94:b5:9e:b2:65:53:bf:eb:96:9b:fc:c0:ad:db:c6:3b:de:
         76:88:51:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+HKMwSRA+zgGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
NmMwMGM4ZTctMmU1Yy00Y2UwLWFjMGMtOTc2ODAxYjFjZGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKXEN2EDpgs6+MTYLl52dcQntWRPWlPmAf9V
M6lh0LypqX9IvnvntkIvzNmwje7R/jR0yQdN7y12h4K92A4ROlL2lnTVIP/tRzFW
zGnefCqcKsNskNYWkLktiDmmBhwkkZwWVNArJEY/6VTBAZc/MJw0SNx8Fof24gDT
gSw4qBL4+DGI/bPAtOCmJbHJH//cZi2o/Rtm6Gcf9E1wBui6aqRStHqitc1maMD9
LWbH85sY1vkDdzx7v0pup5keMRS2j7GXaDPYPxgp9h/eGbYJeLYuKHV4hr2w2iNa
yxZ1Gt3hIZ9GxdHMerRFfYEfTrjZ0+itTluAW/15lA35Es25wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGHiRI9OPaoMFRDMQN/ehI1EMOiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvOWRmMGNiMDMtN2RkZS0z
NmNmLTg3MmYtYTRiMjI0ZTEzMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQp/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANTU6ua4UiCu97IkK+kcJvA6fQzQTpngAMSatcQmf75e0cQ2dFX4KTTz
1S+kr1eyK5VF47BEiDnnytqPyrS58oyrafXvmUcKzePWJqmZaIZZq8aGuE/xacBa
0n460cg+DUUI9J06EuFii3DDeI6ixrZC9wiBTkYasnJMaGQA1j9EFHDFzkHUJKIH
plar8HAlFyzF628q9dblLBZi33wh8vvi9fmGqXvbsAzMxD35TST/FzTKA/4LJa6J
UYRuLkbIL8qbGsKx85M604Tr66F1Z1NtuskRll8zqkfGydOE/wqSez+YhowfnBHv
oOeUtZ6yZVO/65ab/MCt28Y73naIUW8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:31:51 2025 by rpki-client