Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/f8a715bd-7121-3011-90e1-e6726bcf1bcd.roa
File:                     f8a715bd-7121-3011-90e1-e6726bcf1bcd.roa (raw, json)
Hash identifier:          AuUDppEcsnM0gnrvwEB5akKi8fr2ugBQB2xSM9BvEE4=
Subject key identifier:   DE:87:CD:2A:E4:48:59:57:FC:6D:00:A9:05:96:50:1F:07:3A:6E:29
Certificate issuer:       /CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e
Certificate serial:       010D0C9F43285848F926A894C4F0F83BA45B8F80
Authority key identifier: BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/f8a715bd-7121-3011-90e1-e6726bcf1bcd.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        66.43.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a8:94:c4:f0:f8:3b:a4:5b:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=cb6258d4-c05d-4364-9ea1-36a85a42d45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a3:a4:5e:e8:7f:42:f0:3d:bf:cb:1d:7e:e3:
                    8b:94:2c:c4:ef:f3:12:67:07:91:50:a3:8b:41:f9:
                    98:26:73:23:51:58:74:fb:cb:7a:d8:36:b3:31:ef:
                    1c:03:26:58:2e:57:bb:1f:5b:44:f1:e9:a0:4e:58:
                    e5:62:b4:93:e6:82:8d:63:f1:8c:bd:a7:ac:15:d0:
                    66:16:20:b5:33:1f:79:78:07:92:fb:ed:dd:95:9f:
                    6c:94:c9:20:d9:6d:d4:b6:a3:37:72:aa:63:71:4a:
                    a1:dc:0a:3d:81:4c:00:b0:db:5c:98:6e:27:b9:94:
                    7f:96:1c:d1:68:97:24:85:25:64:ec:d6:13:f1:47:
                    ef:6a:a6:4d:d5:7f:29:f8:c3:04:bc:a8:fe:43:b9:
                    02:bb:5d:7b:a1:d5:bc:bf:19:b6:a1:2f:fc:35:e3:
                    8f:53:f2:97:60:77:9f:9d:22:c4:30:66:9c:3f:63:
                    e9:8c:92:8c:33:ea:63:8a:06:7a:4b:e4:30:b3:93:
                    8d:0d:f0:c8:09:a1:7b:a2:01:21:71:80:f8:ab:d8:
                    a4:b2:3f:ea:18:44:bc:29:25:76:2f:b7:96:85:9d:
                    78:3d:2c:02:b4:32:4b:a3:54:2e:fb:af:1b:b0:c4:
                    4b:73:9d:f3:54:f6:7a:57:69:67:3a:06:1a:05:63:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:87:CD:2A:E4:48:59:57:FC:6D:00:A9:05:96:50:1F:07:3A:6E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/f8a715bd-7121-3011-90e1-e6726bcf1bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl

            X509v3 Authority Key Identifier:
                keyid:BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0f:1d:23:ea:11:84:b9:b6:59:0c:5a:4a:25:68:d0:d7:71:
         6a:c7:1c:4a:e4:57:88:62:44:0d:e3:43:86:0a:59:c4:e0:cc:
         e4:aa:af:e2:a2:fa:19:af:53:b2:50:e3:43:d7:e7:bd:19:90:
         17:cb:fa:a5:e6:2f:8f:4a:10:03:66:4c:93:dc:2e:c6:07:84:
         39:a7:24:ae:ac:65:83:f7:93:65:1f:43:ed:1e:ce:94:56:5c:
         c5:cd:d6:0b:65:fb:b5:e4:ae:b7:0c:c2:91:44:87:d4:1b:6c:
         5c:7e:86:cb:5e:6f:57:81:4d:28:44:71:38:44:71:c5:d7:65:
         f4:12:bd:07:ba:fc:d8:24:ca:61:55:ce:d3:2a:db:36:bd:8f:
         a1:d7:99:24:ea:67:2a:64:d2:46:65:3b:a7:a9:e9:51:67:26:
         72:43:68:10:7d:d6:24:4a:ce:2e:da:57:1b:07:31:84:7f:7a:
         b3:9e:15:68:6f:3e:09:7d:22:27:ed:50:d3:66:c9:01:b0:d5:
         ee:4f:49:f0:13:9c:cb:69:7a:a0:75:98:b3:ac:00:c5:1a:37:
         c4:9f:42:57:d9:9e:27:a2:06:19:8c:0e:5e:ec:e6:6b:5b:52:
         b8:30:4a:13:c9:90:fc:85:3f:e5:f2:75:be:59:b6:fa:55:85:
         ad:84:85:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqiUxPD4O6Rbj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjOWE5NWUtNTNjMS00ZTFlLTljN2ItMzlmOGYyNDI0
MThlMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
Y2I2MjU4ZDQtYzA1ZC00MzY0LTllYTEtMzZhODVhNDJkNDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66OkXuh/QvA9v8sdfuOLlCzE7/MSZweRUKOL
QfmYJnMjUVh0+8t62DazMe8cAyZYLle7H1tE8emgTljlYrST5oKNY/GMvaesFdBm
FiC1Mx95eAeS++3dlZ9slMkg2W3UtqM3cqpjcUqh3Ao9gUwAsNtcmG4nuZR/lhzR
aJckhSVk7NYT8UfvaqZN1X8p+MMEvKj+Q7kCu117odW8vxm2oS/8NeOPU/KXYHef
nSLEMGacP2PpjJKMM+pjigZ6S+Qws5ONDfDICaF7ogEhcYD4q9iksj/qGES8KSV2
L7eWhZ14PSwCtDJLo1Qu+68bsMRLc53zVPZ6V2lnOgYaBWPHFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6HzSrkSFlX/G0AqQWWUB8HOm4pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmM5
YTk1ZS01M2MxLTRlMWUtOWM3Yi0zOWY4ZjI0MjQxOGUvZjhhNzE1YmQtNzEyMS0z
MDExLTkwZTEtZTY3MjZiY2YxYmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjOWE5NWUtNTNjMS00ZTFlLTlj
N2ItMzlmOGYyNDI0MThlLzFmYzlhOTVlLTUzYzEtNGUxZS05YzdiLTM5ZjhmMjQy
NDE4ZS5jcmwwHwYDVR0jBBgwFoAUv7hHWl8zbbcL3sRLmQA2rGdA0N4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmM5YTk1ZS01M2MxLTRlMWUtOWM3Yi0zOWY4
ZjI0MjQxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQisCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEPHSPqEYS5tlkMWkolaNDXcWrHHErkV4hiRA3jQ4YKWcTgzOSqr+Ki
+hmvU7JQ40PX570ZkBfL+qXmL49KEANmTJPcLsYHhDmnJK6sZYP3k2UfQ+0ezpRW
XMXN1gtl+7XkrrcMwpFEh9QbbFx+hsteb1eBTShEcThEccXXZfQSvQe6/NgkymFV
ztMq2za9j6HXmSTqZypk0kZlO6ep6VFnJnJDaBB91iRKzi7aVxsHMYR/erOeFWhv
Pgl9IiftUNNmyQGw1e5PSfATnMtpeqB1mLOsAMUaN8SfQlfZnieiBhmMDl7s5mtb
UrgwShPJkPyFP+Xydb5ZtvpVha2EhSU=
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:08 2025 by rpki-client