Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/5a5f3053-58ff-38c2-be6f-a01be74f6fe9.roa
File:                     5a5f3053-58ff-38c2-be6f-a01be74f6fe9.roa (raw, json)
Hash identifier:          0gCAzo/840wkfgx0IafdMQTDHypvwzqd4jZHN8D2fr8=
Subject key identifier:   A5:76:EE:96:0D:58:19:32:C2:7F:06:F7:56:57:88:68:DD:44:0F:F9
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F43285849002165ED0ED862EEE3C58980
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/5a5f3053-58ff-38c2-be6f-a01be74f6fe9.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     611
IP address blocks:        198.164.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:65:ed:0e:d8:62:ee:e3:c5:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=7e4802b1-987f-4811-a48d-c429383c5390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:69:70:6f:76:14:fc:99:c4:0e:7b:62:0f:54:
                    d8:f9:ef:4a:04:54:ad:75:ca:03:7b:b3:49:75:21:
                    bc:f7:80:ab:d9:c3:5f:b3:e0:1b:a6:e6:00:a5:a7:
                    d4:7f:a1:0d:94:ed:94:cd:0f:32:ce:8d:93:d2:e2:
                    db:0d:10:4b:0e:16:7a:cc:91:32:de:42:b3:d4:e5:
                    52:5c:59:4d:56:9b:c2:d9:54:c7:a0:5f:20:cf:1f:
                    ce:ec:9f:84:d2:ca:23:d2:78:63:90:16:3f:b0:a5:
                    f0:51:2f:3c:d4:d6:8c:ea:00:24:36:da:de:f7:3d:
                    c9:0c:b4:55:4d:a6:35:95:9d:d4:62:70:50:c9:f7:
                    e0:3b:39:ee:7c:31:5b:28:82:d0:0e:57:da:d1:0b:
                    76:97:f4:b6:ed:02:b0:a2:d3:49:e8:7f:06:eb:15:
                    e1:88:01:63:1f:5e:3c:72:f7:4a:7a:da:89:18:04:
                    74:1f:53:57:7e:03:01:a7:d3:0c:c5:ef:59:17:06:
                    c0:6e:51:72:0d:e2:f0:5a:e4:8b:a8:f5:43:fb:ad:
                    7c:96:1f:c8:30:cf:b4:dc:83:5a:fd:49:c2:16:76:
                    c1:0e:41:57:59:f7:5b:a4:4c:e0:26:f1:71:5a:a6:
                    d9:30:08:81:92:00:9d:58:46:d0:a9:2f:26:0b:45:
                    f1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:76:EE:96:0D:58:19:32:C2:7F:06:F7:56:57:88:68:DD:44:0F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/5a5f3053-58ff-38c2-be6f-a01be74f6fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.164.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:3d:a4:8d:87:6c:42:0f:61:2a:c6:9a:87:34:22:9d:47:16:
         d2:69:c1:eb:31:9a:06:94:87:77:cb:ce:d2:3c:d6:c5:c6:81:
         46:53:ef:91:d7:77:d2:a9:08:d2:48:8e:9e:0c:cd:36:b8:0d:
         c6:36:d7:ca:a1:9d:a4:23:83:22:21:74:5d:ee:8e:fc:ae:de:
         96:f2:f6:36:54:9f:4d:03:1c:70:ed:58:e8:34:26:69:cb:9e:
         52:74:b9:f2:e8:f6:32:8d:f3:60:f5:fa:58:85:2f:58:99:ce:
         9b:fe:fc:a4:5d:54:84:ac:fc:63:d3:16:00:53:43:3f:c0:1d:
         a3:91:9c:a4:54:8d:90:25:56:9a:fb:1e:75:f0:bd:88:68:77:
         6a:fd:d9:18:a7:20:e2:9a:b8:1e:42:92:f2:10:ec:4e:8c:f1:
         4a:6f:56:ee:62:f8:11:6c:6c:ae:30:c4:d8:8a:3d:a1:4c:fe:
         61:2f:e8:79:fd:dd:2d:0e:36:b4:e8:36:9b:ff:4a:49:a8:58:
         86:12:f1:10:40:48:ab:cf:3d:24:fe:eb:e7:4e:56:90:5c:61:
         9d:56:5e:03:ed:d2:16:ce:9c:53:85:ef:ff:bd:22:0c:27:68:
         d2:75:75:a6:ec:9e:a0:08:14:d4:0c:87:5d:6c:53:06:e0:67:
         a0:41:15:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWXtDthi7uPFiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2
OTBkMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
N2U0ODAyYjEtOTg3Zi00ODExLWE0OGQtYzQyOTM4M2M1MzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWlwb3YU/JnEDntiD1TY+e9KBFStdcoDe7NJ
dSG894Cr2cNfs+AbpuYApafUf6ENlO2UzQ8yzo2T0uLbDRBLDhZ6zJEy3kKz1OVS
XFlNVpvC2VTHoF8gzx/O7J+E0soj0nhjkBY/sKXwUS881NaM6gAkNtre9z3JDLRV
TaY1lZ3UYnBQyffgOznufDFbKILQDlfa0Qt2l/S27QKwotNJ6H8G6xXhiAFjH148
cvdKetqJGAR0H1NXfgMBp9MMxe9ZFwbAblFyDeLwWuSLqPVD+618lh/IMM+03INa
/UnCFnbBDkFXWfdbpEzgJvFxWqbZMAiBkgCdWEbQqS8mC0XxvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKV27pYNWBkywn8G91ZXiGjdRA/5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2
ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvNWE1ZjMwNTMtNThmZi0z
OGMyLWJlNmYtYTAxYmU3NGY2ZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx
NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl
NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm
MmZkZTY5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqRTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJc9pI2HbEIPYSrGmoc0Ip1HFtJpwesxmgaUh3fLztI81sXGgUZT75HX
d9KpCNJIjp4MzTa4DcY218qhnaQjgyIhdF3ujvyu3pby9jZUn00DHHDtWOg0JmnL
nlJ0ufLo9jKN82D1+liFL1iZzpv+/KRdVISs/GPTFgBTQz/AHaORnKRUjZAlVpr7
HnXwvYhod2r92RinIOKauB5CkvIQ7E6M8UpvVu5i+BFsbK4wxNiKPaFM/mEv6Hn9
3S0ONrToNpv/SkmoWIYS8RBASKvPPST+6+dOVpBcYZ1WXgPt0hbOnFOF7/+9Igwn
aNJ1dabsnqAIFNQMh11sUwbgZ6BBFXw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:23 2025 by rpki-client