Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa
File:                     cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa (raw, json)
Hash identifier:          l2Xnu2tnD3VGu2P/6q7Q9kou1SrlDEHTJD0uqqRUG5M=
Subject key identifier:   8C:1D:BB:EE:91:2E:74:9A:FD:18:24:51:90:09:40:00:F5:9C:32:D3
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F432858483B4FFC28D1A91390EB0C3400
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     53334
IP address blocks:        162.252.214.70/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:fc:28:d1:a9:13:90:eb:0c:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=49a63865-2764-445d-8b57-377088d44657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:7e:77:1f:d5:d0:6d:8f:01:d9:5a:ac:be:
                    68:a0:48:d9:0d:29:05:11:da:9a:c6:8d:fa:de:cf:
                    a9:70:1f:72:63:e1:93:d9:02:48:5d:d6:bf:b8:b5:
                    0f:bf:7e:31:6c:43:91:b8:a0:b0:ce:b6:e1:f6:9b:
                    32:8c:9d:b4:55:ad:6a:cd:32:9b:d1:88:16:52:6e:
                    af:d5:68:01:9d:f2:c2:fd:7b:d9:fe:02:1c:50:42:
                    85:19:f0:32:58:53:85:ee:14:7e:86:54:b8:f7:2b:
                    89:6d:e9:83:c4:48:69:ca:20:d2:36:03:82:c0:cd:
                    a1:ae:c9:28:d2:84:77:fc:12:36:f9:a9:fe:2a:2c:
                    7b:99:d2:f7:6c:3f:24:00:17:2d:d4:b4:3d:2f:e1:
                    3e:cc:c1:37:a7:cb:32:cf:77:cc:0b:3c:c9:0d:93:
                    d5:c6:d0:dc:4e:16:1c:37:bf:a1:b9:06:8b:b4:78:
                    be:26:7d:45:ef:37:c5:14:7e:0c:b5:9a:e8:4a:dc:
                    ee:89:19:0c:f4:59:8b:6f:be:97:29:65:df:da:ed:
                    bd:c2:98:c7:41:7b:96:29:d2:ec:86:47:97:88:8f:
                    b5:a6:75:b5:af:18:c8:7d:e9:b8:bc:dc:f2:3d:43:
                    68:84:c9:b4:7e:ab:4c:2e:f7:ef:8e:a8:6d:24:de:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1D:BB:EE:91:2E:74:9A:FD:18:24:51:90:09:40:00:F5:9C:32:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.214.70/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:36:12:4e:b8:6c:f4:83:2a:e2:63:1a:b1:2d:02:46:13:b0:
         fe:8c:b8:9b:5b:dd:b2:40:6b:03:2e:56:d0:62:7e:80:22:3f:
         2b:a4:da:ad:c3:65:47:63:74:bc:0c:ac:8a:dd:42:26:a1:3a:
         c4:b3:82:43:a7:86:f0:9d:a1:c6:f7:a9:3b:c0:e4:5a:4f:25:
         1f:1c:73:97:cc:bb:1f:c8:ac:e8:1e:90:6b:90:07:81:47:1c:
         d2:cf:03:eb:0b:d2:72:1b:71:83:a2:e8:30:04:bd:43:62:1f:
         93:ea:9c:0c:25:40:70:80:04:51:46:9b:8d:09:97:58:8c:93:
         94:54:b2:ab:42:04:c4:28:9d:5c:bb:d5:50:45:e2:89:49:6c:
         17:8c:0b:4d:68:bd:83:ef:db:79:eb:68:fb:42:9d:08:ab:e1:
         e5:ac:33:ac:fa:bb:2a:da:75:ad:1e:91:10:86:60:5a:75:c8:
         97:a4:f1:c8:cb:80:45:86:c9:99:fd:b0:8b:91:50:ba:41:32:
         60:8f:17:9e:4c:22:04:6f:61:29:9f:cc:10:0a:de:72:4d:61:
         07:a2:36:1d:70:40:2c:13:70:ca:60:4c:17:6a:a9:32:40:e6:
         32:d8:3b:c8:ef:7b:97:e4:08:d6:5c:82:e0:c5:9a:68:e9:59:
         33:2b:72:50
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEg7T/wo0akTkOsMNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FhYmFjZGMtNjQxOS00OTcwLTgyOTgtYzdjNDRmZjhj
OGQ0MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
NDlhNjM4NjUtMjc2NC00NDVkLThiNTctMzc3MDg4ZDQ0NjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphl+dx/V0G2PAdlarL5ooEjZDSkFEdqaxo36
3s+pcB9yY+GT2QJIXda/uLUPv34xbEORuKCwzrbh9psyjJ20Va1qzTKb0YgWUm6v
1WgBnfLC/XvZ/gIcUEKFGfAyWFOF7hR+hlS49yuJbemDxEhpyiDSNgOCwM2hrsko
0oR3/BI2+an+Kix7mdL3bD8kABct1LQ9L+E+zME3p8syz3fMCzzJDZPVxtDcThYc
N7+huQaLtHi+Jn1F7zfFFH4MtZroStzuiRkM9FmLb76XKWXf2u29wpjHQXuWKdLs
hkeXiI+1pnW1rxjIfem4vNzyPUNohMm0fqtMLvfvjqhtJN5wlQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIwdu+6RLnSa/RgkUZAJQAD1nDLTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFi
YWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0NGZmOGM4ZDQvY2ZkMTg2NWQtMGZkNy0z
MmVmLWE0YjktYjY1M2JhM2FhZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2FhYmFjZGMtNjQxOS00OTcwLTgy
OTgtYzdjNDRmZjhjOGQ0LzdhYWJhY2RjLTY0MTktNDk3MC04Mjk4LWM3YzQ0ZmY4
YzhkNC5jcmwwHwYDVR0jBBgwFoAUSi2qGuvjHkLhZSpd8g0bkQM72TswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFiYWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0
NGZmOGM4ZDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAovzWRjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAcNhJOuGz0gyriYxqxLQJGE7D+jLibW92yQGsDLlbQYn6AIj8rpNqt
w2VHY3S8DKyK3UImoTrEs4JDp4bwnaHG96k7wORaTyUfHHOXzLsfyKzoHpBrkAeB
RxzSzwPrC9JyG3GDougwBL1DYh+T6pwMJUBwgARRRpuNCZdYjJOUVLKrQgTEKJ1c
u9VQReKJSWwXjAtNaL2D79t562j7Qp0Iq+HlrDOs+rsq2nWtHpEQhmBadciXpPHI
y4BFhsmZ/bCLkVC6QTJgjxeeTCIEb2Epn8wQCt5yTWEHojYdcEAsE3DKYEwXaqky
QOYy2DvI73uX5AjWXILgxZpo6VkzK3JQ
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:32 2025 by rpki-client