Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/309666ec-7786-32c4-9ccb-67b07a0ed4d6.roa
File:                     309666ec-7786-32c4-9ccb-67b07a0ed4d6.roa (raw, json)
Hash identifier:          NWZlyQWkqSjGoa9ftmlJtYLU/5vWwfFRQM8J29Wf274=
Subject key identifier:   B0:FD:BA:E3:73:FC:F8:38:8C:62:BE:8F:4E:61:D1:C0:D4:36:1A:7A
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285848F65BDE630A3B7F5E141AA200
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/309666ec-7786-32c4-9ccb-67b07a0ed4d6.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     3491
IP address blocks:        205.177.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:de:63:0a:3b:7f:5e:14:1a:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=b3be6827-decb-4ee3-8851-458c0f00c0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a6:c7:f6:a0:c4:ea:1c:b3:2f:29:c5:b7:0d:
                    45:f8:16:1d:3a:98:9b:6a:fe:39:04:05:59:bf:84:
                    f4:e5:e2:1b:7d:93:aa:b3:e8:54:0b:a9:95:5f:ea:
                    78:31:99:f0:ed:f2:02:a4:8e:f9:66:bf:7a:8f:76:
                    0a:09:00:8f:57:54:ce:ca:7e:04:93:9a:91:01:d1:
                    58:fb:14:2b:55:a4:37:b5:fc:52:0c:1b:30:67:3e:
                    18:cd:88:16:88:3b:49:d5:3a:a0:22:3d:36:ac:fb:
                    69:64:4e:74:b7:19:65:05:19:52:d3:cf:f8:b4:70:
                    fc:7a:ac:0b:b4:27:cc:6f:ff:b6:63:04:a5:27:b9:
                    3e:25:f9:98:4a:9e:fc:be:a8:76:7d:13:02:1d:2e:
                    6b:3a:62:59:83:b3:c0:90:bd:d2:e5:27:34:37:a0:
                    5c:e3:20:de:4b:2e:cb:72:53:a1:e8:ba:f9:6c:ec:
                    90:71:bd:b1:5c:24:46:96:bb:b0:9b:b2:a4:ac:28:
                    a8:59:1e:9e:c4:ff:80:a4:c2:64:1d:04:eb:e4:52:
                    e3:c0:8c:2e:15:ed:5e:fa:58:c5:41:c8:98:31:a0:
                    6a:04:4d:39:3e:bb:55:6e:ba:60:65:97:4d:e4:fb:
                    59:11:a1:a2:c9:72:0c:a6:8f:e8:f9:eb:53:97:d8:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FD:BA:E3:73:FC:F8:38:8C:62:BE:8F:4E:61:D1:C0:D4:36:1A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/309666ec-7786-32c4-9ccb-67b07a0ed4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:13:95:64:cf:24:b1:e9:23:f2:a7:4e:8b:dd:32:38:f5:
         76:97:7c:d5:84:be:05:8d:3a:65:5a:00:3b:bf:f2:3c:2a:32:
         5c:61:1c:54:11:0a:a5:06:d7:4e:4a:0e:dd:7f:bf:c3:79:a4:
         04:95:af:44:e1:d0:2b:39:63:e0:52:5f:67:4d:4d:03:71:bc:
         dc:7d:63:d4:74:a2:88:4c:51:2d:06:c7:a3:6c:b1:29:bd:38:
         84:94:be:34:56:14:e0:dc:79:dc:26:3d:51:16:24:53:f7:52:
         7d:61:bf:dd:0a:18:e9:d2:da:e9:59:03:8a:17:c2:fb:ab:a2:
         60:46:8f:79:20:ee:7f:19:83:13:6b:90:73:e6:ad:5f:a9:cf:
         5f:bb:b3:ca:8d:14:39:97:03:c2:2b:94:8b:67:d9:4c:2c:93:
         77:fd:09:2b:df:aa:5f:e5:a4:c0:e0:64:c6:e6:83:43:02:3e:
         08:99:f2:3b:b1:67:e0:a6:da:f6:f5:81:35:6f:db:e5:d0:22:
         cd:17:b8:9d:55:9d:77:14:3b:ca:86:45:a2:bf:6d:6c:e4:af:
         60:e7:98:36:7d:85:b7:24:a9:f7:44:e2:85:7e:47:c6:b9:4f:
         39:98:60:a8:da:c3:9c:a3:8e:00:d7:b5:8c:11:da:91:aa:80:
         ef:33:47:ec
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEj2W95jCjt/XhQaogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
YjNiZTY4MjctZGVjYi00ZWUzLTg4NTEtNDU4YzBmMDBjMGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKbH9qDE6hyzLynFtw1F+BYdOpibav45BAVZ
v4T05eIbfZOqs+hUC6mVX+p4MZnw7fICpI75Zr96j3YKCQCPV1TOyn4Ek5qRAdFY
+xQrVaQ3tfxSDBswZz4YzYgWiDtJ1TqgIj02rPtpZE50txllBRlS08/4tHD8eqwL
tCfMb/+2YwSlJ7k+JfmYSp78vqh2fRMCHS5rOmJZg7PAkL3S5Sc0N6Bc4yDeSy7L
clOh6Lr5bOyQcb2xXCRGlruwm7KkrCioWR6exP+ApMJkHQTr5FLjwIwuFe1e+ljF
QciYMaBqBE05PrtVbrpgZZdN5PtZEaGiyXIMpo/o+etTl9gqJQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLD9uuNz/Pg4jGK+j05h0cDUNhp6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMzA5NjY2ZWMtNzc4Ni0z
MmM0LTljY2ItNjdiMDdhMGVkNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzbEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATOsTlWTPJLHpI/KnTovdMjj1dpd81YS+BY06ZVoAO7/yPCoyXGEcVBEK
pQbXTkoO3X+/w3mkBJWvROHQKzlj4FJfZ01NA3G83H1j1HSiiExRLQbHo2yxKb04
hJS+NFYU4Nx53CY9URYkU/dSfWG/3QoY6dLa6VkDihfC+6uiYEaPeSDufxmDE2uQ
c+atX6nPX7uzyo0UOZcDwiuUi2fZTCyTd/0JK9+qX+WkwOBkxuaDQwI+CJnyO7Fn
4Kba9vWBNW/b5dAizRe4nVWddxQ7yoZFor9tbOSvYOeYNn2FtySp90TihX5HxrlP
OZhgqNrDnKOOANe1jBHakaqA7zNH7A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:06 2025 by rpki-client