Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/74488e4f-ce7a-3180-ad95-232b6855f3eb.roa
File:                     74488e4f-ce7a-3180-ad95-232b6855f3eb.roa (raw, json)
Hash identifier:          HyPB9WbHXM+xPWPruYYA+8naZtrx0Ud0eMG11NVacV0=
Subject key identifier:   C9:F0:82:47:81:37:68:3F:3B:A7:F1:F3:EE:69:B5:33:3D:B4:B7:45
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285848EFFD24B539BABF32DAE37DC0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/74488e4f-ce7a-3180-ad95-232b6855f3eb.roa
Signing time:             Wed 19 Feb 2025 19:15:08 +0000
ROA not before:           Wed 19 Feb 2025 19:15:08 +0000
ROA not after:            Tue 20 May 2025 18:15:08 +0000
asID:                     5769
IP address blocks:        199.84.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:fd:24:b5:39:ba:bf:32:da:e3:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 19 19:15:08 2025 GMT
            Not After : May 20 18:15:08 2025 GMT
        Subject: CN=abf11e25-001e-482e-be2e-35090ef5fe7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:3c:78:8c:fb:8b:c8:75:d5:85:dc:2a:e8:
                    f3:b3:f0:2c:1a:11:62:18:31:33:80:b6:64:69:77:
                    d0:e4:f2:6c:df:3e:4d:a9:1d:07:50:2f:6c:de:ee:
                    8b:86:0d:ab:8b:8a:9e:74:0c:55:d5:06:f2:f9:20:
                    78:54:63:61:ad:40:87:a5:1b:8d:9e:41:32:33:a5:
                    61:27:09:37:88:8f:46:27:c1:c9:38:32:69:c9:79:
                    10:8b:40:c7:1a:f4:24:81:85:5e:00:95:d5:0a:33:
                    65:f1:16:45:7e:11:64:f0:8d:03:da:f6:9b:14:aa:
                    47:79:46:69:96:73:16:19:ec:28:a4:0d:66:79:0e:
                    02:52:00:c5:cf:7a:b7:a8:e9:c2:45:ce:61:16:c6:
                    a6:da:ee:75:03:09:11:16:7b:f6:e1:21:5b:68:46:
                    0d:d3:0d:27:e1:99:f8:79:d4:57:41:0d:17:17:cd:
                    5e:46:fe:af:bd:ed:0d:f0:ce:36:fa:44:b3:00:fa:
                    95:9d:3b:31:7a:53:cf:01:86:6b:d4:21:c6:6b:96:
                    bf:1a:db:5d:64:98:b2:5d:6d:35:44:e4:48:28:c0:
                    2c:88:63:70:f2:03:57:8e:8f:c7:f8:5b:fa:c7:5d:
                    58:1a:44:89:1d:12:45:29:a5:2f:b4:6c:bc:96:b2:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:82:47:81:37:68:3F:3B:A7:F1:F3:EE:69:B5:33:3D:B4:B7:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/74488e4f-ce7a-3180-ad95-232b6855f3eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.84.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b3:37:21:3d:bc:36:af:99:1c:e7:99:30:be:bf:5b:11:ec:
         af:39:7e:ee:bb:65:59:14:1a:fe:89:fb:4f:46:1c:12:09:0f:
         73:e1:55:9f:a8:67:d2:6d:9d:d2:3a:38:23:da:91:84:dc:ef:
         ed:8e:2c:1b:01:28:b2:1a:de:ed:1c:eb:3f:1b:a0:2c:eb:f4:
         e0:dd:bb:c3:d9:e4:4f:22:3b:46:8a:4e:1d:58:76:03:40:10:
         91:3a:af:01:10:b6:7b:02:8a:b1:c6:1d:03:1c:1a:63:b4:f0:
         79:4a:3b:1d:da:69:3b:d0:e6:a9:f2:5c:19:3f:0a:ee:1e:fe:
         e9:90:e4:7b:ee:7c:34:a5:af:83:96:20:92:bd:35:3e:55:58:
         33:e1:87:47:4e:e6:27:c3:30:b6:40:41:53:2b:ce:29:ee:ad:
         ad:ff:99:0e:52:c7:54:74:69:77:d4:66:be:3f:e5:21:0c:38:
         c6:f6:7b:b5:08:2f:9c:21:3a:ee:32:37:6a:02:9e:69:8c:f8:
         63:8c:3d:36:9b:dd:a4:db:5e:a5:5b:04:f6:e5:f6:a8:ef:6d:
         eb:24:3a:df:c5:bc:ab:17:10:c9:b5:e2:c1:9e:75:0a:ee:24:
         ab:55:df:ce:fc:06:45:7a:9e:61:1c:63:60:89:4d:88:13:ed:
         c3:93:b8:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjv/SS1Obq/MtrjfcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDIxOTE5MTUwOFoXDTI1MDUyMDE4MTUwOFowLzEtMCsGA1UEAxMk
YWJmMTFlMjUtMDAxZS00ODJlLWJlMmUtMzUwOTBlZjVmZTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXQ8eIz7i8h11YXcKujzs/AsGhFiGDEzgLZk
aXfQ5PJs3z5NqR0HUC9s3u6Lhg2ri4qedAxV1Qby+SB4VGNhrUCHpRuNnkEyM6Vh
Jwk3iI9GJ8HJODJpyXkQi0DHGvQkgYVeAJXVCjNl8RZFfhFk8I0D2vabFKpHeUZp
lnMWGewopA1meQ4CUgDFz3q3qOnCRc5hFsam2u51AwkRFnv24SFbaEYN0w0n4Zn4
edRXQQ0XF81eRv6vve0N8M42+kSzAPqVnTsxelPPAYZr1CHGa5a/GttdZJiyXW01
RORIKMAsiGNw8gNXjo/H+Fv6x11YGkSJHRJFKaUvtGy8lrI1wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMnwgkeBN2g/O6fx8+5ptTM9tLdFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNzQ0ODhlNGYtY2U3YS0z
MTgwLWFkOTUtMjMyYjY4NTVmM2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1T0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmzNyE9vDavmRznmTC+v1sR7K85fu67ZVkUGv6J+09GHBIJD3PhVZ+o
Z9JtndI6OCPakYTc7+2OLBsBKLIa3u0c6z8boCzr9ODdu8PZ5E8iO0aKTh1YdgNA
EJE6rwEQtnsCirHGHQMcGmO08HlKOx3aaTvQ5qnyXBk/Cu4e/umQ5HvufDSlr4OW
IJK9NT5VWDPhh0dO5ifDMLZAQVMrzinura3/mQ5Sx1R0aXfUZr4/5SEMOMb2e7UI
L5whOu4yN2oCnmmM+GOMPTab3aTbXqVbBPbl9qjvbeskOt/FvKsXEMm14sGedQru
JKtV3878BkV6nmEcY2CJTYgT7cOTuBI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:59 2025 by rpki-client