Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/85ce3289-bba2-313a-aced-267653dd3459.roa
File:                     85ce3289-bba2-313a-aced-267653dd3459.roa (raw, json)
Hash identifier:          pIPM3ySzo4s3wy0YlGHBIaeIBV3Lw7n3IwCT4iUvEJU=
Subject key identifier:   7A:73:FB:9E:C0:F0:BB:6B:A5:2A:6A:90:CE:8F:92:E4:A4:7D:0D:56
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584965E97ADA4D24339BFF70F3E0
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/85ce3289-bba2-313a-aced-267653dd3459.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     11377
IP address blocks:        159.183.61.0/24 maxlen: 24
                          159.183.62.0/24 maxlen: 24
                          159.183.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7a:da:4d:24:33:9b:ff:70:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=7a3df73a-de0d-4661-8616-4b7308153459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:34:8f:1b:17:9b:31:5e:2b:ce:3a:4d:5b:
                    7f:f7:4b:2d:8e:a0:f6:78:41:e5:b1:1b:9a:21:7f:
                    9c:d9:fb:e6:2b:5b:dc:bb:f1:28:e9:d2:29:f0:50:
                    25:76:b8:c2:49:d1:34:bf:45:ef:72:2d:38:73:2b:
                    e5:3f:68:9d:4d:a1:ca:12:d9:02:7c:0a:97:d2:a0:
                    52:44:0c:ed:43:bd:15:c9:d4:d8:c6:34:20:55:b6:
                    5a:09:18:43:d7:07:a0:b1:66:34:aa:a7:86:e3:03:
                    aa:cd:d5:2b:e7:5e:e7:4e:5e:2a:88:c1:52:8a:2d:
                    9f:39:8a:70:a2:9a:8e:90:00:fe:51:27:88:c4:66:
                    4a:f6:8e:14:3a:ea:82:14:3a:49:74:13:8c:ad:da:
                    c4:b0:f8:91:d4:cb:ce:58:79:e3:cd:55:96:f2:d0:
                    12:b2:74:ef:90:c1:bb:75:4f:ef:ab:47:74:4c:f8:
                    10:b2:fa:a1:48:eb:64:c1:11:5e:6f:b6:45:f8:57:
                    92:c2:eb:6d:b7:20:ea:4d:f6:dc:59:fa:80:ec:e2:
                    09:f8:b0:fe:6a:6f:ac:99:b8:d4:76:da:d0:23:53:
                    6b:35:fe:ad:e2:19:ce:95:4b:6f:ea:45:0a:88:e7:
                    0c:a6:6a:bd:d3:fc:c0:45:99:02:9f:83:e4:6e:fe:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:73:FB:9E:C0:F0:BB:6B:A5:2A:6A:90:CE:8F:92:E4:A4:7D:0D:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/85ce3289-bba2-313a-aced-267653dd3459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.61.0-159.183.63.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9c:17:5e:4d:f9:36:5a:e1:e6:fc:88:3d:5d:35:52:81:0c:
         2f:88:2f:99:97:0d:9e:ed:c0:dc:85:89:5c:51:51:41:c0:46:
         3b:dc:f5:9b:17:07:e3:d6:73:97:24:e5:8f:69:a7:97:48:b4:
         0b:b9:26:d2:01:4c:66:84:3b:f6:a2:69:d8:ba:31:86:13:84:
         11:9d:2d:40:66:bc:2d:07:e1:3f:0d:90:f9:e2:73:d7:2f:f0:
         68:14:6b:49:0c:37:62:09:01:a7:a0:0c:3a:02:53:36:81:07:
         0f:49:05:f9:38:48:73:4b:f9:f7:46:47:c5:ad:9e:90:1c:b9:
         99:75:e0:82:18:07:2f:7b:a3:68:df:7e:fa:fb:15:68:59:f6:
         42:7d:a4:3f:04:f9:af:c6:18:ea:e2:ea:a5:da:b6:d1:3a:a1:
         2e:8d:0b:c0:70:46:4d:3a:49:8a:4b:f7:89:3e:ae:7b:a3:b9:
         7b:93:c6:ec:81:e2:d1:3f:ca:20:c7:aa:13:ff:c4:86:e3:bf:
         a4:58:c4:08:9c:17:36:6d:60:4f:d0:80:57:bd:27:dc:b7:ea:
         2a:2a:3c:a8:b7:a4:89:92:97:46:0c:c4:88:ba:aa:3d:e3:7e:
         c6:ea:7e:f1:bc:dd:96:31:04:53:3f:e8:a9:d5:00:e6:a7:c2:
         2d:f8:b6:9d
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEll6XraTSQzm/9w8+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1
MGI4MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk
N2EzZGY3M2EtZGUwZC00NjYxLTg2MTYtNGI3MzA4MTUzNDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjQ0jxsXmzFeK846TVt/90stjqD2eEHlsRua
IX+c2fvmK1vcu/Eo6dIp8FAldrjCSdE0v0Xvci04cyvlP2idTaHKEtkCfAqX0qBS
RAztQ70VydTYxjQgVbZaCRhD1wegsWY0qqeG4wOqzdUr517nTl4qiMFSii2fOYpw
opqOkAD+USeIxGZK9o4UOuqCFDpJdBOMrdrEsPiR1MvOWHnjzVWW8tASsnTvkMG7
dU/vq0d0TPgQsvqhSOtkwRFeb7ZF+FeSwutttyDqTfbcWfqA7OIJ+LD+am+smbjU
dtrQI1NrNf6t4hnOlUtv6kUKiOcMpmq90/zARZkCn4Pkbv77ZQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHpz+57A8LtrpSpqkM6PkuSkfQ1WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0
ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvODVjZTMyODktYmJhMi0z
MTNhLWFjZWQtMjY3NjUzZGQzNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx
MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw
NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl
ZDVkMDUwYjguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACftz0D
BAaftwAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAiZwXXk35Nlrh5vyIPV01UoEML4gvmZcNnu3A3IWJXFFR
QcBGO9z1mxcH49ZzlyTlj2mnl0i0C7km0gFMZoQ79qJp2LoxhhOEEZ0tQGa8LQfh
Pw2Q+eJz1y/waBRrSQw3YgkBp6AMOgJTNoEHD0kF+ThIc0v590ZHxa2ekBy5mXXg
ghgHL3ujaN9++vsVaFn2Qn2kPwT5r8YY6uLqpdq20TqhLo0LwHBGTTpJikv3iT6u
e6O5e5PG7IHi0T/KIMeqE//EhuO/pFjECJwXNm1gT9CAV70n3LfqKio8qLekiZKX
RgzEiLqqPeN+xup+8bzdljEEUz/oqdUA5qfCLfi2nQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:30 2025 by rpki-client