Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa
File:                     55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa (raw, json)
Hash identifier:          PSZVg5ormgTTCtO75qf4DfCdtt0XJPFMaQASpqJbjM8=
Subject key identifier:   37:8E:7E:D6:3E:DB:48:0C:6E:33:3E:33:8B:41:8F:BB:E2:5D:0B:71
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F43285849203C12E7DFB3E9BE8258D4A8
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     400238
IP address blocks:        204.8.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:12:e7:df:b3:e9:be:82:58:d4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=0b6d0f44-c394-4d9a-9889-ed5a30198c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:98:f6:34:fb:c3:5c:03:23:1c:e7:0f:bf:
                    11:03:28:be:19:a3:6f:c5:49:69:ba:93:e6:60:62:
                    04:8a:44:37:b5:6e:7b:58:38:ad:90:25:2a:48:d4:
                    44:e6:ac:35:8d:cf:b3:9e:9e:56:8b:81:87:1e:e8:
                    33:b0:4e:33:eb:fb:c9:32:53:4b:5e:5d:10:77:72:
                    e8:62:fb:88:99:9f:34:aa:81:ab:e1:d4:f1:21:a6:
                    ae:8b:84:15:d5:9c:30:a6:9c:d8:d1:72:28:d8:91:
                    cc:11:d5:21:7b:49:15:7d:7c:39:72:06:af:cf:1c:
                    cb:97:ed:01:25:71:c5:7a:6f:19:8a:09:d2:f4:2b:
                    cb:78:b7:97:40:d7:d2:df:95:5c:03:af:ff:83:20:
                    c4:86:c6:45:2a:6c:24:08:24:9a:bc:10:56:47:30:
                    36:09:d9:f7:d9:b0:14:e4:58:10:5c:c9:38:35:59:
                    bf:c2:ae:ba:9d:a3:4b:91:ca:5e:c1:ec:1a:62:35:
                    0b:5e:70:d9:15:e5:cc:71:f8:9e:4f:56:63:e9:bc:
                    32:92:99:c9:fa:9c:ad:8e:8c:15:20:95:74:a6:88:
                    dd:a4:31:b7:9c:c5:e7:cf:5d:a7:e6:88:91:e5:53:
                    b7:63:98:7e:76:2b:3c:e9:58:bc:55:36:22:c8:a0:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8E:7E:D6:3E:DB:48:0C:6E:33:3E:33:8B:41:8F:BB:E2:5D:0B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:da:62:27:0e:44:26:43:d7:46:92:9c:4a:12:2a:6e:7c:ca:
         0b:36:b0:3c:39:a9:20:fe:5b:df:78:e9:18:78:52:49:18:1c:
         27:a1:f4:3a:0a:fb:9b:9b:2b:21:4f:25:d9:50:e3:ec:80:46:
         05:08:a1:9e:49:ca:5a:02:ed:52:34:98:90:c4:dc:b4:04:80:
         3d:ed:df:9a:7b:e8:d2:73:92:f5:eb:fa:5e:10:31:f9:6b:d6:
         7e:9a:04:5c:db:46:89:8f:c7:85:0c:95:29:57:2d:12:ae:79:
         e1:38:f0:d6:c3:c9:75:5f:4b:3a:a8:2d:89:7e:bc:66:6a:4e:
         e6:e3:92:3a:da:4f:27:6b:1d:b8:73:ba:9e:83:fb:e8:d0:06:
         64:68:6a:62:d2:49:aa:41:30:67:af:d4:50:16:0f:9b:13:a1:
         62:c1:77:34:e9:49:97:1e:e8:f5:9d:a9:05:ac:fa:6d:51:b2:
         4b:52:5f:de:e5:3c:47:e8:15:7f:0a:84:a2:36:59:d7:da:7a:
         a8:fb:d3:0c:fe:c0:4e:76:60:5f:c3:82:78:f1:c7:ff:67:7e:
         3f:e8:11:04:d1:d1:fa:9d:86:06:d3:14:dd:c3:e3:9c:ce:3d:
         1f:43:c6:5b:95:9f:b7:7e:38:9c:be:e0:d2:39:4e:56:8c:4a:
         09:a1:c0:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBLn37PpvoJY1KgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy
YWVjMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
MGI2ZDBmNDQtYzM5NC00ZDlhLTk4ODktZWQ1YTMwMTk4YzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtSY9jT7w1wDIxznD78RAyi+GaNvxUlpupPm
YGIEikQ3tW57WDitkCUqSNRE5qw1jc+znp5Wi4GHHugzsE4z6/vJMlNLXl0Qd3Lo
YvuImZ80qoGr4dTxIaaui4QV1ZwwppzY0XIo2JHMEdUhe0kVfXw5cgavzxzLl+0B
JXHFem8ZignS9CvLeLeXQNfS35VcA6//gyDEhsZFKmwkCCSavBBWRzA2Cdn32bAU
5FgQXMk4NVm/wq66naNLkcpewewaYjULXnDZFeXMcfieT1Zj6bwykpnJ+pytjowV
IJV0pojdpDG3nMXnz12n5oiR5VO3Y5h+dis86Vi8VTYiyKDJ8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDeOftY+20gMbjM+M4tBj7viXQtxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh
NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvNTVjYjIwY2EtYTNlYi0z
NDFhLWFiN2ItYzgxOGEzYWU1YTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy
YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm
MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5
ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAhMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPaYicORCZD10aSnEoSKm58ygs2sDw5qSD+W9946Rh4UkkYHCeh9DoK
+5ubKyFPJdlQ4+yARgUIoZ5JyloC7VI0mJDE3LQEgD3t35p76NJzkvXr+l4QMflr
1n6aBFzbRomPx4UMlSlXLRKueeE48NbDyXVfSzqoLYl+vGZqTubjkjraTydrHbhz
up6D++jQBmRoamLSSapBMGev1FAWD5sToWLBdzTpSZce6PWdqQWs+m1RsktSX97l
PEfoFX8KhKI2Wdfaeqj70wz+wE52YF/Dgnjxx/9nfj/oEQTR0fqdhgbTFN3D45zO
PR9DxluVn7d+OJy+4NI5TlaMSgmhwFc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:11 2025 by rpki-client