Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/989e586b-0747-3270-a033-41e803e851c5.roa
File:                     989e586b-0747-3270-a033-41e803e851c5.roa (raw, json)
Hash identifier:          +B2TamdH7IRG2DYq0Gz6u2BTwNybVfw54pKkvaS0gYs=
Subject key identifier:   3B:70:48:8A:51:5E:3F:27:8E:01:46:BF:91:B8:D1:2C:BE:84:18:2D
Certificate issuer:       /CN=e51abfb2-ff55-4866-8f32-d2fc9346d303
Certificate serial:       010D0C9F4328584921840343FAC90F5D9388E4E0
Authority key identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/989e586b-0747-3270-a033-41e803e851c5.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        208.78.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:03:43:fa:c9:0f:5d:93:88:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51abfb2-ff55-4866-8f32-d2fc9346d303
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=55fd097b-7e86-4834-a300-2884466e9b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:9e:22:58:6e:94:32:c6:56:2e:e7:08:fb:
                    07:20:59:58:b1:28:21:a6:5e:b5:f9:29:d9:f4:c3:
                    c5:29:2e:9d:52:30:d4:47:6c:35:03:ab:42:06:65:
                    9c:66:72:2b:e2:2b:9a:a3:23:85:49:3d:d5:8c:cc:
                    b1:dc:f1:76:34:c2:6a:89:a1:4e:46:8a:03:b3:59:
                    6f:e7:d1:67:99:fc:86:ef:fb:f0:cd:23:72:58:ff:
                    6f:20:18:6c:d6:c7:76:ba:aa:42:49:cd:01:6a:a6:
                    a1:64:06:7b:46:aa:e6:1d:40:fa:27:1a:72:10:8e:
                    f6:cc:0c:60:29:04:96:96:c9:dc:de:86:3f:98:53:
                    e4:b9:a0:ff:28:05:c8:90:8c:8c:54:00:f8:66:a5:
                    06:1e:e2:e8:aa:27:39:24:a3:98:98:5c:04:c9:26:
                    d4:f2:bd:db:15:89:b0:c9:3b:22:13:79:0a:8f:60:
                    2d:67:d0:19:14:7f:bd:87:f3:2d:37:57:b9:73:46:
                    e7:44:10:46:10:3f:e9:3f:cc:1e:4b:94:a3:66:48:
                    e9:a6:55:48:45:1a:69:c1:80:f5:01:92:29:06:54:
                    d4:59:ab:ed:f6:06:31:c0:84:6d:b9:09:9c:87:38:
                    59:2b:be:24:55:08:7d:70:ee:4c:14:6a:ee:f6:31:
                    18:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:70:48:8A:51:5E:3F:27:8E:01:46:BF:91:B8:D1:2C:BE:84:18:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/989e586b-0747-3270-a033-41e803e851c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:43:b9:1b:4e:61:bb:96:3a:28:9d:60:32:12:f9:bf:56:30:
         e5:82:fa:38:ae:21:da:91:ce:ca:92:a8:9d:8e:dd:7e:64:c2:
         42:75:61:35:fb:8d:14:de:7a:99:23:1b:e1:94:b1:68:18:e1:
         f7:bc:11:36:96:54:ab:c2:15:dc:c5:3e:8d:ca:fa:04:24:bc:
         82:71:7c:e9:56:34:54:5a:e5:c3:21:37:4b:da:3c:13:8b:69:
         5e:be:c6:e6:4a:e1:e5:45:8d:e5:96:d5:a1:bd:bf:c0:0b:b3:
         70:57:d3:8d:1f:fc:81:c7:be:e5:b2:9b:15:3d:2d:6f:f0:20:
         92:41:0d:83:09:a0:46:4d:3e:48:eb:0a:75:94:37:41:5d:24:
         17:88:1d:e2:ae:3a:9e:13:34:f0:85:c6:cf:4a:9e:47:18:aa:
         70:60:a6:3c:f6:d4:08:55:23:ed:32:dc:09:6b:8a:8e:a9:79:
         a8:11:9f:e3:5c:6d:3a:2a:4c:e8:64:ce:be:9f:05:90:d0:6d:
         32:35:2e:e4:e8:1c:a3:a1:e7:be:95:54:a9:32:36:04:b2:5c:
         d6:ec:c6:69:c5:77:76:6e:d0:78:91:f7:68:90:ff:2d:17:6a:
         c3:60:d9:93:dd:20:e9:78:cd:49:6e:4f:75:dc:d5:32:e7:32:
         95:5d:4a:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAND+skPXZOI5OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTUxYWJmYjItZmY1NS00ODY2LThmMzItZDJmYzkzNDZk
MzAzMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
NTVmZDA5N2ItN2U4Ni00ODM0LWEzMDAtMjg4NDQ2NmU5YjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp96eIlhulDLGVi7nCPsHIFlYsSghpl61+SnZ
9MPFKS6dUjDUR2w1A6tCBmWcZnIr4iuaoyOFST3VjMyx3PF2NMJqiaFORooDs1lv
59FnmfyG7/vwzSNyWP9vIBhs1sd2uqpCSc0BaqahZAZ7RqrmHUD6JxpyEI72zAxg
KQSWlsnc3oY/mFPkuaD/KAXIkIyMVAD4ZqUGHuLoqic5JKOYmFwEySbU8r3bFYmw
yTsiE3kKj2AtZ9AZFH+9h/MtN1e5c0bnRBBGED/pP8weS5SjZkjpplVIRRppwYD1
AZIpBlTUWavt9gYxwIRtuQmchzhZK74kVQh9cO5MFGru9jEYCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtwSIpRXj8njgFGv5G40Sy+hBgtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFh
YmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZjOTM0NmQzMDMvOTg5ZTU4NmItMDc0Ny0z
MjcwLWEwMzMtNDFlODAzZTg1MWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTUxYWJmYjItZmY1NS00ODY2LThm
MzItZDJmYzkzNDZkMzAzL2U1MWFiZmIyLWZmNTUtNDg2Ni04ZjMyLWQyZmM5MzQ2
ZDMwMy5jcmwwHwYDVR0jBBgwFoAUDvT5JuL94JoF5JVDUqYmwxmh63QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFhYmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZj
OTM0NmQzMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E4HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALVDuRtOYbuWOiidYDIS+b9WMOWC+jiuIdqRzsqSqJ2O3X5kwkJ1YTX7
jRTeepkjG+GUsWgY4fe8ETaWVKvCFdzFPo3K+gQkvIJxfOlWNFRa5cMhN0vaPBOL
aV6+xuZK4eVFjeWW1aG9v8ALs3BX040f/IHHvuWymxU9LW/wIJJBDYMJoEZNPkjr
CnWUN0FdJBeIHeKuOp4TNPCFxs9KnkcYqnBgpjz21AhVI+0y3Alrio6peagRn+Nc
bToqTOhkzr6fBZDQbTI1LuToHKOh576VVKkyNgSyXNbsxmnFd3Zu0HiR92iQ/y0X
asNg2ZPdIOl4zUluT3Xc1TLnMpVdSqk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:14 2025 by rpki-client