Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4af89233-da0e-341c-afa8-d66644de70f2.roa
File:                     4af89233-da0e-341c-afa8-d66644de70f2.roa (raw, json)
Hash identifier:          4fK6LCKNpNlGjRySDpCWJABH1KyFdf2muxHpXtVDZ2M=
Subject key identifier:   44:83:AD:9E:BE:67:4C:0D:B5:67:A3:D4:80:AD:BC:2C:CA:43:B3:59
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E655033C550AFCECF3D9ED80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4af89233-da0e-341c-afa8-d66644de70f2.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        162.159.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:03:3c:55:0a:fc:ec:f3:d9:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=c272b542-9eef-4e84-bf3c-33ad628397de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:93:76:80:cd:4e:30:34:50:e9:ae:5b:a7:
                    c2:f7:38:2a:a0:18:cd:92:ea:84:4f:12:cd:0e:a5:
                    55:0b:90:38:b2:10:12:11:48:74:af:d4:65:d7:56:
                    38:68:41:47:dd:b1:2c:03:7c:d3:78:9a:35:e8:62:
                    99:72:71:6d:66:c3:77:c4:34:dd:85:f0:7b:e9:45:
                    55:4b:45:83:e3:40:bb:e5:a5:d2:8a:34:25:1d:23:
                    b1:21:de:e1:1a:ee:cb:35:0d:90:6d:28:f1:d9:3c:
                    b9:ca:03:3a:42:1f:a3:3f:97:e2:f5:38:7d:07:8b:
                    10:27:a2:60:12:85:ba:d1:f0:85:df:76:40:17:96:
                    15:bd:a8:2b:90:2c:98:f7:7c:4f:0e:a3:10:d3:a8:
                    a5:9c:40:0f:63:c6:ac:33:24:a3:29:ce:1b:64:45:
                    78:9e:f2:b9:d5:09:69:be:d7:f2:af:07:f1:82:f6:
                    e3:4d:6c:e3:f9:2b:04:47:f0:49:39:84:ee:52:47:
                    c9:9c:58:63:c2:3d:e1:1a:90:6a:42:1c:3b:37:74:
                    7d:da:e2:8a:c8:d1:34:51:72:7f:19:4b:23:bc:12:
                    15:14:65:47:5a:14:e0:e7:85:51:1d:00:77:98:c8:
                    69:76:38:bc:d7:d8:14:e3:76:7f:84:5e:ef:f9:7f:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:83:AD:9E:BE:67:4C:0D:B5:67:A3:D4:80:AD:BC:2C:CA:43:B3:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4af89233-da0e-341c-afa8-d66644de70f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a2:9c:d4:e8:6a:fa:bc:c5:c7:d5:e7:2f:2b:dd:4f:6a:93:
         0e:ab:12:62:aa:3e:e0:b6:20:7b:fb:cc:8a:e3:9c:a8:95:db:
         01:b9:c2:4c:79:8f:8b:4c:34:00:4a:a4:72:2d:32:66:91:8b:
         7e:09:71:c9:b7:08:1b:0b:44:c0:04:93:00:73:17:fd:d0:00:
         71:31:49:d8:3e:05:c5:d5:38:c2:4f:35:e0:ad:32:3d:ef:31:
         a6:11:90:fb:87:30:d9:84:74:86:f5:e9:16:97:18:76:60:08:
         f9:32:c9:0f:d4:db:c8:56:a5:96:4a:27:0e:80:e8:23:ec:6a:
         ab:22:7e:b3:53:cf:fd:d1:59:f0:20:01:e2:c9:97:75:45:99:
         33:22:53:1a:16:5f:39:d3:9e:83:48:96:35:9e:0c:78:15:1e:
         e5:73:4d:ea:5c:37:d0:f3:bf:27:57:74:59:6d:ee:46:cd:94:
         45:51:05:b4:b0:29:e4:8e:fa:60:95:b4:58:04:72:30:ff:0c:
         53:46:05:26:a0:44:2e:dc:28:94:bc:f9:bc:75:db:86:78:5e:
         25:6c:09:21:f3:e7:93:3e:d6:58:e1:64:61:22:09:56:e9:b4:
         63:13:38:41:43:ea:53:d5:a0:b5:ba:49:d7:6e:cc:bf:70:ed:
         85:f4:87:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQM8VQr87PPZ7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
YzI3MmI1NDItOWVlZi00ZTg0LWJmM2MtMzNhZDYyODM5N2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdqTdoDNTjA0UOmuW6fC9zgqoBjNkuqETxLN
DqVVC5A4shASEUh0r9Rl11Y4aEFH3bEsA3zTeJo16GKZcnFtZsN3xDTdhfB76UVV
S0WD40C75aXSijQlHSOxId7hGu7LNQ2QbSjx2Ty5ygM6Qh+jP5fi9Th9B4sQJ6Jg
EoW60fCF33ZAF5YVvagrkCyY93xPDqMQ06ilnEAPY8asMySjKc4bZEV4nvK51Qlp
vtfyrwfxgvbjTWzj+SsER/BJOYTuUkfJnFhjwj3hGpBqQhw7N3R92uKKyNE0UXJ/
GUsjvBIVFGVHWhTg54VRHQB3mMhpdji819gU43Z/hF7v+X8TNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESDrZ6+Z0wNtWej1ICtvCzKQ7NZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGFmODkyMzMtZGEwZS0z
NDFjLWFmYTgtZDY2NjQ0ZGU3MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop88MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGainNToavq8xcfV5y8r3U9qkw6rEmKqPuC2IHv7zIrjnKiV2wG5wkx5
j4tMNABKpHItMmaRi34Jccm3CBsLRMAEkwBzF/3QAHExSdg+BcXVOMJPNeCtMj3v
MaYRkPuHMNmEdIb16RaXGHZgCPkyyQ/U28hWpZZKJw6A6CPsaqsifrNTz/3RWfAg
AeLJl3VFmTMiUxoWXznTnoNIljWeDHgVHuVzTepcN9DzvydXdFlt7kbNlEVRBbSw
KeSO+mCVtFgEcjD/DFNGBSagRC7cKJS8+bx124Z4XiVsCSHz55M+1ljhZGEiCVbp
tGMTOEFD6lPVoLW6SdduzL9w7YX0h8I=
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:42:49 2025 by rpki-client