Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/a2cdf4a7-3e58-357c-97b2-1f424ef59ff2.roa
File:                     a2cdf4a7-3e58-357c-97b2-1f424ef59ff2.roa (raw, json)
Hash identifier:          XbnpMMBnhC7HnHjU8iQDICLRN4PGqU6kr8ZovHnadUs=
Subject key identifier:   CB:D7:14:97:B9:97:5E:FA:60:13:3E:71:17:63:C5:08:43:DD:E0:12
Certificate issuer:       /CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Certificate serial:       010D0C9F432858489EAAEFA4E070587BF7DEC280
Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/a2cdf4a7-3e58-357c-97b2-1f424ef59ff2.roa
Signing time:             Tue 21 Jan 2025 16:09:01 +0000
ROA not before:           Tue 21 Jan 2025 16:09:01 +0000
ROA not after:            Mon 21 Apr 2025 15:09:01 +0000
asID:                     199058
IP address blocks:        91.239.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:aa:ef:a4:e0:70:58:7b:f7:de:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1
        Validity
            Not Before: Jan 21 16:09:01 2025 GMT
            Not After : Apr 21 15:09:01 2025 GMT
        Subject: CN=48896ed2-afbc-40bb-b1a7-215eb29316dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:61:b4:95:f1:5b:29:9c:00:e1:77:d6:82:
                    ec:64:3a:06:7e:02:ba:f0:b0:29:f6:8a:68:a9:2f:
                    9c:3a:61:48:17:0b:61:78:f7:3c:0a:ba:49:7e:bf:
                    9a:e4:2b:3f:aa:dc:66:35:95:d8:a6:63:6d:c4:8d:
                    b7:f4:e5:38:d2:a5:c3:09:f5:3b:c4:34:3b:9c:4c:
                    0e:cf:9e:12:39:44:46:e7:a7:5d:bc:47:19:75:58:
                    34:5f:cd:b3:05:77:63:1c:60:c2:4b:fc:42:ab:5c:
                    5e:8f:e9:3e:81:53:6e:09:b8:81:f1:b8:47:f8:f5:
                    79:5f:2e:9b:df:99:2e:f2:17:f0:db:64:4c:0e:62:
                    0b:b1:ed:b8:f0:be:e4:78:07:01:05:95:fd:27:32:
                    e2:7a:62:fe:1f:c9:81:7e:a9:13:47:ba:24:50:d0:
                    0f:82:f5:81:c0:c8:d4:aa:5e:18:e9:34:87:73:0c:
                    41:51:db:f2:fc:05:3a:3b:3e:bb:3a:38:98:aa:f6:
                    42:37:a9:06:7f:40:8c:76:dc:9a:21:dc:a5:73:b8:
                    bb:b3:0a:a6:c4:ec:0f:a7:74:c6:c0:b5:c0:9b:ad:
                    3f:10:a7:cf:ff:24:62:3c:72:3b:e3:a1:7f:e5:58:
                    65:54:a6:f0:9e:68:85:ec:3c:4f:73:06:05:16:d2:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D7:14:97:B9:97:5E:FA:60:13:3E:71:17:63:C5:08:43:DD:E0:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/a2cdf4a7-3e58-357c-97b2-1f424ef59ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl

            X509v3 Authority Key Identifier:
                keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:52:b5:90:69:3c:47:fc:bb:6b:29:b4:3a:e8:f0:c8:ff:83:
         a4:4a:d7:e6:a0:48:db:a0:b2:60:7b:25:05:dd:74:40:46:b0:
         00:bd:ca:db:d9:c9:14:9f:c8:75:72:ef:c8:c2:08:af:d6:5d:
         d2:b3:6f:fe:ac:0b:99:18:5b:43:9f:73:b6:e3:9a:ed:8f:fe:
         33:99:7f:cc:fa:b3:49:53:58:8c:6a:1d:1b:4a:4c:90:d9:12:
         ec:63:f5:b4:c6:ab:ba:10:62:18:9a:d6:f0:50:ab:82:0e:dc:
         ce:ed:77:7e:b8:95:df:35:25:ef:46:fe:98:97:b0:66:14:c1:
         b0:70:72:7f:8a:a6:82:1a:4d:f2:64:54:df:78:3d:8e:c0:5c:
         e2:32:20:ca:de:c6:36:81:51:c9:a7:d5:6c:57:c5:0b:e6:3b:
         ce:ed:b5:34:59:15:c7:d5:05:a1:44:fb:41:50:20:09:81:78:
         0e:ce:7d:72:16:11:c8:d3:ef:6f:17:33:c1:55:b8:53:70:0c:
         d1:95:10:69:3b:76:76:ec:dc:40:e4:8a:47:07:b9:be:d6:f1:
         6d:8c:16:68:73:5c:a8:03:45:b5:2a:01:96:a2:e7:22:83:9f:
         e9:6e:ed:d4:2e:b6:4b:41:06:a4:12:72:68:8f:d6:59:39:71:
         12:f3:7d:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiequ+k4HBYe/fewoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNjMTRkYzQtNjc2OC00M2MxLTlkOTUtYzg5YTU1MjAy
MGMxMB4XDTI1MDEyMTE2MDkwMVoXDTI1MDQyMTE1MDkwMVowLzEtMCsGA1UEAxMk
NDg4OTZlZDItYWZiYy00MGJiLWIxYTctMjE1ZWIyOTMxNmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0JhtJXxWymcAOF31oLsZDoGfgK68LAp9opo
qS+cOmFIFwthePc8CrpJfr+a5Cs/qtxmNZXYpmNtxI239OU40qXDCfU7xDQ7nEwO
z54SOURG56ddvEcZdVg0X82zBXdjHGDCS/xCq1xej+k+gVNuCbiB8bhH+PV5Xy6b
35ku8hfw22RMDmILse248L7keAcBBZX9JzLiemL+H8mBfqkTR7okUNAPgvWBwMjU
ql4Y6TSHcwxBUdvy/AU6Oz67OjiYqvZCN6kGf0CMdtyaIdylc7i7swqmxOwPp3TG
wLXAm60/EKfP/yRiPHI746F/5VhlVKbwnmiF7DxPcwYFFtJ+mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvXFJe5l176YBM+cRdjxQhD3eASMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hY2Mx
NGRjNC02NzY4LTQzYzEtOWQ5NS1jODlhNTUyMDIwYzEvYTJjZGY0YTctM2U1OC0z
NTdjLTk3YjItMWY0MjRlZjU5ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWNjMTRkYzQtNjc2OC00M2MxLTlk
OTUtYzg5YTU1MjAyMGMxL2FjYzE0ZGM0LTY3NjgtNDNjMS05ZDk1LWM4OWE1NTIw
MjBjMS5jcmwwHwYDVR0jBBgwFoAUIuC90W13RbxlN/JAwkXcP6qjhiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hY2MxNGRjNC02NzY4LTQzYzEtOWQ5NS1jODlh
NTUyMDIwYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW++UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFStZBpPEf8u2sptDro8Mj/g6RK1+agSNugsmB7JQXddEBGsAC9ytvZ
yRSfyHVy78jCCK/WXdKzb/6sC5kYW0Ofc7bjmu2P/jOZf8z6s0lTWIxqHRtKTJDZ
Euxj9bTGq7oQYhia1vBQq4IO3M7td364ld81Je9G/piXsGYUwbBwcn+KpoIaTfJk
VN94PY7AXOIyIMrexjaBUcmn1WxXxQvmO87ttTRZFcfVBaFE+0FQIAmBeA7OfXIW
EcjT728XM8FVuFNwDNGVEGk7dnbs3EDkikcHub7W8W2MFmhzXKgDRbUqAZai5yKD
n+lu7dQutktBBqQScmiP1lk5cRLzfW8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:12 2025 by rpki-client