Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa
File:                     e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa (raw, json)
Hash identifier:          woU/OKUjQnhWotaCwjaufsQ9WISkfkFFB44NZv9muVk=
Subject key identifier:   F2:8A:A1:DE:37:3E:C3:03:FC:C8:80:F5:68:B6:F8:AE:56:68:C3:49
Certificate issuer:       /CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
Certificate serial:       010D0C9F43285848C2B64BE6BDD07BB5F9178300
Authority key identifier: 71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     15296
IP address blocks:        198.161.120.0/24 maxlen: 24
                          198.161.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:4b:e6:bd:d0:7b:b5:f9:17:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=773f75f5-c31b-4903-b959-eb7d64ed2f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7c:a7:04:bd:b2:e5:45:ae:1b:c7:e0:4b:74:
                    dc:fb:c9:ca:dc:9f:ea:30:cc:98:70:01:0d:d2:d9:
                    af:a5:eb:c9:6c:c3:e3:ca:43:67:3d:57:3e:23:56:
                    be:da:85:40:8d:88:f5:d1:17:7b:88:ec:d9:46:4b:
                    cd:4b:49:d3:cc:a7:5e:32:e3:fd:60:34:73:00:9f:
                    af:a5:98:b1:15:7d:b4:01:50:6a:bb:1d:91:28:56:
                    4a:a2:d1:e1:94:aa:6e:51:fc:82:67:88:a7:2f:37:
                    47:99:f9:17:f1:a4:f3:84:0f:84:65:fb:0c:b8:f5:
                    07:ee:14:98:ae:7b:58:46:fe:07:28:4c:03:7a:d0:
                    49:72:81:2b:5d:55:31:9a:36:7b:ef:4a:ef:fe:cd:
                    f0:97:04:77:af:52:7e:7f:a3:3f:3f:c0:a8:9d:8b:
                    af:1d:3d:8d:f0:f2:bc:fb:30:6b:f6:cf:e5:73:84:
                    bc:77:74:a4:c9:54:e1:1f:e9:b7:f8:b3:08:6c:30:
                    7d:87:3e:0c:eb:ed:2c:7d:99:39:4c:41:9e:fc:82:
                    d5:06:2b:59:b2:61:b6:25:f8:cd:5e:96:12:78:b5:
                    e9:dc:13:67:1b:57:95:1c:39:c9:7b:84:e1:67:f6:
                    28:5e:9b:57:0f:d4:95:c1:66:f9:0e:68:1d:c4:0c:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8A:A1:DE:37:3E:C3:03:FC:C8:80:F5:68:B6:F8:AE:56:68:C3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.crl

            X509v3 Authority Key Identifier:
                keyid:71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8a:28:3f:c1:fc:3c:a2:de:54:ab:07:43:b9:49:5a:23:2a:
         8c:ef:02:9e:17:7d:c4:8c:44:99:3a:a8:57:d3:53:a3:53:9b:
         f1:d6:8c:60:a3:12:85:d1:4a:8c:52:9d:5b:f5:3f:79:11:66:
         26:16:b3:94:4b:68:6b:9d:8c:61:e5:0c:17:a8:e0:02:5d:ab:
         6e:a7:89:c3:1b:52:d9:5a:6f:75:3d:32:7e:1f:c1:00:26:bb:
         71:ea:32:4e:3c:85:b3:86:0a:dd:a0:ce:27:da:de:c9:bb:e3:
         31:b9:9a:8e:4c:3c:75:66:af:e8:e1:49:b5:fa:81:97:51:8b:
         f8:fa:ea:b2:89:c2:ae:71:7b:de:b7:52:e0:90:46:f0:7d:a3:
         58:8b:e7:97:70:29:eb:ca:0b:e4:e9:84:3b:39:91:82:4c:99:
         64:0d:d6:1c:32:52:8f:15:26:f4:da:7f:88:42:b8:a9:ac:4c:
         45:1d:ab:ba:64:5c:9f:2c:3a:d3:b6:9d:4d:aa:1b:f0:4f:a5:
         20:63:55:f9:45:0f:a0:13:63:77:56:04:fb:cd:d1:e5:17:57:
         96:6e:93:cd:26:b1:5b:79:c6:a7:5c:66:f0:49:59:55:85:cb:
         b4:a5:e1:24:a9:e6:68:ec:aa:04:ad:f7:79:48:03:34:21:c7:
         9c:e2:86:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtkvmvdB7tfkXgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTU1NGNjOTEtYTJjYy00YTBkLTk5ODktZjI0YTVjMThk
Yjk5MB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk
NzczZjc1ZjUtYzMxYi00OTAzLWI5NTktZWI3ZDY0ZWQyZjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnynBL2y5UWuG8fgS3Tc+8nK3J/qMMyYcAEN
0tmvpevJbMPjykNnPVc+I1a+2oVAjYj10Rd7iOzZRkvNS0nTzKdeMuP9YDRzAJ+v
pZixFX20AVBqux2RKFZKotHhlKpuUfyCZ4inLzdHmfkX8aTzhA+EZfsMuPUH7hSY
rntYRv4HKEwDetBJcoErXVUxmjZ770rv/s3wlwR3r1J+f6M/P8ConYuvHT2N8PK8
+zBr9s/lc4S8d3SkyVThH+m3+LMIbDB9hz4M6+0sfZk5TEGe/ILVBitZsmG2JfjN
XpYSeLXp3BNnG1eVHDnJe4ThZ/YoXptXD9SVwWb5DmgdxAxADwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKKod43PsMD/MiA9Wi2+K5WaMNJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hNTU0
Y2M5MS1hMmNjLTRhMGQtOTk4OS1mMjRhNWMxOGRiOTkvZTg4NDRiYzgtZTliYy0z
NjA0LWFlNGEtZjYzNjU3OGNkYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTU1NGNjOTEtYTJjYy00YTBkLTk5
ODktZjI0YTVjMThkYjk5L2E1NTRjYzkxLWEyY2MtNGEwZC05OTg5LWYyNGE1YzE4
ZGI5OS5jcmwwHwYDVR0jBBgwFoAUcT0g6HqJKj31GD0PBCD8LPBMvmowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hNTU0Y2M5MS1hMmNjLTRhMGQtOTk4OS1mMjRh
NWMxOGRiOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqF4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeKKD/B/Dyi3lSrB0O5SVojKozvAp4XfcSMRJk6qFfTU6NTm/HWjGCj
EoXRSoxSnVv1P3kRZiYWs5RLaGudjGHlDBeo4AJdq26nicMbUtlab3U9Mn4fwQAm
u3HqMk48hbOGCt2gzifa3sm74zG5mo5MPHVmr+jhSbX6gZdRi/j66rKJwq5xe963
UuCQRvB9o1iL55dwKevKC+TphDs5kYJMmWQN1hwyUo8VJvTaf4hCuKmsTEUdq7pk
XJ8sOtO2nU2qG/BPpSBjVflFD6ATY3dWBPvN0eUXV5Zuk80msVt5xqdcZvBJWVWF
y7Sl4SSp5mjsqgSt93lIAzQhx5zihmA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:02 2025 by rpki-client