Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa
File:                     46e5f02a-6c64-3546-b9b3-d0df60c70801.roa (raw, json)
Hash identifier:          7WgRuVcJdJHOwt6Ujx6lowUMTVGDlSDi18m+5d4hZ3M=
Subject key identifier:   1E:6D:B1:33:1E:FF:A5:76:2F:AD:56:B2:A9:78:C6:66:88:D5:24:A3
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F43285848F4F69391607CDEBD0B9AE208
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     25649
IP address blocks:        162.33.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:93:91:60:7c:de:bd:0b:9a:e2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=b30506a4-aa08-42c9-98f6-85225fb374cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:6e:13:4b:da:ec:62:f4:75:c1:70:21:b8:
                    cf:78:0e:83:3c:6d:a2:ff:cc:34:55:64:d3:4e:a1:
                    14:2c:40:b9:98:d9:76:2c:2a:5e:a7:3b:fd:43:c1:
                    79:56:38:c9:ce:10:51:a9:8d:8e:8b:10:b8:41:31:
                    08:d3:a8:a9:37:8e:0a:87:26:87:aa:e9:db:df:30:
                    bc:e8:88:be:f7:0a:b8:3b:88:5e:ae:15:f7:50:89:
                    68:2b:ac:e0:93:9d:f6:f6:bf:0d:ed:a4:7d:b5:04:
                    ba:ee:7b:59:d4:bd:ba:22:18:86:ed:01:06:62:72:
                    ad:13:e9:b1:63:ac:33:29:3e:f3:cf:21:2b:49:9d:
                    34:b4:b6:c1:48:93:5f:f3:0a:e5:9e:d1:13:a2:1a:
                    9a:1c:9d:19:e1:59:d4:b1:56:19:a7:42:86:18:39:
                    3b:1b:23:7a:b5:60:5c:f7:fd:8c:af:e9:d4:05:21:
                    21:75:f1:7c:6a:85:5f:76:91:30:a5:9b:d4:15:82:
                    c4:ab:6d:ff:7a:5e:1e:a7:7f:11:ab:12:1d:eb:b2:
                    6c:a0:04:52:3d:f1:b5:ef:78:28:8f:e4:c0:b3:00:
                    9a:c5:c9:16:f4:27:fe:de:42:4a:89:eb:3b:00:7b:
                    c2:80:65:86:37:e7:ef:7a:37:09:83:e6:2a:11:e5:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6D:B1:33:1E:FF:A5:76:2F:AD:56:B2:A9:78:C6:66:88:D5:24:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:90:a2:eb:bd:6a:a0:b3:b7:16:c9:62:db:66:97:17:1a:22:
         09:2c:2f:aa:ab:f9:d9:fc:41:30:c8:a9:f5:65:6e:c2:c9:2c:
         18:28:ee:a4:69:dd:cd:dc:de:a2:b1:db:0c:5b:6f:e8:df:7f:
         5e:b8:be:da:e3:af:ae:89:56:19:72:1a:84:47:4f:b5:0d:b0:
         cb:86:4c:5e:d9:52:c1:8c:e0:40:11:37:c4:f6:26:c1:fd:96:
         e2:25:12:8e:a7:2f:0c:98:a7:c2:57:e2:f5:38:83:81:79:bd:
         de:f3:70:78:3a:d1:eb:b1:0a:0f:b4:cb:f0:2f:e5:fd:5a:9f:
         fd:c3:9b:1c:ba:b4:02:65:37:5e:82:a7:39:cf:50:86:3a:5e:
         80:08:8a:19:f8:db:e3:6d:4a:f5:77:b5:4e:03:56:51:01:e4:
         5f:ee:dc:28:41:92:d5:bb:99:b5:f6:86:cc:4c:c0:28:11:f0:
         db:73:01:4a:6f:3f:c1:fc:21:c6:1c:66:d8:84:3b:48:a3:14:
         1c:76:97:50:20:6e:b3:4c:53:f0:af:a8:9a:6e:cb:26:eb:ea:
         b4:fd:8e:cd:07:f2:e8:8b:d3:dc:d7:49:41:4e:68:84:8d:d0:
         38:b9:ab:47:34:f0:6c:f3:b9:01:4d:39:59:c1:1b:d0:a9:45:
         27:f3:5a:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pORYHzevQua4ggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy
ZThlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YjMwNTA2YTQtYWEwOC00MmM5LTk4ZjYtODUyMjVmYjM3NGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxehuE0va7GL0dcFwIbjPeA6DPG2i/8w0VWTT
TqEULEC5mNl2LCpepzv9Q8F5VjjJzhBRqY2OixC4QTEI06ipN44KhyaHqunb3zC8
6Ii+9wq4O4herhX3UIloK6zgk5329r8N7aR9tQS67ntZ1L26IhiG7QEGYnKtE+mx
Y6wzKT7zzyErSZ00tLbBSJNf8wrlntETohqaHJ0Z4VnUsVYZp0KGGDk7GyN6tWBc
9/2Mr+nUBSEhdfF8aoVfdpEwpZvUFYLEq23/el4ep38RqxId67JsoARSPfG173go
j+TAswCaxckW9Cf+3kJKies7AHvCgGWGN+fvejcJg+YqEeUX/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB5tsTMe/6V2L61Wsql4xmaI1SSjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj
ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNDZlNWYwMmEtNmM2NC0z
NTQ2LWI5YjMtZDBkZjYwYzcwODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh
NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw
MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw
YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoiHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACaQouu9aqCztxbJYttmlxcaIgksL6qr+dn8QTDIqfVlbsLJLBgo7qRp
3c3c3qKx2wxbb+jff164vtrjr66JVhlyGoRHT7UNsMuGTF7ZUsGM4EARN8T2JsH9
luIlEo6nLwyYp8JX4vU4g4F5vd7zcHg60euxCg+0y/Av5f1an/3Dmxy6tAJlN16C
pznPUIY6XoAIihn42+NtSvV3tU4DVlEB5F/u3ChBktW7mbX2hsxMwCgR8NtzAUpv
P8H8IcYcZtiEO0ijFBx2l1AgbrNMU/CvqJpuyybr6rT9js0H8uiL09zXSUFOaISN
0Di5q0c08GzzuQFNOVnBG9CpRSfzWvs=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:29 2025 by rpki-client