Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/992c9122-07ff-3812-8aad-8c25b1f4c4bf.roa
File:                     992c9122-07ff-3812-8aad-8c25b1f4c4bf.roa (raw, json)
Hash identifier:          jrQkgY51aQimxWvVr/uhmwpRJ3qkxtvq/w4lnl06kXI=
Subject key identifier:   D8:6D:49:3D:F8:8D:8B:B7:26:BD:32:EA:35:2F:71:E4:8E:77:86:21
Certificate issuer:       /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial:       010D0C9F43285848AC60D41B9559900030FFC000
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/992c9122-07ff-3812-8aad-8c25b1f4c4bf.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     55097
IP address blocks:        162.208.108.0/22 maxlen: 24
                          2604:ab80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d4:1b:95:59:90:00:30:ff:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=159cbf04-5c79-436a-b386-50ef1578f974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:6b:21:bc:a8:3e:fe:b9:e4:0c:49:d9:56:
                    18:2a:b4:8f:c8:98:a3:8d:94:b4:e4:5f:bb:44:82:
                    8f:ba:51:fc:cc:2f:01:29:03:8f:65:de:07:fc:2a:
                    f9:22:d4:69:50:dc:0a:ff:56:2d:c3:7a:2d:1c:22:
                    0e:4a:6e:93:b4:bf:be:ec:da:49:27:98:df:51:5d:
                    46:ab:c0:9c:ef:64:31:76:36:2b:c9:00:ba:70:9b:
                    ea:e0:96:da:60:be:fb:c8:60:1f:d2:8c:47:b1:1c:
                    13:ec:b5:ef:22:c0:28:98:9b:74:ad:bb:4d:af:4e:
                    62:e9:0d:ab:a1:b6:88:f8:8b:f8:b8:f4:3e:43:0e:
                    b8:de:fc:4a:73:d1:87:df:b5:bc:28:7d:98:c6:b5:
                    55:7d:28:05:35:04:bd:14:45:81:e2:2e:6c:64:9d:
                    67:91:11:67:ba:1e:f8:14:63:36:a2:d2:4e:c3:1a:
                    a2:91:b4:0a:f4:46:07:d2:a5:34:29:34:bf:d8:9d:
                    5a:d2:06:a6:3c:57:36:1c:e5:51:2f:fc:44:f0:38:
                    d7:25:a8:f1:34:de:56:5d:a9:b3:e3:ac:a7:bf:ab:
                    4e:a0:1c:3c:f8:8e:e8:e3:48:39:71:cc:c0:ca:e8:
                    e3:4a:3c:7e:1c:ce:3f:d6:18:ec:75:3f:1e:55:bd:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6D:49:3D:F8:8D:8B:B7:26:BD:32:EA:35:2F:71:E4:8E:77:86:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/992c9122-07ff-3812-8aad-8c25b1f4c4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl

            X509v3 Authority Key Identifier:
                keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.108.0/22
                IPv6:
                  2604:ab80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e2:7b:d3:9f:d1:be:9b:ce:fe:f1:90:3b:85:57:84:95:68:
         2d:a5:ef:c7:eb:c2:d0:c2:73:c4:5e:17:f6:3a:3c:4d:77:16:
         24:0c:3b:8d:72:59:00:52:62:f8:f1:63:97:18:62:8d:9b:46:
         f2:b7:de:2f:02:2c:46:66:98:e2:a9:cf:3e:e1:d6:41:3b:28:
         41:79:d6:a2:e8:33:8e:c2:7f:82:7a:28:e6:51:e6:33:58:9a:
         5c:b7:72:bb:6a:22:b0:79:4b:d0:b2:b2:86:10:36:1d:22:a0:
         4c:e9:b5:45:5b:60:28:1f:1f:0d:d4:c5:83:69:47:a1:30:9c:
         63:82:16:3b:67:df:60:41:53:6d:77:fe:0f:0a:27:ad:67:41:
         0f:69:e3:51:2f:83:61:b5:94:37:b9:1a:f1:ef:10:47:d0:30:
         61:1a:6c:77:93:03:a4:f2:da:42:cf:cb:73:84:b5:8c:9e:16:
         c3:11:78:0b:01:52:21:14:f2:fa:a7:32:24:ac:6a:e7:57:aa:
         b8:3d:b6:d3:d3:1a:d2:e8:5f:b0:41:8d:c3:1f:87:45:47:71:
         ed:02:b9:1d:67:6b:d0:62:e3:65:7a:da:7e:9c:12:bc:ba:bd:
         b9:cc:83:51:d8:f3:a2:0f:9d:38:d4:d1:40:e9:cb:dd:bc:7b:
         4c:0c:41:ec
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEisYNQblVmQADD/wAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRlMjgzM2QtYTllYS00MjJkLWE1YjUtYmEyYjlhYTk0
ODZhMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk
MTU5Y2JmMDQtNWM3OS00MzZhLWIzODYtNTBlZjE1NzhmOTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/hrIbyoPv655AxJ2VYYKrSPyJijjZS05F+7
RIKPulH8zC8BKQOPZd4H/Cr5ItRpUNwK/1Ytw3otHCIOSm6TtL++7NpJJ5jfUV1G
q8Cc72QxdjYryQC6cJvq4JbaYL77yGAf0oxHsRwT7LXvIsAomJt0rbtNr05i6Q2r
obaI+Iv4uPQ+Qw643vxKc9GH37W8KH2YxrVVfSgFNQS9FEWB4i5sZJ1nkRFnuh74
FGM2otJOwxqikbQK9EYH0qU0KTS/2J1a0gamPFc2HOVRL/xE8DjXJajxNN5WXamz
46ynv6tOoBw8+I7o40g5cczAyujjSjx+HM4/1hjsdT8eVb1WTQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFNhtST34jYu3Jr0y6jUvceSOd4YhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNGUy
ODMzZC1hOWVhLTQyMmQtYTViNS1iYTJiOWFhOTQ4NmEvOTkyYzkxMjItMDdmZi0z
ODEyLThhYWQtOGMyNWIxZjRjNGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzRlMjgzM2QtYTllYS00MjJkLWE1
YjUtYmEyYjlhYTk0ODZhLzM0ZTI4MzNkLWE5ZWEtNDIyZC1hNWI1LWJhMmI5YWE5
NDg2YS5jcmwwHwYDVR0jBBgwFoAUWBrNGi+iDrfQcDwgm1lK/qlpxKEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNGUyODMzZC1hOWVhLTQyMmQtYTViNS1iYTJi
OWFhOTQ4NmEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCotBsMA0E
AgACMAcDBQAmBKuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAJPie9Of0b6bzv7xkDuFV4SVaC2l78frwtDC
c8ReF/Y6PE13FiQMO41yWQBSYvjxY5cYYo2bRvK33i8CLEZmmOKpzz7h1kE7KEF5
1qLoM47Cf4J6KOZR5jNYmly3crtqIrB5S9CysoYQNh0ioEzptUVbYCgfHw3UxYNp
R6EwnGOCFjtn32BBU213/g8KJ61nQQ9p41Evg2G1lDe5GvHvEEfQMGEabHeTA6Ty
2kLPy3OEtYyeFsMReAsBUiEU8vqnMiSsaudXqrg9ttPTGtLoX7BBjcMfh0VHce0C
uR1na9Bi42V62n6cEry6vbnMg1HY86IPnTjU0UDpy928e0wMQew=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:44:26 2025 by rpki-client