Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8b7f6291-a678-3bfe-b6a8-82a2201507a8.roa
File:                     8b7f6291-a678-3bfe-b6a8-82a2201507a8.roa (raw, json)
Hash identifier:          2dAYv4z0/GmT7CleM8jSrP8cZ5X42okULc3bbEYLwN4=
Subject key identifier:   C1:1A:BA:AE:A9:F7:17:1E:1C:F8:0B:FF:E2:43:F2:1B:80:9D:55:9B
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6CE5AD17A9EBA784C4980
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8b7f6291-a678-3bfe-b6a8-82a2201507a8.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     7385
IP address blocks:        216.191.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:ce:5a:d1:7a:9e:ba:78:4c:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=2b470cce-5ef8-4308-b7bd-2492dbb9b0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:1b:17:e2:62:e1:7d:7c:bd:80:15:b1:4f:
                    a1:4d:5b:56:a7:d3:af:8e:f1:f0:54:e8:dd:f7:88:
                    3e:15:af:13:dd:ad:b8:a0:1b:88:5c:89:a7:4a:74:
                    61:87:a2:a8:ed:f6:82:67:c5:d6:c5:79:7f:8a:d7:
                    95:d7:00:85:60:1a:de:43:de:16:a0:75:5c:c6:97:
                    c2:40:00:f4:8e:d3:e0:6c:6d:45:3d:5e:21:73:ae:
                    cd:56:58:37:9f:0b:15:04:89:61:2d:42:29:9b:be:
                    fb:56:b2:3c:68:9b:11:05:eb:61:69:ba:01:f2:c1:
                    64:92:47:11:79:a2:9a:06:c1:42:87:2c:0b:e9:c5:
                    a7:5f:b5:f3:a0:98:95:aa:9d:9f:07:07:3f:5b:39:
                    e7:a3:2d:a0:06:9c:5a:50:93:38:a8:c7:9f:e2:bd:
                    b4:d5:a8:ea:db:5e:d1:60:7a:67:05:67:2b:89:87:
                    b9:24:7a:98:0c:2b:71:22:99:51:c7:fe:15:d4:7e:
                    92:83:fd:cd:8a:3d:25:0a:47:10:35:fc:7b:50:d1:
                    85:2c:cd:e3:34:6d:09:1f:de:9e:62:3a:d0:55:21:
                    7e:0b:cc:13:a2:bf:4d:9f:3c:db:6f:3b:f4:8f:f8:
                    82:30:89:f5:67:03:ef:1f:04:9b:7c:d0:24:73:6b:
                    e6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1A:BA:AE:A9:F7:17:1E:1C:F8:0B:FF:E2:43:F2:1B:80:9D:55:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8b7f6291-a678-3bfe-b6a8-82a2201507a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:dc:d0:44:fd:f5:3d:43:6d:49:e9:b6:db:1b:7b:5d:7c:
         66:b1:e3:09:3e:72:e9:99:dc:6c:29:ca:d0:88:12:7d:cc:96:
         ca:c7:b1:64:2d:e2:f4:a6:b9:61:84:38:e3:b3:88:1c:41:55:
         63:6e:44:5b:21:0c:cc:48:8b:0b:2f:f8:6e:18:69:2f:36:ab:
         24:ea:d6:5f:38:97:55:dd:f1:af:67:f5:3b:02:81:91:b8:54:
         62:49:96:2c:b7:b0:8f:14:1f:92:fc:3a:70:83:08:db:52:4b:
         0c:88:09:8f:11:2e:95:83:8e:c3:4c:8c:aa:cf:a4:06:dd:70:
         0c:87:c9:80:78:ce:c8:8d:83:d3:90:cb:a6:16:05:3a:5c:2d:
         7d:6a:40:8d:9e:7a:47:aa:06:cb:ec:a2:03:69:49:06:3f:6a:
         ee:5b:da:86:64:9a:d5:ef:8a:eb:ad:95:b4:4d:ac:0d:24:36:
         9c:d5:fe:8c:2a:1a:6e:c1:eb:e9:0a:de:86:3e:bf:ce:28:73:
         96:c7:ae:5a:6a:8e:ce:f0:6f:4c:a4:ce:d0:0e:fd:a4:57:b0:
         5d:d2:dc:b0:cc:31:96:8a:d6:f4:32:98:f5:33:d4:2c:b5:c8:
         6d:c3:2f:20:f0:7b:28:70:77:ab:89:bb:6a:81:4f:c5:d2:66:
         69:29:1f:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaps5a0XqeunhMSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
MmI0NzBjY2UtNWVmOC00MzA4LWI3YmQtMjQ5MmRiYjliMGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJYbF+Ji4X18vYAVsU+hTVtWp9OvjvHwVOjd
94g+Fa8T3a24oBuIXImnSnRhh6Ko7faCZ8XWxXl/iteV1wCFYBreQ94WoHVcxpfC
QAD0jtPgbG1FPV4hc67NVlg3nwsVBIlhLUIpm777VrI8aJsRBethaboB8sFkkkcR
eaKaBsFChywL6cWnX7XzoJiVqp2fBwc/Wznnoy2gBpxaUJM4qMef4r201ajq217R
YHpnBWcriYe5JHqYDCtxIplRx/4V1H6Sg/3Nij0lCkcQNfx7UNGFLM3jNG0JH96e
YjrQVSF+C8wTor9Nnzzbbzv0j/iCMIn1ZwPvHwSbfNAkc2vmvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEauq6p9xceHPgL/+JD8huAnVWbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvOGI3ZjYyOTEtYTY3OC0z
YmZlLWI2YTgtODJhMjIwMTUwN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2L9uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwd3NBE/fU9Q21J6bbbG3tdfGax4wk+cumZ3GwpytCIEn3MlsrHsWQt
4vSmuWGEOOOziBxBVWNuRFshDMxIiwsv+G4YaS82qyTq1l84l1Xd8a9n9TsCgZG4
VGJJliy3sI8UH5L8OnCDCNtSSwyICY8RLpWDjsNMjKrPpAbdcAyHyYB4zsiNg9OQ
y6YWBTpcLX1qQI2eekeqBsvsogNpSQY/au5b2oZkmtXviuutlbRNrA0kNpzV/owq
Gm7B6+kK3oY+v84oc5bHrlpqjs7wb0ykztAO/aRXsF3S3LDMMZaK1vQymPUz1Cy1
yG3DLyDweyhwd6uJu2qBT8XSZmkpHyk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:45:18 2025 by rpki-client