Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/f1b9d21d-75fb-3eed-8aed-68c9d7d28258.roa
File:                     f1b9d21d-75fb-3eed-8aed-68c9d7d28258.roa (raw, json)
Hash identifier:          lwS93A080Qyids6wDO9+ei9+9kvj6Q6Yhmfgvb/8P48=
Subject key identifier:   F7:87:44:8F:45:25:4C:4D:13:51:98:11:3C:F3:29:ED:77:CF:6E:8C
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F43285848ED68961042FCBB86720D1E40
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/f1b9d21d-75fb-3eed-8aed-68c9d7d28258.roa
Signing time:             Tue 18 Feb 2025 21:04:10 +0000
ROA not before:           Tue 18 Feb 2025 21:04:10 +0000
ROA not after:            Mon 19 May 2025 20:04:10 +0000
asID:                     2615
IP address blocks:        147.1.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ed:68:96:10:42:fc:bb:86:72:0d:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Feb 18 21:04:10 2025 GMT
            Not After : May 19 20:04:10 2025 GMT
        Subject: CN=dd813a17-9608-4f40-bce4-2bb74b5a0e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:6d:bd:34:4a:2e:4c:0e:9e:48:ac:a9:da:
                    92:0d:6c:44:a2:75:50:d4:ec:19:bf:3b:8c:3f:d9:
                    3f:be:de:c7:45:cb:a5:85:87:1d:00:a1:c4:28:b7:
                    fa:4f:da:58:72:1f:e1:13:9a:b4:af:c9:1e:be:db:
                    6f:d9:b1:06:0c:06:07:f0:9a:eb:4b:e7:38:83:b4:
                    9b:9a:7f:af:cc:40:21:58:d1:1a:db:e1:7e:ce:a5:
                    b7:e6:de:ac:38:62:28:e4:2a:e3:18:75:c0:73:4e:
                    11:25:b7:bc:7b:5b:19:5a:f1:7c:b5:74:48:3e:b0:
                    64:5a:a4:7b:25:2e:37:2b:e3:fd:48:ae:ed:8d:83:
                    b1:88:77:65:7b:23:c8:a1:e7:94:2c:58:ad:28:35:
                    aa:a2:35:14:24:13:40:07:06:33:c2:4f:0e:a1:11:
                    44:67:ac:a6:1c:6b:8c:d0:55:c0:29:06:50:f0:11:
                    aa:03:60:b6:4d:86:98:44:fa:d2:38:50:c5:47:ea:
                    11:73:bd:b9:5e:b3:ac:a0:38:cc:89:83:1f:c6:8a:
                    19:ca:57:54:06:39:d3:5c:5f:32:0a:d9:b1:62:c2:
                    cc:d9:a7:b7:9a:6c:82:3b:35:75:ff:c4:c1:54:10:
                    48:fd:d6:31:af:44:7b:33:66:52:60:31:4e:3e:da:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:87:44:8F:45:25:4C:4D:13:51:98:11:3C:F3:29:ED:77:CF:6E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/f1b9d21d-75fb-3eed-8aed-68c9d7d28258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c9:73:c4:53:9f:cd:47:ee:51:b9:90:cc:f0:0f:cd:3d:d1:
         a8:0b:e8:b9:29:2e:a3:5c:b2:2b:e0:c6:e4:c0:ad:09:6a:ab:
         40:07:68:e5:cf:d9:31:12:ca:fa:f7:46:aa:86:53:9a:52:f1:
         45:93:91:56:e8:e9:16:85:1e:c8:3b:5f:67:ef:80:66:1c:13:
         e3:a0:64:36:d5:6f:d4:e8:ce:a8:56:e2:a3:fa:19:44:4e:7f:
         a1:8a:8c:14:b8:e5:4a:7d:e3:19:3b:5f:c2:03:be:88:c2:ac:
         4f:7e:37:08:7d:9f:d9:de:0b:38:c9:b0:59:27:69:ea:eb:1c:
         ea:23:c4:24:7f:2e:ff:db:47:bc:51:da:70:95:7a:e2:62:ae:
         42:5f:0c:19:2c:93:4b:ad:3a:ef:27:27:56:47:f6:16:ad:c5:
         50:da:3e:18:5a:21:0a:46:94:8a:d3:a9:cf:31:bb:e9:ff:89:
         dd:e9:aa:70:8f:e7:a8:98:3c:63:84:f2:91:3e:db:ce:5a:dc:
         cd:fb:a9:16:ad:d6:fb:db:f5:e0:36:27:b7:70:d7:67:88:88:
         93:0f:01:56:2b:44:6f:29:7f:df:5f:60:01:0d:aa:8b:79:6b:
         53:df:cb:43:10:64:27:43:80:20:bb:98:fe:c4:a7:46:51:0d:
         96:d0:11:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtaJYQQvy7hnINHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI1MDIxODIxMDQxMFoXDTI1MDUxOTIwMDQxMFowLzEtMCsGA1UEAxMk
ZGQ4MTNhMTctOTYwOC00ZjQwLWJjZTQtMmJiNzRiNWEwZTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ERtvTRKLkwOnkisqdqSDWxEonVQ1OwZvzuM
P9k/vt7HRculhYcdAKHEKLf6T9pYch/hE5q0r8kevttv2bEGDAYH8JrrS+c4g7Sb
mn+vzEAhWNEa2+F+zqW35t6sOGIo5CrjGHXAc04RJbe8e1sZWvF8tXRIPrBkWqR7
JS43K+P9SK7tjYOxiHdleyPIoeeULFitKDWqojUUJBNABwYzwk8OoRFEZ6ymHGuM
0FXAKQZQ8BGqA2C2TYaYRPrSOFDFR+oRc725XrOsoDjMiYMfxooZyldUBjnTXF8y
CtmxYsLM2ae3mmyCOzV1/8TBVBBI/dYxr0R7M2ZSYDFOPtrCtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPeHRI9FJUxNE1GYETzzKe13z26MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZjFiOWQyMWQtNzVmYi0z
ZWVkLThhZWQtNjhjOWQ3ZDI4MjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwELMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvJc8RTn81H7lG5kMzwD8090agL6LkpLqNcsivgxuTArQlqq0AHaOXP
2TESyvr3RqqGU5pS8UWTkVbo6RaFHsg7X2fvgGYcE+OgZDbVb9TozqhW4qP6GURO
f6GKjBS45Up94xk7X8IDvojCrE9+Nwh9n9neCzjJsFknaerrHOojxCR/Lv/bR7xR
2nCVeuJirkJfDBksk0utOu8nJ1ZH9hatxVDaPhhaIQpGlIrTqc8xu+n/id3pqnCP
56iYPGOE8pE+285a3M37qRat1vvb9eA2J7dw12eIiJMPAVYrRG8pf99fYAENqot5
a1Pfy0MQZCdDgCC7mP7Ep0ZRDZbQEes=
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:20:42 2025 by rpki-client