Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa
File:                     a897618a-4040-3184-a2f7-6b8bbb840675.roa (raw, json)
Hash identifier:          sf7V6J6+hUt4641o6V/gKv/IOMi+nA6nuscSyH2NCdw=
Subject key identifier:   FB:51:F9:FE:02:C3:66:56:6E:27:36:9B:EC:1D:1C:75:FC:D8:F1:B6
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285848A9962343E9D8453498614480
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     14340
IP address blocks:        140.190.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:23:43:e9:d8:45:34:98:61:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=eeb26320-954b-420d-994b-dc398d48fb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:73:5c:da:ce:74:f7:98:79:5e:95:23:a7:82:
                    79:ed:37:3b:86:b9:c3:02:06:77:d1:50:67:99:52:
                    37:1e:e9:0f:df:e4:61:58:1b:83:66:e2:49:7c:bc:
                    fb:ac:bc:c5:d0:e8:dc:8b:4e:d4:0b:fe:84:e3:06:
                    56:7e:fe:ef:35:3a:1b:42:ec:60:f9:c1:d8:a8:34:
                    ff:83:ca:1e:bc:6f:ae:7e:2a:8f:86:c2:a8:2c:e6:
                    84:b7:6b:17:45:70:4d:d8:0b:2c:6f:ca:4e:07:a4:
                    6e:9d:87:d6:88:56:10:c8:c7:bb:d3:62:02:eb:7a:
                    e6:37:d6:89:32:ff:11:41:5c:df:5d:44:ca:a1:d5:
                    27:d0:d9:6c:59:45:37:6e:c8:7f:66:5e:b2:fa:e2:
                    00:67:7a:84:80:f2:6e:4f:06:1c:fb:08:a5:01:aa:
                    7c:29:75:2f:75:26:7f:7c:23:05:57:88:92:cb:59:
                    42:77:bc:97:65:af:f6:8e:1f:2d:b3:c3:be:ba:44:
                    91:d4:b0:1f:06:07:f2:66:b0:65:d3:4c:cb:d6:96:
                    60:e9:f0:13:b0:c5:93:d5:8a:0d:61:ea:01:15:7a:
                    1d:3b:b8:18:7d:09:75:57:17:a3:01:97:a7:b7:aa:
                    4a:df:a5:57:7b:92:b6:28:0f:3f:7c:77:ca:05:b1:
                    08:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:51:F9:FE:02:C3:66:56:6E:27:36:9B:EC:1D:1C:75:FC:D8:F1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.190.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:d3:42:5b:ee:25:d1:c4:ed:09:4b:7a:8b:1c:c9:89:46:
         09:99:91:43:e3:d4:32:71:61:7a:86:b0:6f:f5:c1:2f:d9:7c:
         92:97:44:7c:ae:a7:d5:14:39:ff:e9:1f:99:f5:17:d5:49:47:
         e2:30:27:88:fb:5f:63:bd:67:47:ab:c2:17:8b:e6:e4:1f:e8:
         55:4c:73:ef:43:2b:69:9f:bf:f9:98:52:4b:b3:e7:4d:dd:33:
         22:42:ee:0a:d2:da:30:13:0e:35:f0:5b:c4:a5:dc:15:98:98:
         f6:6a:fb:3b:b1:01:c5:9d:e3:9a:61:84:d2:ca:50:3e:5c:05:
         6d:c1:11:af:b4:ab:a3:6f:4b:e3:17:49:41:02:f9:2b:46:91:
         9b:24:d6:c8:2a:8a:46:c0:a5:64:5b:b1:e4:8a:b6:26:c6:4f:
         25:bc:d2:9c:17:92:b1:23:80:b8:81:39:64:46:3c:9a:7c:a6:
         72:10:01:d0:8b:c0:52:32:50:94:59:b5:3f:3b:2f:70:95:11:
         ef:d5:33:74:57:9c:72:6f:a4:0e:84:92:65:f8:8d:dd:d7:34:
         e7:17:37:5a:f5:c7:99:c9:11:ff:39:fa:03:f6:51:e1:2d:7a:
         48:11:ea:58:34:ea:74:d4:49:d7:38:e6:97:d8:b1:a4:c0:48:
         de:bb:60:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliND6dhFNJhhRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWViMjYzMjAtOTU0Yi00MjBkLTk5NGItZGMzOThkNDhmYjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHNc2s5095h5XpUjp4J57Tc7hrnDAgZ30VBn
mVI3HukP3+RhWBuDZuJJfLz7rLzF0Ojci07UC/6E4wZWfv7vNTobQuxg+cHYqDT/
g8oevG+ufiqPhsKoLOaEt2sXRXBN2Assb8pOB6RunYfWiFYQyMe702IC63rmN9aJ
Mv8RQVzfXUTKodUn0NlsWUU3bsh/Zl6y+uIAZ3qEgPJuTwYc+wilAap8KXUvdSZ/
fCMFV4iSy1lCd7yXZa/2jh8ts8O+ukSR1LAfBgfyZrBl00zL1pZg6fATsMWT1YoN
YeoBFXodO7gYfQl1VxejAZent6pK36VXe5K2KA8/fHfKBbEImQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtR+f4Cw2ZWbic2m+wdHHX82PG2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvYTg5NzYxOGEtNDA0MC0z
MTg0LWEyZjctNmI4YmJiODQwNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjL7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADeo00Jb7iXRxO0JS3qLHMmJRgmZkUPj1DJxYXqGsG/1wS/ZfJKXRHyu
p9UUOf/pH5n1F9VJR+IwJ4j7X2O9Z0erwheL5uQf6FVMc+9DK2mfv/mYUkuz503d
MyJC7grS2jATDjXwW8Sl3BWYmPZq+zuxAcWd45phhNLKUD5cBW3BEa+0q6NvS+MX
SUEC+StGkZsk1sgqikbApWRbseSKtibGTyW80pwXkrEjgLiBOWRGPJp8pnIQAdCL
wFIyUJRZtT87L3CVEe/VM3RXnHJvpA6EkmX4jd3XNOcXN1r1x5nJEf85+gP2UeEt
ekgR6lg06nTUSdc45pfYsaTASN67YIM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:24 2025 by rpki-client