Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ada64813-8cd8-4fc6-868e-df256de0bd8e/e8026e6f-fc97-3574-bb39-b861b5a7c667.roa
File:                     e8026e6f-fc97-3574-bb39-b861b5a7c667.roa (raw, json)
Hash identifier:          okH7MYW3NVg1RcmG/DxtkU5COs+HrunK4T+3Dg3ZTsw=
Subject key identifier:   5A:17:9F:29:28:43:91:55:5A:67:02:E4:F5:1F:30:AA:AF:AF:83:6B
Certificate issuer:       /CN=ada64813-8cd8-4fc6-868e-df256de0bd8e
Certificate serial:       010D0C9F432858489340B1C3D6CF44CBFE7BE7F0
Authority key identifier: FA:44:28:74:D3:A8:0D:E0:48:7E:3F:4E:F2:CA:EF:57:0D:2D:E6:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ada64813-8cd8-4fc6-868e-df256de0bd8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ada64813-8cd8-4fc6-868e-df256de0bd8e/e8026e6f-fc97-3574-bb39-b861b5a7c667.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     12119
IP address blocks:        192.80.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ada64813-8cd8-4fc6-868e-df256de0bd8e/ada64813-8cd8-4fc6-868e-df256de0bd8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ada64813-8cd8-4fc6-868e-df256de0bd8e/ada64813-8cd8-4fc6-868e-df256de0bd8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ada64813-8cd8-4fc6-868e-df256de0bd8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:b1:c3:d6:cf:44:cb:fe:7b:e7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada64813-8cd8-4fc6-868e-df256de0bd8e
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=49bb07e5-5763-4a83-b1a1-28c81c66dc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:e0:14:01:71:4d:a2:48:59:a5:0d:be:7a:
                    01:81:88:ad:b7:3d:ff:88:26:3f:5f:13:db:dc:cf:
                    ab:fc:80:16:55:43:bb:5c:aa:51:b9:fa:9a:5f:f8:
                    83:8d:5b:69:2f:d1:29:9d:d1:c9:0a:a3:43:b0:d5:
                    bb:13:4d:7a:3b:5e:45:a8:e4:19:0d:8a:fc:b4:25:
                    ed:9f:81:05:4c:5c:41:b7:9e:c4:51:38:5e:98:ea:
                    00:31:d9:d8:c4:eb:64:8b:02:aa:19:3d:fb:77:2e:
                    6d:f9:f7:45:2f:ae:da:99:e2:e6:07:7c:d0:d0:69:
                    a1:1f:92:ef:31:50:3b:55:72:8f:d9:cc:17:9d:3c:
                    17:24:41:e9:27:b4:fa:f0:00:f7:21:76:c2:4c:17:
                    0d:6c:2a:e2:ec:d6:46:a0:b3:3c:ad:1d:5e:e6:9b:
                    18:dc:44:02:b7:8d:da:8f:db:73:57:1c:72:d7:1c:
                    23:cd:3c:e1:f4:16:d3:6f:87:91:95:81:85:02:82:
                    17:b1:a1:93:0e:e9:74:e8:43:57:bd:d0:49:af:ed:
                    4a:54:9c:73:03:57:18:29:5f:be:23:02:86:a0:9b:
                    f1:06:60:bd:6e:67:a9:11:6d:d5:c7:7b:1e:1f:c5:
                    63:34:bc:12:b9:43:a9:4d:4a:44:97:4b:ed:f8:eb:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:17:9F:29:28:43:91:55:5A:67:02:E4:F5:1F:30:AA:AF:AF:83:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ada64813-8cd8-4fc6-868e-df256de0bd8e/e8026e6f-fc97-3574-bb39-b861b5a7c667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ada64813-8cd8-4fc6-868e-df256de0bd8e/ada64813-8cd8-4fc6-868e-df256de0bd8e.crl

            X509v3 Authority Key Identifier:
                keyid:FA:44:28:74:D3:A8:0D:E0:48:7E:3F:4E:F2:CA:EF:57:0D:2D:E6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ada64813-8cd8-4fc6-868e-df256de0bd8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:be:01:d5:ed:95:a3:c2:34:92:ce:1e:c9:2c:00:98:ec:
         26:de:9b:c0:67:03:7d:84:3d:d5:61:a1:d6:5a:96:6c:15:24:
         c3:11:b2:a3:d0:87:a6:dd:90:ad:b0:9d:ec:f2:1a:1e:33:e2:
         43:47:90:12:be:71:e8:f4:6e:1f:32:44:c8:d3:a7:26:6d:be:
         34:45:6e:bf:94:25:91:10:36:ae:68:0a:82:62:46:f6:89:f2:
         fe:75:d9:88:d8:70:2d:bc:e2:52:c7:77:96:dd:8f:00:71:ea:
         fc:c8:8b:6f:83:b5:59:35:a7:f8:29:46:be:cd:6d:6f:f7:2c:
         2d:95:8e:d6:09:59:ab:ff:d1:dc:5c:ac:09:7e:ba:a4:0b:0c:
         5d:50:49:99:46:2d:0a:2b:d4:69:25:af:e3:cc:eb:4c:bb:d8:
         99:1f:9a:59:1b:84:a9:3e:31:2a:96:72:b1:4f:eb:08:c2:e5:
         b4:ec:24:bd:b6:73:34:0f:db:bc:18:e5:38:9b:ad:6a:52:92:
         7b:f0:d1:91:09:15:c9:1c:ef:6a:c2:ab:2e:e3:f0:dc:08:25:
         c2:46:2d:50:93:68:35:70:7a:5f:d1:15:70:b6:b0:98:c0:b0:
         3d:1d:c0:22:01:c6:c9:da:ff:a9:51:e4:a4:e6:9e:6c:a4:95:
         48:aa:0a:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLHD1s9Ey/575/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRhNjQ4MTMtOGNkOC00ZmM2LTg2OGUtZGYyNTZkZTBi
ZDhlMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
NDliYjA3ZTUtNTc2My00YTgzLWIxYTEtMjhjODFjNjZkYzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkETgFAFxTaJIWaUNvnoBgYittz3/iCY/XxPb
3M+r/IAWVUO7XKpRufqaX/iDjVtpL9EpndHJCqNDsNW7E016O15FqOQZDYr8tCXt
n4EFTFxBt57EUThemOoAMdnYxOtkiwKqGT37dy5t+fdFL67ameLmB3zQ0GmhH5Lv
MVA7VXKP2cwXnTwXJEHpJ7T68AD3IXbCTBcNbCri7NZGoLM8rR1e5psY3EQCt43a
j9tzVxxy1xwjzTzh9BbTb4eRlYGFAoIXsaGTDul06ENXvdBJr+1KVJxzA1cYKV++
IwKGoJvxBmC9bmepEW3Vx3seH8VjNLwSuUOpTUpEl0vt+Ovl4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFoXnykoQ5FVWmcC5PUfMKqvr4NrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZGE2
NDgxMy04Y2Q4LTRmYzYtODY4ZS1kZjI1NmRlMGJkOGUvZTgwMjZlNmYtZmM5Ny0z
NTc0LWJiMzktYjg2MWI1YTdjNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWRhNjQ4MTMtOGNkOC00ZmM2LTg2
OGUtZGYyNTZkZTBiZDhlL2FkYTY0ODEzLThjZDgtNGZjNi04NjhlLWRmMjU2ZGUw
YmQ4ZS5jcmwwHwYDVR0jBBgwFoAU+kQodNOoDeBIfj9O8srvVw0t5owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hZGE2NDgxMy04Y2Q4LTRmYzYtODY4ZS1kZjI1
NmRlMGJkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwFBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRsvgHV7ZWjwjSSzh7JLACY7Cbem8BnA32EPdVhodZalmwVJMMRsqPQ
h6bdkK2wnezyGh4z4kNHkBK+cej0bh8yRMjTpyZtvjRFbr+UJZEQNq5oCoJiRvaJ
8v512YjYcC284lLHd5bdjwBx6vzIi2+DtVk1p/gpRr7NbW/3LC2VjtYJWav/0dxc
rAl+uqQLDF1QSZlGLQor1Gklr+PM60y72JkfmlkbhKk+MSqWcrFP6wjC5bTsJL22
czQP27wY5TibrWpSknvw0ZEJFckc72rCqy7j8NwIJcJGLVCTaDVwel/RFXC2sJjA
sD0dwCIBxsna/6lR5KTmnmyklUiqCvM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:22 2025 by rpki-client