Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/2830edbf-9e71-3059-846a-67d31308418b.roa
File:                     2830edbf-9e71-3059-846a-67d31308418b.roa (raw, json)
Hash identifier:          b45hYN1iw1VkhMSHS7NrDM7eWd/S1eQL/ZW1V+9+/zU=
Subject key identifier:   87:FE:16:D8:0D:E9:AD:97:01:B5:A3:71:E6:56:A3:24:C3:FC:BB:7D
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F432858485CD02FC7A0F3F9CE72DCE840
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/2830edbf-9e71-3059-846a-67d31308418b.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     4213
IP address blocks:        23.130.96.0/23 maxlen: 24
                          45.41.212.0/22 maxlen: 24
                          45.45.240.0/22 maxlen: 24
                          162.253.212.0/22 maxlen: 24
                          204.10.89.0/24 maxlen: 24
                          209.160.96.0/22 maxlen: 24
                          2602:fe6b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:2f:c7:a0:f3:f9:ce:72:dc:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=df4f05fa-9410-4a1f-aa94-0ce7849d580c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:f4:8e:74:b2:f6:94:7f:f1:dd:5c:8e:b7:
                    9e:da:bf:c9:15:d5:c0:d2:28:7a:79:0d:c6:c0:5e:
                    25:14:2a:34:0d:86:89:f4:d3:71:8f:1f:92:bc:25:
                    44:d5:f4:e3:33:09:bd:ca:ed:4a:ce:49:a5:71:45:
                    33:53:ab:b5:c4:72:20:b9:f6:84:10:2c:ad:19:14:
                    e7:c5:4d:0c:6d:75:ff:8c:68:4c:2f:17:06:0d:b5:
                    f6:cc:dd:f4:0d:3b:6d:e9:98:78:5e:4a:71:5b:6a:
                    6e:1e:9e:9c:86:34:96:c1:03:ed:39:61:ab:26:b8:
                    33:87:70:89:b7:bb:8f:0f:4c:0b:61:49:31:f9:82:
                    7e:f3:11:dd:6d:e9:02:fc:35:fd:93:3a:2f:42:bc:
                    41:e9:41:6a:95:05:a9:83:9c:f7:d9:72:4e:79:85:
                    42:4f:af:76:68:04:b6:28:bf:82:5f:6d:c1:a6:39:
                    0d:36:93:78:e7:71:4b:b5:5e:07:c1:78:19:63:83:
                    3c:53:91:4f:7e:f3:fd:31:47:b9:8f:93:fc:ab:32:
                    6a:dd:ec:fe:a4:af:13:08:88:06:7a:15:a7:39:7c:
                    87:c9:33:77:b1:01:8a:4d:a2:26:46:32:12:10:b4:
                    1e:63:16:c6:4d:f4:4e:6d:44:cb:19:1e:f1:e8:0a:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FE:16:D8:0D:E9:AD:97:01:B5:A3:71:E6:56:A3:24:C3:FC:BB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/2830edbf-9e71-3059-846a-67d31308418b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.96.0/23
                  45.41.212.0/22
                  45.45.240.0/22
                  162.253.212.0/22
                  204.10.89.0/24
                  209.160.96.0/22
                IPv6:
                  2602:fe6b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:3c:1e:34:4a:44:9c:9c:ce:15:64:c3:50:00:b7:99:77:18:
         dd:6b:ea:0f:e8:31:d3:fa:21:f4:34:19:a6:e8:f7:ee:fd:47:
         5d:51:9f:9f:8f:57:a0:15:05:b0:d0:24:97:c4:97:0e:a9:2d:
         09:24:9c:b1:1f:90:09:ec:d1:9a:48:38:a0:8a:96:53:3e:98:
         65:17:97:66:10:c0:df:aa:5d:70:ed:9d:b5:75:6b:ba:10:70:
         d4:d5:71:8d:1d:d3:64:7b:8f:0d:0e:35:6b:bd:27:b2:93:7c:
         2e:3a:87:21:78:60:9d:1e:42:8e:c9:ac:7e:59:e2:fb:df:25:
         f1:df:2f:6b:5d:53:f1:16:25:19:1a:e5:34:c2:d2:42:0d:28:
         c7:b1:69:8c:2e:1f:76:fa:e7:16:db:e9:0a:27:c5:01:d7:95:
         5f:8b:94:b0:94:78:91:4e:aa:9f:71:8a:48:99:7d:4b:de:54:
         a9:2d:e5:53:37:f9:9d:b2:c6:3c:f5:a8:8a:5e:68:b3:a7:58:
         73:58:d4:fb:5d:f1:23:05:ba:0e:d2:18:bd:ba:59:d4:c1:a0:
         7e:cf:b4:93:5e:49:ef:4e:30:df:c0:48:cd:59:09:d7:c4:e7:
         b6:a9:cd:bf:8d:f2:a5:06:c9:16:4f:53:11:b6:8e:f4:31:ab:
         4a:3d:5d:8c
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEhc0C/HoPP5znLc6EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0ZWRhNDItMWI4OS00MTI0LThhMDYtNjMzODEyNzgz
NzVkMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZGY0ZjA1ZmEtOTQxMC00YTFmLWFhOTQtMGNlNzg0OWQ1ODBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMj0jnSy9pR/8d1cjree2r/JFdXA0ih6eQ3G
wF4lFCo0DYaJ9NNxjx+SvCVE1fTjMwm9yu1KzkmlcUUzU6u1xHIgufaEECytGRTn
xU0MbXX/jGhMLxcGDbX2zN30DTtt6Zh4XkpxW2puHp6chjSWwQPtOWGrJrgzh3CJ
t7uPD0wLYUkx+YJ+8xHdbekC/DX9kzovQrxB6UFqlQWpg5z32XJOeYVCT692aAS2
KL+CX23BpjkNNpN453FLtV4HwXgZY4M8U5FPfvP9MUe5j5P8qzJq3ez+pK8TCIgG
ehWnOXyHyTN3sQGKTaImRjISELQeYxbGTfRObUTLGR7x6AqcAQIDAQABo4IDgjCC
A34wHQYDVR0OBBYEFIf+FtgN6a2XAbWjceZWoyTD/Lt9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZTRl
ZGE0Mi0xYjg5LTQxMjQtOGEwNi02MzM4MTI3ODM3NWQvMjgzMGVkYmYtOWU3MS0z
MDU5LTg0NmEtNjdkMzEzMDg0MThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2U0ZWRhNDItMWI4OS00MTI0LThh
MDYtNjMzODEyNzgzNzVkLzdlNGVkYTQyLTFiODktNDEyNC04YTA2LTYzMzgxMjc4
Mzc1ZC5jcmwwHwYDVR0jBBgwFoAUik9e9/o52EdQMpAXHOPDy+bTsGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZTRlZGE0Mi0xYjg5LTQxMjQtOGEwNi02MzM4
MTI3ODM3NWQuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBF4JgAwQC
LSnUAwQCLS3wAwQCov3UAwQAzApZAwQC0aBgMA0EAgACMAcDBQAmAv5rMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBAA08HjRKRJyczhVkw1AAt5l3GN1r6g/oMdP6IfQ0Gabo9+79R11Rn5+PV6AV
BbDQJJfElw6pLQkknLEfkAns0ZpIOKCKllM+mGUXl2YQwN+qXXDtnbV1a7oQcNTV
cY0d02R7jw0ONWu9J7KTfC46hyF4YJ0eQo7JrH5Z4vvfJfHfL2tdU/EWJRka5TTC
0kINKMexaYwuH3b65xbb6QonxQHXlV+LlLCUeJFOqp9xikiZfUveVKkt5VM3+Z2y
xjz1qIpeaLOnWHNY1Ptd8SMFug7SGL26WdTBoH7PtJNeSe9OMN/ASM1ZCdfE57ap
zb+N8qUGyRZPUxG2jvQxq0o9XYw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:14:02 2025 by rpki-client