Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/647f3a86-6cb1-31a2-a01e-fd555d173877.roa
File:                     647f3a86-6cb1-31a2-a01e-fd555d173877.roa (raw, json)
Hash identifier:          qdYzmiIPNs6Ol/Cptzf3TcJpujfjyXNydCubUOloV8Y=
Subject key identifier:   77:F6:E3:36:8C:A9:32:47:8D:6D:01:51:0D:18:FC:53:2A:03:C5:FC
Certificate issuer:       /CN=1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b
Certificate serial:       010D0C9F432858495ABEBA7A3461B3BA94A5CC80
Authority key identifier: 17:49:B2:BE:29:6D:3A:F6:4A:90:99:69:0B:9C:E2:8A:C5:A8:95:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/647f3a86-6cb1-31a2-a01e-fd555d173877.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     13825
IP address blocks:        64.130.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:ba:7a:34:61:b3:ba:94:a5:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=5a3011c0-5f39-4083-aebd-f080e25015b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:cb:8f:83:1b:1e:93:a6:f8:e7:8a:81:2d:
                    30:f1:d7:87:55:30:49:e9:bb:ef:ea:b2:70:79:73:
                    cb:95:70:00:31:ca:4a:08:ee:0b:e0:18:18:8a:9c:
                    45:aa:9d:9e:9e:6b:6b:0d:d8:85:c6:d0:96:94:4b:
                    63:1e:dc:89:17:c2:53:a9:1f:43:19:c6:e4:a0:02:
                    83:95:21:13:78:bc:b0:f4:ed:7f:75:f7:88:76:1b:
                    c4:69:10:7a:fe:52:ce:61:29:ad:d2:73:08:c4:74:
                    75:77:94:1f:91:70:7f:a4:e8:ec:a9:61:ab:16:f3:
                    72:ae:5e:4a:6c:3f:cd:4c:6a:28:6a:b9:37:e5:08:
                    3e:da:a8:f3:08:11:2b:e5:76:58:a9:c7:84:4c:0e:
                    6e:ae:b7:de:43:03:86:f8:9c:fd:55:55:aa:3c:8f:
                    03:24:e6:8b:36:64:0e:06:70:9d:d8:9f:97:31:b6:
                    72:b7:34:cb:c8:51:9f:22:d8:4d:ba:3d:cc:21:ac:
                    7b:b4:2b:1c:aa:83:56:be:64:4d:75:11:ea:2d:22:
                    25:7b:87:2c:4f:60:ec:70:3f:02:c3:0c:b4:f8:e4:
                    2c:38:99:36:bd:90:4c:0b:34:28:a9:5e:f2:ac:fb:
                    a6:cb:98:ba:cd:35:52:d8:c1:20:a7:77:33:47:8e:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F6:E3:36:8C:A9:32:47:8D:6D:01:51:0D:18:FC:53:2A:03:C5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/647f3a86-6cb1-31a2-a01e-fd555d173877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.crl

            X509v3 Authority Key Identifier:
                keyid:17:49:B2:BE:29:6D:3A:F6:4A:90:99:69:0B:9C:E2:8A:C5:A8:95:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f5:e1:c8:3a:a5:32:c3:d5:c4:cb:56:97:c5:e0:43:cd:15:
         cb:b1:1d:f6:69:bf:c0:0c:43:c4:e6:7a:e5:f6:76:40:1e:18:
         30:56:ef:9f:4d:c2:6a:bb:88:3b:f4:86:df:de:dd:81:65:ab:
         e2:15:ac:20:90:92:39:25:b9:1a:07:f3:ad:d1:d2:59:6b:dc:
         1c:17:4f:6c:ac:9d:d8:63:57:a3:32:17:b9:77:63:ac:8f:86:
         18:45:f4:61:74:e2:52:de:ac:c0:d5:8e:65:5d:14:f6:8b:53:
         36:96:47:4a:dc:cd:35:b5:13:9f:9f:ef:5b:b8:76:13:16:ea:
         60:f3:ae:88:4b:86:b3:7c:d8:6c:c4:db:c4:c4:d2:b3:88:25:
         35:f6:b0:0e:bb:79:be:c1:40:f7:c1:20:48:ce:82:2e:bd:36:
         00:c1:20:66:9a:45:62:14:05:bf:c0:f2:01:73:c2:09:34:ca:
         30:a2:d2:6f:0a:3d:21:9a:5c:53:87:08:c2:11:11:d0:6c:b2:
         a2:9e:a6:22:aa:2e:4a:ee:3d:77:e4:5c:9e:a3:9b:d9:96:ca:
         dd:9d:3c:67:41:f3:bf:43:7d:03:3c:d4:b9:dc:fe:55:3c:80:
         03:32:90:13:00:26:e3:18:e8:04:18:51:a7:93:e5:2f:00:ce:
         a6:b1:94:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrp6NGGzupSlzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY3YzMwMzYtYWUyZS00YzU1LWFhZGYtNmIyZjdkZjZj
YzFiMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
NWEzMDExYzAtNWYzOS00MDgzLWFlYmQtZjA4MGUyNTAxNWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLzLj4MbHpOm+OeKgS0w8deHVTBJ6bvv6rJw
eXPLlXAAMcpKCO4L4BgYipxFqp2enmtrDdiFxtCWlEtjHtyJF8JTqR9DGcbkoAKD
lSETeLyw9O1/dfeIdhvEaRB6/lLOYSmt0nMIxHR1d5QfkXB/pOjsqWGrFvNyrl5K
bD/NTGooark35Qg+2qjzCBEr5XZYqceETA5urrfeQwOG+Jz9VVWqPI8DJOaLNmQO
BnCd2J+XMbZytzTLyFGfIthNuj3MIax7tCscqoNWvmRNdRHqLSIle4csT2DscD8C
wwy0+OQsOJk2vZBMCzQoqV7yrPumy5i6zTVS2MEgp3czR4672wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHf24zaMqTJHjW0BUQ0Y/FMqA8X8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZjdj
MzAzNi1hZTJlLTRjNTUtYWFkZi02YjJmN2RmNmNjMWIvNjQ3ZjNhODYtNmNiMS0z
MWEyLWEwMWUtZmQ1NTVkMTczODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWY3YzMwMzYtYWUyZS00YzU1LWFh
ZGYtNmIyZjdkZjZjYzFiLzFmN2MzMDM2LWFlMmUtNGM1NS1hYWRmLTZiMmY3ZGY2
Y2MxYi5jcmwwHwYDVR0jBBgwFoAUF0myviltOvZKkJlpC5ziisWolYYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZjdjMzAzNi1hZTJlLTRjNTUtYWFkZi02YjJm
N2RmNmNjMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQIJgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHX14cg6pTLD1cTLVpfF4EPNFcuxHfZpv8AMQ8TmeuX2dkAeGDBW759N
wmq7iDv0ht/e3YFlq+IVrCCQkjkluRoH863R0llr3BwXT2ysndhjV6MyF7l3Y6yP
hhhF9GF04lLerMDVjmVdFPaLUzaWR0rczTW1E5+f71u4dhMW6mDzrohLhrN82GzE
28TE0rOIJTX2sA67eb7BQPfBIEjOgi69NgDBIGaaRWIUBb/A8gFzwgk0yjCi0m8K
PSGaXFOHCMIREdBssqKepiKqLkruPXfkXJ6jm9mWyt2dPGdB879DfQM81Lnc/lU8
gAMykBMAJuMY6AQYUaeT5S8AzqaxlFs=
-----END CERTIFICATE-----
Generated at Thu Apr 10 03:44:18 2025 by rpki-client