Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43c81604-e60d-36b5-8a53-b596109ed840.roa
File:                     43c81604-e60d-36b5-8a53-b596109ed840.roa (raw, json)
Hash identifier:          oeTEbfihv6EMDgN1CQRhKe3W5XNZp+zKWaoSBve2XkE=
Subject key identifier:   BD:C6:7B:55:F4:B5:DC:57:E8:A5:6A:C8:6D:A5:43:CE:E9:71:CB:90
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F432858489BA0B05A6E03428A5D46A040
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43c81604-e60d-36b5-8a53-b596109ed840.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        162.215.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b0:5a:6e:03:42:8a:5d:46:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=c8b90d7c-3739-4a01-ae83-b491740a2af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:38:91:e4:23:16:e7:a9:a6:e9:8d:dd:47:c9:
                    d4:7c:18:43:26:95:ac:45:ef:ea:b8:96:8c:a2:d8:
                    0e:7e:6d:ae:3c:1d:3a:17:1d:e8:b8:1b:65:87:c2:
                    9a:ac:f4:b9:9e:e0:f4:94:28:fb:ca:9e:49:f7:10:
                    40:ff:0f:ef:f0:a4:4d:d3:8a:bf:41:d4:bf:ed:e6:
                    01:d4:96:6a:98:1a:96:83:bd:de:ce:5e:19:bf:47:
                    f9:f9:b3:41:c1:f5:e8:6b:d2:c4:67:02:f2:db:4f:
                    22:49:ba:83:42:83:8b:a1:33:68:56:8c:fc:23:2b:
                    61:40:1f:dc:7b:fa:60:59:33:d6:e0:f9:ea:66:f1:
                    03:5c:de:71:5c:a6:6b:3a:68:4f:af:3f:c3:ac:44:
                    df:31:0e:af:b3:b4:bf:aa:c2:27:76:a5:32:7f:94:
                    4a:d6:84:96:a2:96:9f:3b:d1:07:af:f0:83:04:76:
                    bb:11:fc:2b:0e:cc:f0:67:38:a5:91:40:09:cb:b5:
                    d3:0e:da:22:15:8f:dc:6d:87:3b:ad:33:7b:e6:4a:
                    64:09:0f:fe:9d:dd:52:f9:72:b6:a4:54:f4:03:5d:
                    68:48:b9:00:c3:d8:47:21:5e:1a:de:ea:92:c8:57:
                    06:56:52:8f:93:27:fd:8b:b7:78:d5:92:ce:67:8a:
                    9c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:7B:55:F4:B5:DC:57:E8:A5:6A:C8:6D:A5:43:CE:E9:71:CB:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43c81604-e60d-36b5-8a53-b596109ed840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.215.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:72:5c:33:5a:17:0b:67:0e:b2:21:2b:a2:83:07:2d:72:02:
         de:49:d5:a9:29:91:42:40:24:15:e5:7f:7a:e8:aa:4d:45:12:
         ae:8e:a6:ac:d3:88:a5:76:31:b7:b1:33:1b:72:ce:09:12:70:
         42:cb:5a:8d:4d:43:11:72:c2:08:9e:6f:7c:df:17:66:e4:d0:
         fe:9d:94:e8:c2:73:e7:7a:19:b4:88:8d:32:34:a8:06:98:65:
         48:7c:09:ef:48:89:3a:09:17:a7:93:6d:d3:25:af:cf:20:42:
         5c:d9:ad:5b:a4:c6:38:8d:92:dc:ca:0b:00:1c:a6:37:3d:e0:
         f7:7b:27:17:9d:2c:c7:e3:f4:e3:6b:4f:2d:2f:14:1f:6d:2c:
         fe:02:9b:e7:62:44:9a:19:95:d1:80:f9:6e:1a:cc:15:e7:60:
         96:f7:28:44:be:62:b0:19:df:09:52:0a:17:c6:11:4d:67:8b:
         6a:c9:ec:19:50:da:9d:42:37:1e:fe:01:17:f3:2f:09:36:c7:
         c0:10:54:9f:cb:96:10:3d:ef:fb:87:40:0e:08:76:82:97:99:
         a4:1b:f2:f3:7b:b3:c1:6f:0c:ce:c8:b9:40:ec:2b:74:c1:d8:
         87:68:e0:6d:30:7f:12:9a:bc:af:89:f1:e9:ec:47:20:ef:ee:
         24:2e:be:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboLBabgNCil1GoEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi
OTFiMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
YzhiOTBkN2MtMzczOS00YTAxLWFlODMtYjQ5MTc0MGEyYWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDiR5CMW56mm6Y3dR8nUfBhDJpWsRe/quJaM
otgOfm2uPB06Fx3ouBtlh8KarPS5nuD0lCj7yp5J9xBA/w/v8KRN04q/QdS/7eYB
1JZqmBqWg73ezl4Zv0f5+bNBwfXoa9LEZwLy208iSbqDQoOLoTNoVoz8IythQB/c
e/pgWTPW4PnqZvEDXN5xXKZrOmhPrz/DrETfMQ6vs7S/qsIndqUyf5RK1oSWopaf
O9EHr/CDBHa7EfwrDszwZzilkUAJy7XTDtoiFY/cbYc7rTN75kpkCQ/+nd1S+XK2
pFT0A11oSLkAw9hHIV4a3uqSyFcGVlKPkyf9i7d41ZLOZ4qcewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3Ge1X0tdxX6KVqyG2lQ87pccuQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl
N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvNDNjODE2MDQtZTYwZC0z
NmI1LThhNTMtYjU5NjEwOWVkODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0
MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh
YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl
ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotfnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhyXDNaFwtnDrIhK6KDBy1yAt5J1akpkUJAJBXlf3roqk1FEq6OpqzT
iKV2MbexMxtyzgkScELLWo1NQxFywgieb3zfF2bk0P6dlOjCc+d6GbSIjTI0qAaY
ZUh8Ce9IiToJF6eTbdMlr88gQlzZrVukxjiNktzKCwAcpjc94Pd7JxedLMfj9ONr
Ty0vFB9tLP4Cm+diRJoZldGA+W4azBXnYJb3KES+YrAZ3wlSChfGEU1ni2rJ7BlQ
2p1CNx7+ARfzLwk2x8AQVJ/LlhA97/uHQA4IdoKXmaQb8vN7s8FvDM7IuUDsK3TB
2Ido4G0wfxKavK+J8ensRyDv7iQuvpo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:08 2025 by rpki-client