Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/8535d9d7-f8f7-3d10-8e35-92ab0696028e.roa
File:                     8535d9d7-f8f7-3d10-8e35-92ab0696028e.roa (raw, json)
Hash identifier:          O94y/aSpvT0Yf2zZhAXTYO8RYk2UotFX+pmU/skR6+g=
Subject key identifier:   D3:A9:97:2E:CD:F7:7D:0D:02:CB:A3:7D:0D:57:0E:64:57:8A:32:4B
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F432858491D7188D24916F51A66BA6070
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/8535d9d7-f8f7-3d10-8e35-92ab0696028e.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        74.122.56.0/21 maxlen: 24
                          107.180.128.0/21 maxlen: 24
                          107.180.160.0/19 maxlen: 24
                          206.251.196.0/22 maxlen: 24
                          206.251.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:88:d2:49:16:f5:1a:66:ba:60:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=3b921aad-0391-49e0-8ebd-944a0b05f98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:c8:9d:6c:ea:4b:a5:dc:f3:a7:5b:e9:0e:
                    bd:0e:dd:42:2a:3b:f0:3a:70:50:71:42:b9:8c:9b:
                    d1:1d:03:61:e6:49:53:80:71:fa:3c:02:e7:e6:61:
                    d8:72:f8:31:30:7a:d6:ee:43:c9:f5:46:e1:cb:e3:
                    e1:8a:e4:a4:ad:ba:a2:d7:09:c9:af:96:af:62:4c:
                    93:d8:4d:1c:4f:59:5a:f9:7f:f1:15:39:1b:2c:31:
                    fa:c2:7a:0b:27:6f:fc:9f:39:66:1a:f7:b5:2c:2d:
                    b2:00:83:ae:32:71:c3:b5:48:94:1e:36:d7:1d:85:
                    d4:69:29:1f:70:58:b2:33:4c:5b:02:eb:d1:bc:52:
                    10:73:01:a5:85:59:2a:74:c8:1f:97:f5:df:40:e5:
                    ee:ea:83:ff:e2:da:a6:af:eb:a9:3e:e4:38:6a:52:
                    cd:93:71:75:bb:fa:3b:7d:ab:69:98:44:32:e5:de:
                    da:9c:e3:62:ef:3c:56:c0:54:43:37:ae:34:2f:a8:
                    76:83:d1:07:33:03:c0:0d:2e:54:eb:a0:54:3b:3d:
                    f6:61:4f:fc:ea:33:99:d1:22:30:42:2d:7a:81:ba:
                    ac:2f:a8:81:b2:d1:51:fc:d8:43:79:b9:dc:34:d3:
                    83:19:78:dc:5d:91:20:5f:d9:b1:df:9b:a3:08:ae:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A9:97:2E:CD:F7:7D:0D:02:CB:A3:7D:0D:57:0E:64:57:8A:32:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/8535d9d7-f8f7-3d10-8e35-92ab0696028e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.56.0/21
                  107.180.128.0/21
                  107.180.160.0/19
                  206.251.196.0-206.251.203.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:8e:d3:b2:5a:2b:d8:b0:28:c4:c1:f4:5a:f1:d2:56:7d:65:
         e1:92:70:c5:ce:b1:bc:ad:76:47:ab:89:88:df:b0:22:b2:58:
         09:ab:2f:42:bc:2a:10:da:ee:ac:e6:f8:96:22:16:35:61:bb:
         04:82:1b:db:c1:16:c3:9e:07:bd:a5:5b:1f:8c:17:4b:f3:d3:
         3c:d1:33:1f:ca:08:13:bd:45:35:38:17:68:99:b8:3f:a2:f7:
         e0:0b:bf:65:ca:23:66:cd:d6:63:ab:97:a5:96:49:72:89:23:
         2e:31:46:0d:c9:c9:5f:1f:16:a2:27:18:d5:b9:44:dd:a1:46:
         7c:62:b4:34:b1:17:2a:79:3f:1c:15:62:8a:fd:14:d8:5f:e3:
         b3:37:ff:e0:f9:1f:a2:89:a9:ee:6a:4f:f1:db:e4:8f:1e:fd:
         d0:cf:a8:26:b2:7e:9b:3b:94:a8:8b:55:bc:e5:65:42:c1:d5:
         12:df:9f:c3:7d:b0:19:13:87:8f:a8:03:12:39:cd:27:f1:1c:
         17:ba:e2:39:df:4d:21:5c:9e:09:e7:8e:e8:98:d8:14:6a:c0:
         0d:54:e0:c7:33:58:b9:9e:43:b7:70:1a:b6:df:f4:0b:6e:a7:
         00:be:db:67:07:1b:61:dc:96:f9:a7:62:61:65:a6:72:29:23:
         03:8c:8b:20
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEkdcYjSSRb1Gma6YHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm
NjhiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
M2I5MjFhYWQtMDM5MS00OWUwLThlYmQtOTQ0YTBiMDVmOThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw/InWzqS6Xc86db6Q69Dt1CKjvwOnBQcUK5
jJvRHQNh5klTgHH6PALn5mHYcvgxMHrW7kPJ9Ubhy+PhiuSkrbqi1wnJr5avYkyT
2E0cT1la+X/xFTkbLDH6wnoLJ2/8nzlmGve1LC2yAIOuMnHDtUiUHjbXHYXUaSkf
cFiyM0xbAuvRvFIQcwGlhVkqdMgfl/XfQOXu6oP/4tqmr+upPuQ4alLNk3F1u/o7
fatpmEQy5d7anONi7zxWwFRDN640L6h2g9EHMwPADS5U66BUOz32YU/86jOZ0SIw
Qi16gbqsL6iBstFR/NhDebncNNODGXjcXZEgX9mx35ujCK5rEQIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFNOply7N930NAsujfQ1XDmRXijJLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0
Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvODUzNWQ5ZDctZjhmNy0z
ZDEwLThlMzUtOTJhYjA2OTYwMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1
OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0
ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi
ZDI1NGY2OGIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDSno4AwQD
a7SAAwQFa7SgMAwDBALO+8QDBALO+8gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkY7Tslor2LAoxMH0WvHS
Vn1l4ZJwxc6xvK12R6uJiN+wIrJYCasvQrwqENrurOb4liIWNWG7BIIb28EWw54H
vaVbH4wXS/PTPNEzH8oIE71FNTgXaJm4P6L34Au/ZcojZs3WY6uXpZZJcokjLjFG
DcnJXx8WoicY1blE3aFGfGK0NLEXKnk/HBViiv0U2F/jszf/4Pkfoomp7mpP8dvk
jx790M+oJrJ+mzuUqItVvOVlQsHVEt+fw32wGROHj6gDEjnNJ/EcF7riOd9NIVye
CeeO6JjYFGrADVTgxzNYuZ5Dt3Aatt/0C26nAL7bZwcbYdyW+adiYWWmcikjA4yL
IA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:45 2025 by rpki-client