Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa
File:                     ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa (raw, json)
Hash identifier:          fR/LPG8kzU/eitAhdudC5ykQbG25z0BZJzkjnHqkr8M=
Subject key identifier:   8E:11:2F:47:08:70:98:73:09:4B:33:BE:44:76:2B:B0:99:4B:F2:DF
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F432858492CAE91FC6912A616AA13DC00
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        199.187.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:91:fc:69:12:a6:16:aa:13:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=98aa4624-9e33-4fd5-b804-c0e32f5854d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:3f:eb:ef:f8:05:06:1f:cc:f5:20:5c:25:
                    d1:13:d3:a8:6b:94:ea:0a:70:ac:9d:37:a4:1d:ee:
                    be:b4:ca:41:1f:d2:71:62:89:bc:87:f7:01:35:c5:
                    2d:a6:f3:1d:7f:74:c3:fb:1e:e3:6f:57:5e:fa:8c:
                    ec:fc:08:a7:6d:ce:58:75:31:6e:2f:4d:4a:bc:86:
                    39:66:5a:46:a5:51:48:48:10:9a:5d:f3:d8:8f:43:
                    2a:45:eb:51:cf:49:a3:ba:5d:02:d1:6e:63:24:ec:
                    8e:60:31:1f:5a:a7:3b:84:5a:b3:a0:fb:d2:6d:f3:
                    37:12:6a:bd:52:8e:31:91:ef:04:ca:a7:2b:d7:07:
                    65:0d:a7:01:13:88:1e:9a:1f:bf:34:09:1a:be:be:
                    eb:79:c7:8b:12:00:a9:d7:52:da:df:42:62:09:09:
                    2d:53:8f:5f:6a:70:de:91:5e:fb:06:30:5a:83:33:
                    6e:f5:6e:6e:54:30:2b:81:7d:33:d7:11:0e:6b:dd:
                    63:1a:ea:9f:74:63:e8:ab:49:a8:03:50:9b:50:01:
                    37:58:7f:d5:4f:1f:20:90:13:80:68:21:b0:c0:cb:
                    32:d1:fc:d9:77:a9:24:77:ee:ec:da:60:4b:20:f4:
                    84:cb:af:ea:49:31:23:49:91:0d:6c:3d:89:e9:84:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:11:2F:47:08:70:98:73:09:4B:33:BE:44:76:2B:B0:99:4B:F2:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ed:be:57:e0:34:65:b5:9f:73:83:dd:80:c3:15:e8:6c:a7:
         3f:7a:8b:71:5b:56:fa:f1:83:18:2d:14:98:5e:e2:f3:88:0b:
         9c:a7:29:50:70:6c:a9:a2:f2:ef:7a:9c:a1:2b:57:4b:13:fb:
         26:e2:73:ff:7f:a9:33:49:79:c6:42:11:b9:96:c0:bb:8a:1d:
         ac:57:d9:6d:74:10:87:98:de:6b:48:21:25:d4:fd:6b:2a:5b:
         d2:51:3a:46:a0:fb:6d:fe:91:31:73:0d:00:26:5e:39:6e:04:
         83:6b:e1:da:13:b5:b7:48:e0:d3:c1:95:7e:90:f3:8c:16:6b:
         22:9c:97:63:ad:a5:1a:aa:28:f5:c7:b9:1f:bf:56:6e:2e:44:
         90:de:54:bc:21:e9:2a:d8:df:b8:de:8c:1b:84:ee:fe:cc:c8:
         b4:67:e6:16:4c:35:96:44:7a:17:49:1a:3d:d6:f0:d7:62:63:
         7c:1a:9e:4a:26:88:67:6f:e6:45:72:fd:f9:14:cf:89:8b:45:
         c0:1f:c4:8a:1e:1f:26:8c:f3:ef:ac:7d:36:ae:0d:34:3c:41:
         c5:67:60:c9:c2:63:75:06:fd:93:ed:c1:0f:56:13:b9:1d:00:
         73:e0:75:c6:4e:f4:ab:7a:0d:31:1b:f6:49:f6:1f:a4:f9:1f:
         4d:84:e5:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpH8aRKmFqoT3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj
NDYwMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OThhYTQ2MjQtOWUzMy00ZmQ1LWI4MDQtYzBlMzJmNTg1NGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ck/6+/4BQYfzPUgXCXRE9Ooa5TqCnCsnTek
He6+tMpBH9JxYom8h/cBNcUtpvMdf3TD+x7jb1de+ozs/Ainbc5YdTFuL01KvIY5
ZlpGpVFISBCaXfPYj0MqRetRz0mjul0C0W5jJOyOYDEfWqc7hFqzoPvSbfM3Emq9
Uo4xke8Eyqcr1wdlDacBE4gemh+/NAkavr7receLEgCp11La30JiCQktU49fanDe
kV77BjBagzNu9W5uVDArgX0z1xEOa91jGuqfdGPoq0moA1CbUAE3WH/VTx8gkBOA
aCGwwMsy0fzZd6kkd+7s2mBLIPSEy6/qSTEjSZENbD2J6YQAdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4RL0cIcJhzCUszvkR2K7CZS/LfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk
M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvYmE3YjBiNDctNTYyZS0z
ZDZhLWI1MmEtYTllODk1Zjg3NDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0
MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1
YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2
N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7u8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDtvlfgNGW1n3OD3YDDFehspz96i3FbVvrxgxgtFJhe4vOIC5ynKVBw
bKmi8u96nKErV0sT+ybic/9/qTNJecZCEbmWwLuKHaxX2W10EIeY3mtIISXU/Wsq
W9JROkag+23+kTFzDQAmXjluBINr4doTtbdI4NPBlX6Q84wWayKcl2OtpRqqKPXH
uR+/Vm4uRJDeVLwh6SrY37jejBuE7v7MyLRn5hZMNZZEehdJGj3W8NdiY3wankom
iGdv5kVy/fkUz4mLRcAfxIoeHyaM8++sfTauDTQ8QcVnYMnCY3UG/ZPtwQ9WE7kd
AHPgdcZO9Kt6DTEb9kn2H6T5H02E5fk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:44:17 2025 by rpki-client