Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa
File:                     470b542c-40cf-3926-b91f-b6e750f55345.roa (raw, json)
Hash identifier:          rextFhpmo6McN9QfJjibuP3cwVYaIk3q20n3LP5BJ0Q=
Subject key identifier:   A7:41:DF:1D:AD:4D:6F:84:8C:46:96:9B:2E:55:96:03:69:F8:5B:90
Certificate issuer:       /CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
Certificate serial:       010D0C9F432858487E50660D3746B19153DD0A80
Authority key identifier: C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     19885
IP address blocks:        206.214.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:66:0d:37:46:b1:91:53:dd:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=dcf36c9a-2c1f-48fe-9e60-6add075dd22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:cc:89:66:7a:32:da:6b:ae:2b:5c:cc:5c:
                    be:77:21:36:5d:3e:cb:c5:52:fa:5e:70:d0:92:a5:
                    9c:30:51:12:a4:d8:e0:0b:bc:e3:5a:8d:17:4e:d0:
                    ee:c9:86:07:1b:3b:46:b0:e0:ec:d8:bf:6b:f0:de:
                    77:47:ad:b0:ed:93:56:8b:16:69:29:23:ae:f5:1b:
                    bc:c6:97:07:9f:d7:ba:43:38:49:dc:66:37:f1:4d:
                    17:19:0b:74:56:0f:25:0b:80:98:ba:aa:59:74:d2:
                    5a:38:b6:19:de:91:73:b0:da:e1:26:58:8c:48:27:
                    a4:13:7b:69:7f:f9:63:d3:7b:57:b0:18:aa:3a:79:
                    47:bc:f2:50:23:59:c1:72:64:ed:f3:c7:b4:36:ed:
                    56:be:b6:b4:fa:1f:e2:b8:00:8f:f7:c5:04:b8:52:
                    7a:8b:3a:68:04:ea:3f:34:cf:89:b8:df:cb:1e:9f:
                    57:ed:38:75:08:79:6d:6e:84:a9:c9:67:b5:6d:e8:
                    ab:52:7d:28:91:ad:8f:e0:58:63:57:a3:ba:bb:26:
                    47:1b:68:06:e6:2a:3d:57:1c:e2:bc:27:d4:5b:87:
                    3e:09:bd:2c:1e:e7:e4:7a:17:00:03:76:d1:e6:8a:
                    9d:ac:56:18:f4:3d:b5:ab:32:24:5a:81:5b:b9:26:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:41:DF:1D:AD:4D:6F:84:8C:46:96:9B:2E:55:96:03:69:F8:5B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.crl

            X509v3 Authority Key Identifier:
                keyid:C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.214.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:e8:eb:c8:1d:ab:45:2e:d7:79:8b:0b:98:1d:a6:d6:42:
         b7:31:c2:b3:c8:26:ba:a3:c0:ad:2c:e0:73:f7:a7:47:d0:b4:
         60:67:0c:9f:8d:b0:41:b6:45:ea:8a:a2:d5:e3:e3:92:82:b8:
         b3:56:10:c5:8e:ae:de:f8:47:62:05:00:dc:4e:a8:fd:ea:23:
         b4:00:11:13:6a:6b:77:99:f1:ec:46:2e:1b:69:95:e5:7c:e6:
         7c:ac:60:21:73:6a:3b:73:3a:93:5f:bc:98:6d:b1:e6:91:46:
         a6:7d:d4:59:6b:cd:e6:61:da:5c:e0:b5:e2:c3:10:e8:f3:70:
         e3:65:80:82:2e:7a:e8:d2:7c:48:d1:ee:63:a3:d8:1b:90:68:
         e0:2e:ed:47:79:56:ca:75:b5:b8:95:59:4a:37:fb:29:27:dd:
         20:5a:48:d2:ca:c8:bd:73:28:a8:b7:46:fc:55:05:d0:21:bb:
         0e:8b:74:29:33:d1:98:02:ae:d2:99:36:24:e1:35:11:4f:84:
         ac:c7:64:b0:12:b7:77:02:08:df:70:b4:b8:03:e7:c5:ff:f9:
         f7:2d:02:32:05:63:83:ab:47:ba:b0:a5:a0:1f:aa:95:c4:7d:
         fc:ae:11:7c:34:86:3a:c2:cd:85:70:7c:03:a5:e7:8b:cc:ec:
         ad:d3:dc:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UGYNN0axkVPdCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDhiNDQzYTctZWNjMC00N2I2LThiMTYtZGIxZmVlOGMy
YmI0MB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZGNmMzZjOWEtMmMxZi00OGZlLTllNjAtNmFkZDA3NWRkMjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb3MiWZ6MtprritczFy+dyE2XT7LxVL6XnDQ
kqWcMFESpNjgC7zjWo0XTtDuyYYHGztGsODs2L9r8N53R62w7ZNWixZpKSOu9Ru8
xpcHn9e6QzhJ3GY38U0XGQt0Vg8lC4CYuqpZdNJaOLYZ3pFzsNrhJliMSCekE3tp
f/lj03tXsBiqOnlHvPJQI1nBcmTt88e0Nu1Wvra0+h/iuACP98UEuFJ6izpoBOo/
NM+JuN/LHp9X7Th1CHltboSpyWe1beirUn0oka2P4FhjV6O6uyZHG2gG5io9Vxzi
vCfUW4c+Cb0sHufkehcAA3bR5oqdrFYY9D21qzIkWoFbuSb3ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdB3x2tTW+EjEaWmy5VlgNp+FuQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kOGI0
NDNhNy1lY2MwLTQ3YjYtOGIxNi1kYjFmZWU4YzJiYjQvNDcwYjU0MmMtNDBjZi0z
OTI2LWI5MWYtYjZlNzUwZjU1MzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDhiNDQzYTctZWNjMC00N2I2LThi
MTYtZGIxZmVlOGMyYmI0L2Q4YjQ0M2E3LWVjYzAtNDdiNi04YjE2LWRiMWZlZThj
MmJiNC5jcmwwHwYDVR0jBBgwFoAUwLt2W2IJQLbq3R86bzHgcJYuhWgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kOGI0NDNhNy1lY2MwLTQ3YjYtOGIxNi1kYjFm
ZWU4YzJiYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztagMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHU/6OvIHatFLtd5iwuYHabWQrcxwrPIJrqjwK0s4HP3p0fQtGBnDJ+N
sEG2ReqKotXj45KCuLNWEMWOrt74R2IFANxOqP3qI7QAERNqa3eZ8exGLhtpleV8
5nysYCFzajtzOpNfvJhtseaRRqZ91FlrzeZh2lzgteLDEOjzcONlgIIueujSfEjR
7mOj2BuQaOAu7Ud5Vsp1tbiVWUo3+ykn3SBaSNLKyL1zKKi3RvxVBdAhuw6LdCkz
0ZgCrtKZNiThNRFPhKzHZLASt3cCCN9wtLgD58X/+fctAjIFY4OrR7qwpaAfqpXE
ffyuEXw0hjrCzYVwfAOl54vM7K3T3Iw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:14 2025 by rpki-client