Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/37acec46-0de0-3fe4-a751-d81d4059f6a7.roa
File:                     37acec46-0de0-3fe4-a751-d81d4059f6a7.roa (raw, json)
Hash identifier:          EA3lVIJvXYGv0tXgeiZccOeoMeqjx+m3sREjAuZ7kk8=
Subject key identifier:   48:7F:75:B4:84:BC:52:11:10:06:6E:55:F8:A9:6D:5B:DD:1D:CE:68
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F432858488C45CE09742967E4062D7180
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/37acec46-0de0-3fe4-a751-d81d4059f6a7.roa
Signing time:             Wed 15 Jan 2025 02:00:39 +0000
ROA not before:           Wed 15 Jan 2025 02:00:39 +0000
ROA not after:            Tue 15 Apr 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        66.117.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8c:45:ce:09:74:29:67:e4:06:2d:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Jan 15 02:00:39 2025 GMT
            Not After : Apr 15 01:00:39 2025 GMT
        Subject: CN=0b43c8fb-7204-468f-b27e-9e2e30a7ca9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:44:31:b1:97:07:48:45:d7:8c:04:67:0c:
                    8a:e0:d3:8c:61:ca:10:76:3b:2e:54:83:5a:71:97:
                    95:a3:60:fd:30:a9:5c:96:5a:bd:04:96:1c:de:97:
                    fe:89:8b:5e:23:4a:80:bd:0c:93:ca:24:e3:b9:4a:
                    28:ac:d3:18:21:7e:34:f7:ca:6c:e9:28:47:ee:bb:
                    41:7a:26:fe:89:11:53:74:83:30:80:9b:c0:27:42:
                    12:be:23:6e:19:82:8b:b4:6b:8d:2c:22:92:8c:a6:
                    f3:d7:e6:35:b3:ce:62:92:42:2b:55:2c:c1:d3:34:
                    25:22:c7:ca:7a:96:0c:bd:79:62:87:9e:e1:46:5c:
                    5b:0a:f8:bc:7a:ca:1e:2d:77:c7:c4:34:25:51:1c:
                    8f:83:51:ed:5d:89:e0:30:d6:0f:ad:f1:fc:48:6a:
                    60:af:3b:9c:91:9d:df:69:73:49:44:5d:d8:ec:3c:
                    40:38:58:57:96:1a:70:e7:78:85:b7:10:e5:c8:d6:
                    fb:51:27:b3:bb:8d:d4:2e:3d:94:af:c8:ef:3e:61:
                    af:ef:f6:46:21:63:4b:fe:c0:ae:0d:7a:22:ed:be:
                    80:c1:33:d7:44:7c:80:26:ae:be:27:3e:69:a4:f6:
                    96:6e:12:16:21:f2:4a:76:cb:c5:fb:3f:38:5f:76:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7F:75:B4:84:BC:52:11:10:06:6E:55:F8:A9:6D:5B:DD:1D:CE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/37acec46-0de0-3fe4-a751-d81d4059f6a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:13:f1:ed:e5:3a:39:bf:d7:20:91:f3:86:28:27:93:28:
         50:18:0d:73:40:af:4e:47:23:95:71:1a:d4:4d:67:cb:1e:d5:
         89:ba:2f:45:9f:26:c6:9a:14:9a:10:b2:e7:14:b9:8a:32:83:
         67:ea:23:10:94:d6:04:a7:3d:d0:42:45:dd:28:c3:9d:1a:a1:
         64:4d:e6:cb:2c:5b:39:7e:bb:a4:c6:07:18:49:c2:6f:34:25:
         90:77:b5:4a:ca:5e:45:22:39:1b:76:a2:a4:40:fc:f2:df:5c:
         90:c4:fb:5d:fa:b8:ef:24:5a:ed:25:c9:15:7c:5c:72:3e:35:
         56:2b:b8:cb:21:f5:7a:9f:b4:e5:11:0a:3d:7b:28:ae:26:65:
         17:d1:c1:ac:ec:08:3f:42:6d:b0:74:c8:bc:68:bd:81:ed:06:
         54:a2:33:66:2e:ac:16:19:8f:6a:f2:35:6d:98:12:8a:9e:33:
         9f:a7:5a:a8:d6:d4:8e:07:94:50:bd:f2:b9:b4:d3:ff:c6:e8:
         82:bf:30:70:c3:e9:e6:e1:dd:95:d2:26:c2:72:0f:9c:28:d3:
         1a:12:e4:62:c7:b5:b4:52:bb:49:c2:61:20:39:24:71:a2:5f:
         67:e4:94:2b:37:b6:51:27:24:35:bd:1e:94:ed:97:1a:b7:ff:
         c3:78:d5:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiMRc4JdCln5AYtcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI1MDExNTAyMDAzOVoXDTI1MDQxNTAxMDAzOVowLzEtMCsGA1UEAxMk
MGI0M2M4ZmItNzIwNC00NjhmLWIyN2UtOWUyZTMwYTdjYTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUFEMbGXB0hF14wEZwyK4NOMYcoQdjsuVINa
cZeVo2D9MKlcllq9BJYc3pf+iYteI0qAvQyTyiTjuUoorNMYIX4098ps6ShH7rtB
eib+iRFTdIMwgJvAJ0ISviNuGYKLtGuNLCKSjKbz1+Y1s85ikkIrVSzB0zQlIsfK
epYMvXlih57hRlxbCvi8esoeLXfHxDQlURyPg1HtXYngMNYPrfH8SGpgrzuckZ3f
aXNJRF3Y7DxAOFhXlhpw53iFtxDlyNb7USezu43ULj2Ur8jvPmGv7/ZGIWNL/sCu
DXoi7b6AwTPXRHyAJq6+Jz5ppPaWbhIWIfJKdsvF+z84X3a5JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEh/dbSEvFIREAZuVfipbVvdHc5oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvMzdhY2VjNDYtMGRlMC0z
ZmU0LWE3NTEtZDgxZDQwNTlmNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQnUSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISPE/Ht5To5v9cgkfOGKCeTKFAYDXNAr05HI5VxGtRNZ8se1Ym6L0Wf
JsaaFJoQsucUuYoyg2fqIxCU1gSnPdBCRd0ow50aoWRN5sssWzl+u6TGBxhJwm80
JZB3tUrKXkUiORt2oqRA/PLfXJDE+136uO8kWu0lyRV8XHI+NVYruMsh9XqftOUR
Cj17KK4mZRfRwazsCD9CbbB0yLxovYHtBlSiM2YurBYZj2ryNW2YEoqeM5+nWqjW
1I4HlFC98rm00//G6IK/MHDD6ebh3ZXSJsJyD5wo0xoS5GLHtbRSu0nCYSA5JHGi
X2fklCs3tlEnJDW9HpTtlxq3/8N41YU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:46 2025 by rpki-client