Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aa41f2c6-b83a-3c0d-92a2-9bf638f727ee.roa
File:                     aa41f2c6-b83a-3c0d-92a2-9bf638f727ee.roa (raw, json)
Hash identifier:          JHHrFM2PIu5T1aow44uXqUdK5gZc7fca2u0A55Jn2V4=
Subject key identifier:   8F:6F:14:57:8B:3A:21:FF:47:6F:96:0F:66:1A:10:83:A3:B9:B9:28
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584900215EB13E4469173614E580
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aa41f2c6-b83a-3c0d-92a2-9bf638f727ee.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     18013
IP address blocks:        107.151.240.0/23 maxlen: 24
                          198.44.166.0/23 maxlen: 24
                          198.44.168.0/23 maxlen: 24
                          198.44.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:5e:b1:3e:44:69:17:36:14:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=195ba309-3d93-4f43-a535-a2902057d5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8d:19:cc:92:92:6a:0f:4a:7e:41:29:d1:57:
                    ee:7c:17:3e:48:5c:cb:5a:70:47:7e:38:7e:8e:c2:
                    a4:4b:aa:74:25:b0:47:d5:07:42:b9:7a:da:d5:b4:
                    85:4b:d2:66:e7:bf:8c:75:b8:cd:70:e7:92:be:42:
                    94:47:04:76:d1:19:60:85:10:62:58:54:e8:c9:5f:
                    a5:88:d4:2a:ce:56:34:d1:c0:78:12:3a:3c:d0:bf:
                    7f:51:db:59:db:00:2a:92:5e:e4:f2:20:f7:5f:2c:
                    e5:db:69:9b:79:9a:de:e6:8d:1a:93:5d:0d:b5:d5:
                    e8:c8:a1:09:5d:7a:40:dc:d6:8d:cb:71:9b:13:2c:
                    f3:ff:c6:41:5c:d8:8c:a1:d3:d8:ce:bd:24:56:90:
                    71:d1:2b:f2:15:58:3c:44:60:48:4e:b9:6c:ea:17:
                    17:c9:89:ea:17:0d:ee:4f:bc:83:ff:73:bc:59:49:
                    45:54:b6:d6:99:84:24:0a:bf:95:3c:54:38:7f:e8:
                    d4:9c:88:34:2a:db:f0:8d:86:89:8c:99:71:62:20:
                    d4:eb:54:1c:2b:3a:1f:a5:0f:c4:31:10:8d:0b:de:
                    00:95:4e:b2:c8:7d:63:36:44:f0:7f:c0:c5:14:b5:
                    d3:af:82:87:be:fc:e4:15:bc:1a:4c:b8:ee:a4:49:
                    b1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6F:14:57:8B:3A:21:FF:47:6F:96:0F:66:1A:10:83:A3:B9:B9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aa41f2c6-b83a-3c0d-92a2-9bf638f727ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.240.0/23
                  198.44.166.0-198.44.169.255
                  198.44.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3d:bf:5b:2c:ba:de:3d:d5:e4:1a:4f:0e:d8:8d:ff:6e:c0:
         86:12:12:25:53:63:66:4c:b6:0e:7e:41:71:ec:b6:9d:57:cd:
         84:ae:a3:bf:60:ac:32:d5:d5:74:5b:69:c0:bb:a7:fd:85:51:
         39:f5:a3:a2:3f:5c:d1:75:cf:ee:85:4d:94:54:5f:96:83:10:
         e5:38:09:e5:02:78:23:57:57:7e:d2:ef:56:d5:65:00:13:aa:
         ad:4b:50:0d:85:19:22:5e:80:66:87:38:bb:97:49:e8:3b:d4:
         0f:96:ac:1e:6d:88:a8:ba:c1:a2:e8:4a:5f:3a:47:e9:fe:2c:
         24:8c:ca:df:6f:e6:be:67:42:86:30:f5:6b:96:43:28:6a:19:
         df:d6:6f:36:ad:3d:68:f3:16:bc:4c:26:bf:c6:56:cf:25:ef:
         94:12:59:f0:12:05:ca:35:74:43:2b:8e:04:f7:50:f5:cf:25:
         c8:c6:1c:88:a7:e8:7a:3d:fc:c0:d9:50:91:e3:73:ac:f9:ba:
         43:d9:3d:00:7f:e8:5b:f6:c8:0b:71:46:60:6d:c2:f2:e2:70:
         1e:27:18:29:69:de:a7:e5:58:9c:e0:d7:72:67:74:92:3e:39:
         42:72:f0:7d:39:3d:70:42:d8:50:d6:c6:e3:a2:d5:2e:74:ed:
         7b:97:64:46
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEkAIV6xPkRpFzYU5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
MTk1YmEzMDktM2Q5My00ZjQzLWE1MzUtYTI5MDIwNTdkNWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg40ZzJKSag9KfkEp0VfufBc+SFzLWnBHfjh+
jsKkS6p0JbBH1QdCuXra1bSFS9Jm57+MdbjNcOeSvkKURwR20RlghRBiWFToyV+l
iNQqzlY00cB4Ejo80L9/UdtZ2wAqkl7k8iD3Xyzl22mbeZre5o0ak10NtdXoyKEJ
XXpA3NaNy3GbEyzz/8ZBXNiModPYzr0kVpBx0SvyFVg8RGBITrls6hcXyYnqFw3u
T7yD/3O8WUlFVLbWmYQkCr+VPFQ4f+jUnIg0KtvwjYaJjJlxYiDU61QcKzofpQ/E
MRCNC94AlU6yyH1jNkTwf8DFFLXTr4KHvvzkFbwaTLjupEmxwQIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFI9vFFeLOiH/R2+WD2YaEIOjubkoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYWE0MWYyYzYtYjgzYS0z
YzBkLTkyYTItOWJmNjM4ZjcyN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBa5fwMAwD
BAHGLKYDBAHGLKgDBALGLLgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbD2/Wyy63j3V5BpPDtiN/27AhhIS
JVNjZky2Dn5Bcey2nVfNhK6jv2CsMtXVdFtpwLun/YVROfWjoj9c0XXP7oVNlFRf
loMQ5TgJ5QJ4I1dXftLvVtVlABOqrUtQDYUZIl6AZoc4u5dJ6DvUD5asHm2IqLrB
ouhKXzpH6f4sJIzK32/mvmdChjD1a5ZDKGoZ39ZvNq09aPMWvEwmv8ZWzyXvlBJZ
8BIFyjV0QyuOBPdQ9c8lyMYciKfoej38wNlQkeNzrPm6Q9k9AH/oW/bIC3FGYG3C
8uJwHicYKWnep+VYnODXcmd0kj45QnLwfTk9cELYUNbG46LVLnTte5dkRg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:15 2025 by rpki-client