Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
File:                     ab83317e-d613-3cc0-837d-292716cc95ae.roa (raw, json)
Hash identifier:          SjuGYKYbe/3okneG3puF/o8GB7Iza0fKYOfO/vTJ2Os=
Subject key identifier:   F0:66:FE:8A:DC:22:9B:C6:A7:A3:BA:D7:83:BA:71:D3:AF:22:36:B3
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584891DB30593614B3F1B6839DA0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
Signing time:             Fri 17 Jan 2025 02:00:40 +0000
ROA not before:           Fri 17 Jan 2025 02:00:40 +0000
ROA not after:            Thu 17 Apr 2025 01:00:40 +0000
asID:                     397518
IP address blocks:        208.109.143.0/24 maxlen: 24
                          208.109.145.0/24 maxlen: 24
                          2603:4:1017::/64 maxlen: 64
                          2603:4:1018::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:db:30:59:36:14:b3:f1:b6:83:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jan 17 02:00:40 2025 GMT
            Not After : Apr 17 01:00:40 2025 GMT
        Subject: CN=72737328-d24b-4347-bebd-9263ede4851e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:1d:78:99:54:ad:20:43:ed:ef:90:2b:1c:
                    25:80:ef:20:c9:b5:d3:d0:dc:09:c9:22:50:6c:c6:
                    f2:2c:ef:65:6e:6b:77:28:8c:5d:73:8c:9f:f8:be:
                    35:c0:23:fc:2f:2d:c5:74:55:6c:fa:cc:90:5a:ea:
                    63:1f:cd:f4:dc:8c:ef:4b:e3:7e:cd:fe:09:dd:f1:
                    8e:d9:4e:ba:7d:39:32:e2:a5:29:48:ac:28:81:1d:
                    37:51:28:a1:cf:2e:af:71:e0:24:15:2c:2e:76:8c:
                    5f:2b:d8:d5:32:8a:e5:c6:3f:43:49:93:87:67:2f:
                    7d:cf:73:6e:fd:db:ee:b9:31:8a:dc:f0:fc:76:f5:
                    5b:69:02:1e:82:16:db:00:fc:f3:30:9b:c1:6c:86:
                    fa:71:3d:b2:3f:fd:b8:d7:86:29:ec:3a:64:dd:b2:
                    20:81:75:21:51:af:58:d6:53:e9:78:a2:cb:bf:73:
                    27:59:34:5a:24:75:12:c8:ee:6b:9d:b8:11:83:ac:
                    e0:b8:eb:c6:22:d2:7a:fe:61:f1:02:9d:5c:a9:5d:
                    13:34:04:80:5f:01:dd:5c:39:3f:5c:79:06:f7:b7:
                    05:9b:b6:16:7b:48:3e:8b:52:15:1f:76:d9:44:18:
                    0f:5e:f3:7f:94:8a:c4:23:20:b7:c6:54:1b:fb:15:
                    5f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:66:FE:8A:DC:22:9B:C6:A7:A3:BA:D7:83:BA:71:D3:AF:22:36:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.143.0/24
                  208.109.145.0/24
                IPv6:
                  2603:4:1017::/64
                  2603:4:1018::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0d:7f:d1:58:7b:af:5f:ce:27:b3:9a:93:8b:f3:e2:f7:7e:
         a8:56:41:c7:fb:59:c4:6e:2a:6c:7b:4f:7a:ee:cf:3b:a1:3c:
         e5:eb:15:ca:f7:40:52:e6:51:99:e6:65:36:a8:d8:fb:d4:b9:
         ec:23:f0:9f:8c:91:cd:8a:9c:f0:4e:01:5b:9d:2f:9e:6f:0f:
         c3:9b:b0:17:5f:5a:46:e7:0b:71:dd:45:df:cf:e2:72:21:09:
         07:f8:34:0f:3b:a3:63:a6:15:7f:b0:93:ac:18:9d:10:41:5e:
         e8:cb:4f:12:2a:91:22:72:02:ca:22:b8:e9:2d:1e:b4:b7:76:
         f4:4c:1b:ae:6b:77:68:3a:d4:5b:f2:10:c2:c5:5e:3c:29:90:
         83:62:4c:26:aa:14:4b:3b:07:af:56:8d:31:b8:a7:2e:70:04:
         45:4a:84:ee:86:14:18:16:65:1d:2f:c8:d4:17:80:2c:1e:06:
         2a:d3:44:c3:8e:8e:73:e2:12:09:0a:b4:23:59:9f:e3:72:99:
         7e:6d:c3:64:b9:e2:85:46:b9:01:87:03:19:ea:ca:68:d2:c5:
         4e:4a:62:e4:c4:bf:8d:9e:5f:1f:c7:af:b9:6a:73:ec:6e:e2:
         9c:b9:af:ce:7d:33:2e:e5:1a:fb:4b:2c:4e:8e:31:13:6d:c8:
         b0:bc:7c:05
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEiR2zBZNhSz8baDnaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk
NzI3MzczMjgtZDI0Yi00MzQ3LWJlYmQtOTI2M2VkZTQ4NTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAUdeJlUrSBD7e+QKxwlgO8gybXT0NwJySJQ
bMbyLO9lbmt3KIxdc4yf+L41wCP8Ly3FdFVs+syQWupjH8303IzvS+N+zf4J3fGO
2U66fTky4qUpSKwogR03USihzy6vceAkFSwudoxfK9jVMorlxj9DSZOHZy99z3Nu
/dvuuTGK3PD8dvVbaQIeghbbAPzzMJvBbIb6cT2yP/2414Yp7Dpk3bIggXUhUa9Y
1lPpeKLLv3MnWTRaJHUSyO5rnbgRg6zguOvGItJ6/mHxAp1cqV0TNASAXwHdXDk/
XHkG97cFm7YWe0g+i1IVH3bZRBgPXvN/lIrEIyC3xlQb+xVfswIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFPBm/orcIpvGp6O614O6cdOvIjazMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvYWI4MzMxN2UtZDYxMy0z
Y2MwLTgzN2QtMjkyNzE2Y2M5NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjASBAIAATAMAwQA0G2PAwQA
0G2RMBwEAgACMBYDCQAmAwAEEBcAAAMJACYDAAQQGAAAMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG8Nf9FY
e69fziezmpOL8+L3fqhWQcf7WcRuKmx7T3ruzzuhPOXrFcr3QFLmUZnmZTao2PvU
uewj8J+Mkc2KnPBOAVudL55vD8ObsBdfWkbnC3HdRd/P4nIhCQf4NA87o2OmFX+w
k6wYnRBBXujLTxIqkSJyAsoiuOktHrS3dvRMG65rd2g61FvyEMLFXjwpkINiTCaq
FEs7B69WjTG4py5wBEVKhO6GFBgWZR0vyNQXgCweBirTRMOOjnPiEgkKtCNZn+Ny
mX5tw2S54oVGuQGHAxnqymjSxU5KYuTEv42eXx/Hr7lqc+xu4py5r859My7lGvtL
LE6OMRNtyLC8fAU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:32 2025 by rpki-client