Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/79ffae39-c441-3349-87d3-7332a90646b3.roa
File:                     79ffae39-c441-3349-87d3-7332a90646b3.roa (raw, json)
Hash identifier:          7fXXzCCpdThePquamPR7IoUivgpHRSX/6RpCSnCc88c=
Subject key identifier:   0F:99:07:8F:15:22:CB:14:96:B6:69:C6:30:72:57:4C:D5:6D:DE:17
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F43285848ADC61382BA5AF5D6B295AFE0
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/79ffae39-c441-3349-87d3-7332a90646b3.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     393441
IP address blocks:        207.54.151.0/24 maxlen: 24
                          209.221.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:13:82:ba:5a:f5:d6:b2:95:af:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=8178ea34-55af-4378-847b-17c790fc10d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b8:17:5e:9d:ba:b4:18:e2:25:d8:c6:c1:64:
                    19:03:49:21:a0:c4:5d:bc:3c:1e:6f:ae:f9:5f:2c:
                    5b:32:28:c7:d7:2a:30:5d:25:dd:71:76:07:e2:ec:
                    d5:48:cb:bb:39:5e:f7:1f:61:cf:47:4f:78:b1:aa:
                    5e:51:90:23:c3:4f:4b:db:55:18:de:ba:b0:a2:4f:
                    dd:fd:33:3f:29:81:5b:9f:59:85:50:29:df:67:2c:
                    bb:6f:0e:b5:15:a8:e4:93:24:2d:5f:67:7b:63:82:
                    8a:5b:96:bb:e8:7f:3d:16:af:af:bf:e5:e7:19:de:
                    4a:06:36:b4:e1:23:f5:81:12:12:86:9a:af:5e:6b:
                    f9:71:4f:e1:3f:69:10:14:1a:39:96:38:1a:bf:86:
                    c7:cf:ad:8a:96:13:90:07:54:d1:13:2d:3c:df:31:
                    b4:f5:01:81:d1:b6:98:db:75:d8:5a:be:f2:23:73:
                    8f:3b:22:0f:fd:0a:c4:f4:46:b2:9c:31:09:be:4d:
                    29:1a:83:94:69:af:48:b0:a8:3b:ff:4d:a8:0c:9a:
                    6e:8b:41:a4:9d:39:06:4b:f5:dc:e4:00:a8:e6:a5:
                    50:7d:a2:3d:19:8a:1b:00:0b:f1:eb:a1:58:5a:a1:
                    75:e3:f5:3b:74:84:44:f5:ca:95:9f:10:46:4d:a2:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:99:07:8F:15:22:CB:14:96:B6:69:C6:30:72:57:4C:D5:6D:DE:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/79ffae39-c441-3349-87d3-7332a90646b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.151.0/24
                  209.221.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:27:68:76:46:1c:e8:00:6f:ee:be:68:33:2e:4f:8f:61:42:
         38:d3:56:6f:4a:3e:bd:8d:12:89:20:67:40:e0:6c:95:db:3b:
         ef:f3:12:88:55:c6:09:7c:c8:51:80:62:bd:da:67:47:48:16:
         62:ea:31:de:00:c7:56:4c:c4:9b:98:56:96:69:5d:1c:49:69:
         cb:2e:03:a9:02:12:12:d0:47:ef:65:00:b4:8c:44:3a:ca:8f:
         ec:1f:d8:13:d9:4b:30:3d:7f:e0:8a:09:95:5d:26:1f:16:48:
         3b:67:2b:f0:8e:36:14:f0:3a:1f:dd:31:ce:e0:2e:86:5d:7b:
         07:f3:91:1b:7c:f5:96:3e:e6:9a:2f:7a:bc:45:d6:8c:9a:d2:
         e6:ee:99:2a:bc:4d:03:84:c6:c0:3b:93:d2:e0:4e:a9:e0:8d:
         04:f2:d1:a0:95:62:61:6f:85:8e:41:07:06:58:9a:33:53:2c:
         45:fe:9d:10:7d:32:3d:dc:df:d9:da:2f:35:6f:c7:ca:62:f1:
         dc:71:90:db:15:e6:76:fe:1a:8c:c7:0f:a5:78:db:f3:f6:b0:
         70:1b:9b:d8:a9:9b:74:3a:90:aa:44:bf:48:76:72:96:47:35:
         d7:83:cf:f2:3b:3f:35:f8:2b:23:4c:a5:b7:a6:f3:96:bb:4e:
         23:df:7c:c3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEitxhOCulr11rKVr+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy
NTE2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
ODE3OGVhMzQtNTVhZi00Mzc4LTg0N2ItMTdjNzkwZmMxMGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bgXXp26tBjiJdjGwWQZA0khoMRdvDweb675
XyxbMijH1yowXSXdcXYH4uzVSMu7OV73H2HPR094sapeUZAjw09L21UY3rqwok/d
/TM/KYFbn1mFUCnfZyy7bw61FajkkyQtX2d7Y4KKW5a76H89Fq+vv+XnGd5KBja0
4SP1gRIShpqvXmv5cU/hP2kQFBo5ljgav4bHz62KlhOQB1TREy083zG09QGB0baY
23XYWr7yI3OPOyIP/QrE9EaynDEJvk0pGoOUaa9IsKg7/02oDJpui0GknTkGS/Xc
5ACo5qVQfaI9GYobAAvx66FYWqF14/U7dIRE9cqVnxBGTaKJQwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFA+ZB48VIssUlrZpxjByV0zVbd4XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk
M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNzlmZmFlMzktYzQ0MS0z
MzQ5LTg3ZDMtNzMzMmE5MDY0NmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl
MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1
MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1
MGQzNTI1MTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzzaXAwQB
0d0QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGInaHZGHOgAb+6+aDMuT49hQjjTVm9KPr2NEokgZ0DgbJXb
O+/zEohVxgl8yFGAYr3aZ0dIFmLqMd4Ax1ZMxJuYVpZpXRxJacsuA6kCEhLQR+9l
ALSMRDrKj+wf2BPZSzA9f+CKCZVdJh8WSDtnK/CONhTwOh/dMc7gLoZdewfzkRt8
9ZY+5poverxF1oya0ubumSq8TQOExsA7k9LgTqngjQTy0aCVYmFvhY5BBwZYmjNT
LEX+nRB9Mj3c39naLzVvx8pi8dxxkNsV5nb+GozHD6V42/P2sHAbm9ipm3Q6kKpE
v0h2cpZHNdeDz/I7PzX4KyNMpbem85a7TiPffMM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:30:02 2025 by rpki-client