Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/e65865d4-5f44-3316-802f-7aa0ec28365b.roa
File:                     e65865d4-5f44-3316-802f-7aa0ec28365b.roa (raw, json)
Hash identifier:          47Zq9U2TIW1fdsHYYIBIlymOq3JBlid1QwTxDD6NcZk=
Subject key identifier:   56:1F:93:DF:39:1E:1F:BF:B0:0E:3E:2E:3E:49:D5:4A:84:F0:97:83
Certificate issuer:       /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d
Certificate serial:       010D0C9F432858496A199EE3D9B195370CCA9B20
Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/e65865d4-5f44-3316-802f-7aa0ec28365b.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     62915
IP address blocks:        72.172.76.0/22 maxlen: 22
                          137.83.30.0/24 maxlen: 24
                          141.193.194.0/23 maxlen: 23
                          161.38.254.0/24 maxlen: 24
                          185.147.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:9e:e3:d9:b1:95:37:0c:ca:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=62478b8b-ee0a-4dbf-bcee-70859a1e2390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:19:39:c0:70:7a:a6:ad:c4:85:67:be:a4:
                    05:3b:19:b1:95:bb:35:b2:37:26:18:c7:e9:16:04:
                    42:3e:0b:0f:90:a3:87:5a:62:9c:e2:91:fb:0b:0a:
                    b5:1a:bd:e2:21:d8:8d:79:3d:80:e7:b7:22:38:5a:
                    57:4a:a5:f5:17:13:23:62:73:f5:c0:bc:9b:1d:18:
                    38:95:b9:09:8b:1c:cf:c9:e5:34:30:b7:90:a8:e9:
                    3d:3f:13:c3:a5:7a:31:df:0e:87:c4:8d:e5:b6:72:
                    af:53:ac:b1:78:06:28:b7:a2:f6:4c:11:02:dd:c0:
                    74:dc:ed:d4:f7:0a:3a:f0:c8:ca:ed:eb:c3:43:c7:
                    62:00:43:9a:7d:05:2e:08:08:58:ec:54:c4:9a:4e:
                    03:66:29:e7:b8:93:b6:7c:88:09:cc:08:b9:49:c5:
                    88:b7:5f:1a:58:95:df:40:e9:ff:c2:61:9d:80:eb:
                    01:8d:81:32:7d:dd:4e:d2:3f:8b:ad:07:f2:46:69:
                    1b:28:10:0d:21:30:78:03:8c:69:ae:a4:e6:94:15:
                    f6:89:51:eb:99:a2:0b:e7:38:d5:0e:6a:0a:4c:e7:
                    1f:ce:d0:f9:bc:67:d7:d6:aa:19:56:bf:1e:60:a1:
                    8c:f8:6b:91:b2:0d:ed:0b:e6:12:7b:ab:42:c0:8a:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1F:93:DF:39:1E:1F:BF:B0:0E:3E:2E:3E:49:D5:4A:84:F0:97:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/e65865d4-5f44-3316-802f-7aa0ec28365b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl

            X509v3 Authority Key Identifier:
                keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.172.76.0/22
                  137.83.30.0/24
                  141.193.194.0/23
                  161.38.254.0/24
                  185.147.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:63:17:18:fd:9d:e1:3d:a0:75:43:1a:c3:9d:61:50:a2:4e:
         ab:2d:92:30:b3:37:92:4c:e4:0c:1a:f8:c5:c0:2c:63:b0:93:
         a4:71:20:13:fc:91:4d:38:94:bd:c4:a1:02:ac:9d:91:d7:4b:
         ec:58:2a:7c:34:d5:34:10:29:dc:be:a2:80:0b:53:20:2f:d1:
         b6:f6:7d:da:ef:0c:1e:4a:5e:16:f7:1e:c8:4e:3e:aa:85:ea:
         d5:d4:1f:4e:fa:bc:ab:36:c4:30:6b:08:9f:2b:38:4d:89:60:
         0a:4a:b6:14:75:22:45:c6:c9:14:d3:cd:c6:ab:c5:2c:f8:87:
         cc:fa:d9:b3:55:ef:20:7b:0f:ff:db:d7:af:95:98:02:6e:c3:
         d9:8b:80:66:d2:89:cb:cd:4f:c0:77:ab:9a:0b:03:9f:62:45:
         c7:71:5e:ff:74:43:57:a5:c6:52:3c:c3:93:05:74:01:ca:dd:
         01:8d:b0:5e:60:82:ed:21:6d:01:3d:7e:0c:52:da:f5:bd:91:
         d2:d2:ed:33:0b:f0:93:a6:ee:bb:06:85:a5:df:8c:9c:ea:0c:
         09:52:e9:d5:2c:82:fa:c6:d6:c9:70:7d:40:90:ea:31:50:75:
         33:74:40:ce:74:db:ca:f9:c0:c0:ba:13:5f:c6:1f:f5:e0:e3:
         a1:f5:73:e1
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWElqGZ7j2bGVNwzKmyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm
NzBkMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
NjI0NzhiOGItZWUwYS00ZGJmLWJjZWUtNzA4NTlhMWUyMzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EgZOcBweqatxIVnvqQFOxmxlbs1sjcmGMfp
FgRCPgsPkKOHWmKc4pH7Cwq1Gr3iIdiNeT2A57ciOFpXSqX1FxMjYnP1wLybHRg4
lbkJixzPyeU0MLeQqOk9PxPDpXox3w6HxI3ltnKvU6yxeAYot6L2TBEC3cB03O3U
9wo68MjK7evDQ8diAEOafQUuCAhY7FTEmk4DZinnuJO2fIgJzAi5ScWIt18aWJXf
QOn/wmGdgOsBjYEyfd1O0j+LrQfyRmkbKBANITB4A4xprqTmlBX2iVHrmaIL5zjV
DmoKTOcfztD5vGfX1qoZVr8eYKGM+GuRsg3tC+YSe6tCwIqU4wIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFFYfk985Hh+/sA4+Lj5J1UqE8JeDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz
ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvZTY1ODY1ZDQtNWY0NC0z
MzE2LTgwMmYtN2FhMGVjMjgzNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm
OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm
ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4
ZGRhZmY3MGQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCSKxMAwQA
iVMeAwQBjcHCAwQAoSb+AwQCuZPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABNjFxj9neE9oHVDGsOdYVCi
TqstkjCzN5JM5Awa+MXALGOwk6RxIBP8kU04lL3EoQKsnZHXS+xYKnw01TQQKdy+
ooALUyAv0bb2fdrvDB5KXhb3HshOPqqF6tXUH076vKs2xDBrCJ8rOE2JYApKthR1
IkXGyRTTzcarxSz4h8z62bNV7yB7D//b16+VmAJuw9mLgGbSicvNT8B3q5oLA59i
RcdxXv90Q1elxlI8w5MFdAHK3QGNsF5ggu0hbQE9fgxS2vW9kdLS7TML8JOm7rsG
haXfjJzqDAlS6dUsgvrG1slwfUCQ6jFQdTN0QM5028r5wMC6E1/GH/Xg46H1c+E=
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:10:36 2025 by rpki-client