Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ba5c830d-11a1-3e9e-a99d-00f4bdf13805.roa
File:                     ba5c830d-11a1-3e9e-a99d-00f4bdf13805.roa (raw, json)
Hash identifier:          oFfVw00FT7smjCl+Ss3LWgoaKUWdSceMH7YYyjGU67M=
Subject key identifier:   08:EB:ED:A6:7A:0F:E7:22:E5:BD:E1:4C:0B:EA:77:C1:45:CA:97:31
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285848A99616DCCFEBB9EC599DE900
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ba5c830d-11a1-3e9e-a99d-00f4bdf13805.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        198.145.105.0/24 maxlen: 24
                          209.20.192.0/18 maxlen: 18
                          216.65.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:16:dc:cf:eb:b9:ec:59:9d:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=e4d1f3da-039c-466d-9b91-5a04f61ceb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:d8:c7:9e:3b:14:18:d2:37:03:d5:99:08:
                    54:e6:9e:c1:f9:f8:c0:33:dc:d6:c2:41:cc:87:b5:
                    52:1b:d1:37:2f:bb:01:7c:96:47:02:f3:bb:45:bd:
                    1e:25:a9:ff:49:6b:fd:bd:7e:ca:e9:30:05:15:5b:
                    22:58:e2:55:11:ec:8b:42:91:f0:0b:a4:eb:fb:ed:
                    39:88:77:a4:07:f0:67:f7:6c:22:7f:a1:17:79:05:
                    1b:34:2c:8d:6a:21:1e:49:ff:e2:d6:33:7d:71:6e:
                    a5:69:2c:e1:05:9f:6a:33:c6:cb:c5:74:5f:b2:fc:
                    76:bf:63:85:a4:3d:8e:3b:d5:bd:5a:03:05:e5:89:
                    55:e2:7a:bf:ba:a1:37:61:25:04:d4:0d:7b:72:e2:
                    9c:60:10:cc:f7:3c:f6:d5:ec:d5:87:a8:bc:dc:64:
                    00:bb:19:d0:a4:89:29:d6:27:92:f7:f0:73:43:7f:
                    6d:d6:af:c2:52:67:52:b7:10:e7:fb:15:1e:4a:22:
                    eb:15:aa:06:69:83:61:c6:e8:85:1b:b2:d4:2b:91:
                    47:aa:02:aa:75:45:7a:c8:c3:b0:cb:6a:29:7c:81:
                    2d:46:90:fd:52:d4:54:f7:3e:2b:24:f9:a3:cd:cc:
                    90:85:f3:e4:36:c6:c7:e8:68:35:bf:82:67:47:b9:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EB:ED:A6:7A:0F:E7:22:E5:BD:E1:4C:0B:EA:77:C1:45:CA:97:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ba5c830d-11a1-3e9e-a99d-00f4bdf13805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.105.0/24
                  209.20.192.0/18
                  216.65.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d8:42:55:00:e9:4c:6f:39:38:39:46:24:6a:8a:05:ee:67:
         06:c5:89:be:2a:a5:a1:36:f6:8e:50:19:43:ec:7d:07:df:53:
         7e:91:26:2c:74:15:1d:4e:96:65:4e:08:7e:34:57:b2:02:64:
         39:e1:f9:56:74:62:ef:b7:fc:2b:ff:94:90:e0:93:f8:5f:c3:
         52:11:1b:d4:7d:a1:63:33:0c:61:72:68:39:67:d8:d5:8b:ac:
         a5:fe:8c:51:ca:ad:e8:7c:ee:b2:6d:da:77:57:7b:3a:7b:3c:
         ec:c8:2c:d9:87:bf:22:ac:73:b9:9f:9b:d1:92:7a:c0:ec:11:
         19:18:65:12:d1:3f:b9:cc:db:a7:98:f8:2c:57:45:69:12:24:
         8d:7a:d4:6e:9f:59:c5:8a:c6:df:67:fb:da:3f:58:11:60:69:
         02:36:c3:09:94:35:de:7b:aa:ef:18:0d:27:a6:67:45:07:24:
         97:ca:20:85:5e:0f:78:3b:b1:ce:fb:fc:8c:79:ea:23:f3:92:
         4f:05:e1:3d:c0:03:24:84:b6:24:13:02:f4:a6:66:0c:a6:0d:
         ff:01:8a:0a:b3:ed:70:94:0d:71:53:b3:02:83:e2:11:1a:20:
         0d:e3:b1:43:3f:e0:16:b3:66:26:34:07:7c:42:53:16:c4:ac:
         2c:57:d3:c6
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEiplhbcz+u57Fmd6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTRkMWYzZGEtMDM5Yy00NjZkLTliOTEtNWEwNGY2MWNlYjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0jYx547FBjSNwPVmQhU5p7B+fjAM9zWwkHM
h7VSG9E3L7sBfJZHAvO7Rb0eJan/SWv9vX7K6TAFFVsiWOJVEeyLQpHwC6Tr++05
iHekB/Bn92wif6EXeQUbNCyNaiEeSf/i1jN9cW6laSzhBZ9qM8bLxXRfsvx2v2OF
pD2OO9W9WgMF5YlV4nq/uqE3YSUE1A17cuKcYBDM9zz21ezVh6i83GQAuxnQpIkp
1ieS9/BzQ39t1q/CUmdStxDn+xUeSiLrFaoGaYNhxuiFG7LUK5FHqgKqdUV6yMOw
y2opfIEtRpD9UtRU9z4rJPmjzcyQhfPkNsbH6Gg1v4JnR7mDiwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFAjr7aZ6D+ci5b3hTAvqd8FFypcxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYmE1YzgzMGQtMTFhMS0z
ZTllLWE5OWQtMDBmNGJkZjEzODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAxpFpAwQG
0RTAAwQF2EGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADXYQlUA6UxvOTg5RiRqigXuZwbFib4qpaE29o5Q
GUPsfQffU36RJix0FR1OlmVOCH40V7ICZDnh+VZ0Yu+3/Cv/lJDgk/hfw1IRG9R9
oWMzDGFyaDln2NWLrKX+jFHKreh87rJt2ndXezp7POzILNmHvyKsc7mfm9GSesDs
ERkYZRLRP7nM26eY+CxXRWkSJI161G6fWcWKxt9n+9o/WBFgaQI2wwmUNd57qu8Y
DSemZ0UHJJfKIIVeD3g7sc77/Ix56iPzkk8F4T3AAySEtiQTAvSmZgymDf8Bigqz
7XCUDXFTswKD4hEaIA3jsUM/4BazZiY0B3xCUxbErCxX08Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:59 2025 by rpki-client