Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/cc418068-ff23-30f0-8642-aa83bd0d1b1f.roa
File:                     cc418068-ff23-30f0-8642-aa83bd0d1b1f.roa (raw, json)
Hash identifier:          DXfqdOCgDFCOQpFdr+8Fl4skI/rG1Pr7/XOJD8YOGg4=
Subject key identifier:   87:EC:7A:52:5B:7C:94:8B:5F:50:E3:41:C0:76:6C:72:07:3A:EE:5C
Certificate issuer:       /CN=fba57140-a369-4a3a-8edc-69732d179924
Certificate serial:       010D0C9F43285848F9268F94231EF94DEF8CAAE0
Authority key identifier: 0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/cc418068-ff23-30f0-8642-aa83bd0d1b1f.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     395279
IP address blocks:        134.199.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:8f:94:23:1e:f9:4d:ef:8c:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba57140-a369-4a3a-8edc-69732d179924
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=8b4f8d4d-085c-4a1e-a5a7-fb619e2673f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:26:b5:da:11:9c:b0:07:c8:82:06:9c:68:24:
                    3c:5d:e3:5b:c0:d7:7f:92:83:38:b1:4f:78:92:ec:
                    bd:2a:be:1f:7d:32:e8:d6:7b:eb:c6:86:47:bf:43:
                    5c:fd:4a:fe:03:f6:a7:e7:76:ec:bf:0f:84:5d:b3:
                    6b:cc:9a:b4:d8:45:3c:10:d9:2a:19:d9:08:3a:de:
                    26:86:43:08:e4:5d:9d:d7:a0:1c:0f:df:0c:25:a2:
                    e4:bb:05:48:1d:b6:ea:fd:28:dc:fd:d7:91:83:86:
                    09:a9:8c:28:b7:a5:0b:ec:bd:b2:ec:7f:ac:c6:a0:
                    17:09:58:b4:f8:44:ae:b5:41:21:d9:b4:49:30:ab:
                    ab:84:64:1a:9a:4f:53:31:dd:83:36:f9:0b:f7:ea:
                    42:34:27:e2:f2:cb:d0:e5:71:f4:d6:8c:9f:29:73:
                    e1:85:4a:cf:ea:12:e7:e5:07:e4:49:ba:73:f5:db:
                    00:a0:7f:21:0b:7b:c0:73:4a:58:a4:c7:ee:11:92:
                    c9:49:03:1e:bb:1c:37:fe:3f:aa:57:44:56:bd:ef:
                    6d:00:2c:4d:74:d1:6f:67:6e:17:0d:7c:e0:8e:02:
                    16:60:10:4f:93:cc:5a:1f:23:0d:d1:5b:ba:2f:ae:
                    6d:61:c2:d4:82:ec:b3:c7:eb:a8:03:b1:bc:19:a2:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:7A:52:5B:7C:94:8B:5F:50:E3:41:C0:76:6C:72:07:3A:EE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/cc418068-ff23-30f0-8642-aa83bd0d1b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl

            X509v3 Authority Key Identifier:
                keyid:0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:42:8c:b5:1f:21:14:65:33:5c:1a:32:7f:ce:95:89:ea:b1:
         c7:2a:fa:8e:de:63:c4:e4:21:81:61:72:0e:f3:bf:85:89:33:
         78:48:43:05:d2:42:86:a7:df:88:a7:d3:20:93:28:38:c9:75:
         b0:f7:3c:3a:b8:d9:66:49:cb:5f:fc:d9:82:ca:36:41:d0:a2:
         06:0c:1b:7d:1d:59:ec:92:68:ef:31:45:16:79:84:fa:96:01:
         92:59:84:44:29:a5:65:7f:fe:84:1a:26:f2:86:30:1e:5a:d2:
         9c:8b:01:31:40:1c:a4:1f:69:67:8b:7f:f1:ec:e2:ab:f4:92:
         03:35:74:a9:41:b9:70:f6:50:87:bc:e6:1b:af:98:ba:0e:9e:
         65:1f:42:e0:56:91:46:60:f4:f8:d6:5f:15:e7:69:75:8a:a2:
         83:b0:05:55:6e:11:f6:97:6a:86:9f:21:5a:05:e6:01:29:1a:
         4e:b6:88:d5:8e:48:ee:8c:df:1b:8e:8c:76:66:0b:80:ed:d9:
         ec:48:47:c7:b5:78:97:02:8c:da:1d:55:32:40:8d:1f:e9:f9:
         50:1c:f3:b7:6c:1a:77:76:8a:d6:d0:33:61:d5:fc:b9:a8:ce:
         e0:56:0d:7e:16:67:0e:20:2f:5c:3e:f3:50:f4:94:b0:78:75:
         a5:eb:52:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jo+UIx75Te+MquAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJhNTcxNDAtYTM2OS00YTNhLThlZGMtNjk3MzJkMTc5
OTI0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
OGI0ZjhkNGQtMDg1Yy00YTFlLWE1YTctZmI2MTllMjY3M2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgia12hGcsAfIggacaCQ8XeNbwNd/koM4sU94
kuy9Kr4ffTLo1nvrxoZHv0Nc/Ur+A/an53bsvw+EXbNrzJq02EU8ENkqGdkIOt4m
hkMI5F2d16AcD98MJaLkuwVIHbbq/Sjc/deRg4YJqYwot6UL7L2y7H+sxqAXCVi0
+ESutUEh2bRJMKurhGQamk9TMd2DNvkL9+pCNCfi8svQ5XH01oyfKXPhhUrP6hLn
5QfkSbpz9dsAoH8hC3vAc0pYpMfuEZLJSQMeuxw3/j+qV0RWve9tACxNdNFvZ24X
DXzgjgIWYBBPk8xaHyMN0Vu6L65tYcLUguyzx+uoA7G8GaLLowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfselJbfJSLX1DjQcB2bHIHOu5cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYmE1
NzE0MC1hMzY5LTRhM2EtOGVkYy02OTczMmQxNzk5MjQvY2M0MTgwNjgtZmYyMy0z
MGYwLTg2NDItYWE4M2JkMGQxYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmJhNTcxNDAtYTM2OS00YTNhLThl
ZGMtNjk3MzJkMTc5OTI0L2ZiYTU3MTQwLWEzNjktNGEzYS04ZWRjLTY5NzMyZDE3
OTkyNC5jcmwwHwYDVR0jBBgwFoAUDWL403FgbahEpHyrzghxZgeTlQMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mYmE1NzE0MC1hMzY5LTRhM2EtOGVkYy02OTcz
MmQxNzk5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsc7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNCjLUfIRRlM1waMn/OlYnqsccq+o7eY8TkIYFhcg7zv4WJM3hIQwXS
Qoan34in0yCTKDjJdbD3PDq42WZJy1/82YLKNkHQogYMG30dWeySaO8xRRZ5hPqW
AZJZhEQppWV//oQaJvKGMB5a0pyLATFAHKQfaWeLf/Hs4qv0kgM1dKlBuXD2UIe8
5huvmLoOnmUfQuBWkUZg9PjWXxXnaXWKooOwBVVuEfaXaoafIVoF5gEpGk62iNWO
SO6M3xuOjHZmC4Dt2exIR8e1eJcCjNodVTJAjR/p+VAc87dsGnd2itbQM2HV/Lmo
zuBWDX4WZw4gL1w+81D0lLB4daXrUqg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:40 2025 by rpki-client