Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4506f81f-b430-3bdb-9bfa-4cf6fd5deaf2.roa
File:                     4506f81f-b430-3bdb-9bfa-4cf6fd5deaf2.roa (raw, json)
Hash identifier:          9gtwI5HJpR09mMqdXieilhDqez0m1E6pVnxDH21CDlk=
Subject key identifier:   7E:B1:F1:84:E5:EC:EF:E4:3E:5C:D0:55:D3:4A:D6:FD:F0:D0:8C:5D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848E9CBF3FBBB38A99470675900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4506f81f-b430-3bdb-9bfa-4cf6fd5deaf2.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     64267
IP address blocks:        141.164.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:f3:fb:bb:38:a9:94:70:67:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=9d58e7cf-b956-4d04-8704-2c3b52284a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:f6:da:6e:80:af:68:77:37:ee:a0:5f:f1:
                    49:6e:88:32:05:06:d6:3a:ee:ee:e2:46:87:af:e9:
                    e4:50:c3:65:29:b7:d8:66:84:28:af:18:cd:14:10:
                    21:d1:86:11:9a:b0:bc:69:29:11:a5:42:72:33:4d:
                    6b:4f:8a:2e:f4:5f:6a:13:13:d5:b1:ec:42:53:79:
                    76:2e:81:29:8c:72:a2:08:e1:2e:5b:ea:09:65:b2:
                    93:a0:e9:8d:b8:43:b4:4a:32:e4:b6:95:41:db:84:
                    3e:a1:4d:e0:fc:db:b6:53:1e:1e:4b:6b:83:c8:7d:
                    cc:5c:cf:8f:62:b4:4a:d7:7f:bd:99:a6:86:fb:2e:
                    e0:43:83:11:15:e5:d2:f0:ba:e4:82:3f:38:b7:5b:
                    f4:3b:71:b4:53:da:ae:b3:d2:c0:f5:eb:54:0e:18:
                    6d:3f:48:52:ad:37:22:c5:d3:d2:3e:bf:7a:62:7f:
                    ef:d6:8a:87:cc:8b:57:3e:25:60:a9:af:9e:69:a8:
                    74:d0:38:de:62:f9:ca:21:57:9e:cc:00:8e:48:30:
                    34:da:2e:df:10:3d:66:ae:a2:5b:c5:e3:e0:24:0b:
                    35:b9:f7:a5:53:43:7c:f6:f8:96:c4:43:39:56:7d:
                    30:bf:10:f4:09:12:3b:33:43:72:d6:56:5f:f6:33:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B1:F1:84:E5:EC:EF:E4:3E:5C:D0:55:D3:4A:D6:FD:F0:D0:8C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4506f81f-b430-3bdb-9bfa-4cf6fd5deaf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:e0:13:65:0a:91:92:5b:97:77:a1:e6:c6:5b:0f:6d:00:af:
         74:b8:11:d2:8b:3a:49:77:7f:96:bf:9e:33:9b:62:5b:a3:8a:
         a2:65:2e:d6:8d:86:db:a1:d4:d3:16:62:e2:39:ac:48:4f:1b:
         96:82:06:25:70:a6:55:7f:24:9f:92:c2:c1:48:e6:80:91:a8:
         f3:2c:63:c1:6c:39:49:1a:0a:f5:fe:9e:d4:4b:19:a4:f5:df:
         72:1a:da:e6:3f:5b:3e:c2:e0:79:fa:b1:d0:88:17:14:a1:62:
         ef:4e:46:38:2b:49:18:0e:cd:4d:ae:e0:25:ba:95:67:af:71:
         81:6b:ed:af:d9:e3:cb:0d:94:d7:fe:ab:91:12:5f:86:69:dd:
         db:6c:b7:9e:69:96:6b:67:f0:a7:e4:2a:20:5b:27:67:32:9a:
         1c:f3:c9:21:d7:4a:5b:97:32:78:08:5f:46:18:88:cb:53:fd:
         51:2c:28:c9:4d:5f:0c:58:56:7a:ab:3e:f2:f4:bb:04:2e:81:
         14:4b:61:d8:1a:b0:03:26:07:bd:47:98:7a:f7:af:fb:db:f1:
         7a:6b:6d:39:c3:4a:60:aa:7a:1b:10:6c:07:92:2a:2f:b7:77:
         d1:aa:3e:55:54:48:31:47:23:6d:5b:4c:d0:65:6a:f6:8b:cb:
         36:2f:ad:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/P7uziplHBnWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
OWQ1OGU3Y2YtYjk1Ni00ZDA0LTg3MDQtMmMzYjUyMjg0YTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyv22m6Ar2h3N+6gX/FJbogyBQbWOu7u4kaH
r+nkUMNlKbfYZoQorxjNFBAh0YYRmrC8aSkRpUJyM01rT4ou9F9qExPVsexCU3l2
LoEpjHKiCOEuW+oJZbKToOmNuEO0SjLktpVB24Q+oU3g/Nu2Ux4eS2uDyH3MXM+P
YrRK13+9maaG+y7gQ4MRFeXS8Lrkgj84t1v0O3G0U9qus9LA9etUDhhtP0hSrTci
xdPSPr96Yn/v1oqHzItXPiVgqa+eaah00DjeYvnKIVeezACOSDA02i7fED1mrqJb
xePgJAs1ufelU0N89viWxEM5Vn0wvxD0CRI7M0Ny1lZf9jMbQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH6x8YTl7O/kPlzQVdNK1v3w0IxdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDUwNmY4MWYtYjQzMC0z
YmRiLTliZmEtNGNmNmZkNWRlYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjaRZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALXgE2UKkZJbl3eh5sZbD20Ar3S4EdKLOkl3f5a/njObYlujiqJlLtaN
htuh1NMWYuI5rEhPG5aCBiVwplV/JJ+SwsFI5oCRqPMsY8FsOUkaCvX+ntRLGaT1
33Ia2uY/Wz7C4Hn6sdCIFxShYu9ORjgrSRgOzU2u4CW6lWevcYFr7a/Z48sNlNf+
q5ESX4Zp3dtst55plmtn8KfkKiBbJ2cymhzzySHXSluXMngIX0YYiMtT/VEsKMlN
XwxYVnqrPvL0uwQugRRLYdgasAMmB71HmHr3r/vb8XprbTnDSmCqehsQbAeSKi+3
d9GqPlVUSDFHI21bTNBlavaLyzYvrfU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:11 2025 by rpki-client