Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/487572cc-5dfc-3688-b80b-974e65fad34a.roa
File:                     487572cc-5dfc-3688-b80b-974e65fad34a.roa (raw, json)
Hash identifier:          6Ri4Z8PoQrQNmcTFWZxlvvlKV8eH4SWOOfZ7keRr7Ik=
Subject key identifier:   EF:3D:9C:B9:2E:F6:B2:11:54:55:5B:DF:80:F0:62:DB:F6:2E:BC:D8
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F432858493243D774357D6CA2ED9F4B40
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/487572cc-5dfc-3688-b80b-974e65fad34a.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        155.226.208.0/20 maxlen: 24
                          155.226.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:d7:74:35:7d:6c:a2:ed:9f:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=ff150155-b524-4930-b69c-b489d1fcb307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:1f:b1:7d:d6:7f:0f:0a:d3:bd:a7:3e:98:
                    d5:11:a6:e0:d5:d0:34:98:3c:b9:e8:18:3b:bb:b7:
                    1c:84:d7:33:96:d7:1d:99:b8:ef:a8:47:98:b1:d9:
                    76:1e:3b:f0:48:d5:bc:07:f4:68:f1:02:fa:84:88:
                    9a:99:08:8f:29:2a:a5:e7:62:ab:ef:73:22:21:0d:
                    24:ca:63:7d:ef:52:ae:c5:b9:1f:16:ea:a3:9c:b4:
                    76:a3:01:38:42:e1:85:13:01:5c:90:b6:a4:7e:4a:
                    b4:c7:1d:7d:25:65:78:e8:eb:81:ab:83:af:df:e0:
                    27:6d:d1:93:0e:d1:7a:b5:27:ac:c0:63:96:46:bc:
                    c8:83:cd:b0:31:4e:7a:e5:1e:61:82:36:08:10:a4:
                    c4:fc:28:46:70:99:e9:54:f0:65:f9:a2:30:b6:02:
                    a2:02:13:43:c1:e3:9f:0e:6e:7f:9f:46:91:a6:3a:
                    a8:97:2b:18:fc:62:6b:0e:ab:0d:08:b1:e7:12:52:
                    c7:44:42:17:d0:e1:30:08:0f:69:a3:bd:03:3e:14:
                    a3:3b:47:e4:c8:e3:f6:64:6d:a2:b2:cc:10:4d:39:
                    23:6b:be:6d:a3:13:16:37:a4:e9:20:a0:0b:53:cf:
                    d5:ad:6f:92:5d:bf:57:fc:ce:36:61:e7:a3:c2:d8:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3D:9C:B9:2E:F6:B2:11:54:55:5B:DF:80:F0:62:DB:F6:2E:BC:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/487572cc-5dfc-3688-b80b-974e65fad34a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.208.0-155.226.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:1a:c2:38:7f:35:2f:12:ea:98:6a:44:10:9e:c1:60:86:7e:
         6b:b6:ae:7c:ed:1a:93:5f:ba:cf:8f:dc:88:37:e2:8c:8e:10:
         02:78:4c:c1:ee:09:6e:79:5f:8f:b4:ae:a8:78:6c:8e:4a:31:
         c3:b3:96:e5:03:86:69:04:f8:32:fa:63:52:4a:38:7d:59:d6:
         01:61:5b:69:86:b7:4a:d3:97:0c:f0:b8:4c:ef:e4:c5:3f:06:
         13:f6:48:d8:e4:56:8b:d6:13:83:6f:05:bf:1e:56:53:cb:64:
         7a:a2:d5:9d:92:80:47:f5:45:6c:80:43:72:4b:cd:8b:e1:b6:
         df:30:73:7d:9f:f4:0d:e1:2b:67:20:02:3a:c7:49:46:c7:84:
         c7:7c:8e:b2:63:0a:6d:af:fb:b8:59:b0:d4:04:25:5b:c0:8e:
         31:0e:d1:91:3d:14:c0:8a:d2:e1:c9:38:d3:e3:d2:01:aa:9e:
         cc:f3:71:15:9f:92:25:fb:05:4b:44:72:53:eb:4f:39:91:2b:
         c0:67:7b:f0:16:4f:be:f2:7c:e7:1f:55:47:02:ce:67:ae:22:
         9a:06:fe:0b:cf:b5:f5:c1:df:06:4d:83:dd:77:61:84:5a:19:
         ea:d9:c1:2e:b7:9a:51:30:90:78:5a:23:d8:61:18:7c:a5:80:
         ca:35:70:76
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkyQ9d0NX1sou2fS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZmYxNTAxNTUtYjUyNC00OTMwLWI2OWMtYjQ4OWQxZmNiMzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FEfsX3Wfw8K072nPpjVEabg1dA0mDy56Bg7
u7cchNczltcdmbjvqEeYsdl2HjvwSNW8B/Ro8QL6hIiamQiPKSql52Kr73MiIQ0k
ymN971KuxbkfFuqjnLR2owE4QuGFEwFckLakfkq0xx19JWV46OuBq4Ov3+AnbdGT
DtF6tSeswGOWRrzIg82wMU565R5hgjYIEKTE/ChGcJnpVPBl+aIwtgKiAhNDweOf
Dm5/n0aRpjqolysY/GJrDqsNCLHnElLHREIX0OEwCA9po70DPhSjO0fkyOP2ZG2i
sswQTTkja75toxMWN6TpIKALU8/VrW+SXb9X/M42YeejwtiltQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFO89nLku9rIRVFVb34DwYtv2LrzYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNDg3NTcyY2MtNWRmYy0z
Njg4LWI4MGItOTc0ZTY1ZmFkMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASb4tAD
BASb4uAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAhhrCOH81LxLqmGpEEJ7BYIZ+a7aufO0ak1+6z4/ciDfi
jI4QAnhMwe4Jbnlfj7SuqHhsjkoxw7OW5QOGaQT4MvpjUko4fVnWAWFbaYa3StOX
DPC4TO/kxT8GE/ZI2ORWi9YTg28Fvx5WU8tkeqLVnZKAR/VFbIBDckvNi+G23zBz
fZ/0DeErZyACOsdJRseEx3yOsmMKba/7uFmw1AQlW8COMQ7RkT0UwIrS4ck40+PS
AaqezPNxFZ+SJfsFS0RyU+tPOZErwGd78BZPvvJ85x9VRwLOZ64imgb+C8+19cHf
Bk2D3XdhhFoZ6tnBLreaUTCQeFoj2GEYfKWAyjVwdg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:40 2025 by rpki-client