Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/140b9f38-48bb-33cf-814c-8089951577e2.roa
File:                     140b9f38-48bb-33cf-814c-8089951577e2.roa (raw, json)
Hash identifier:          ywtWqe3OkEaA7sASxxxMsOF7hawFEUKyHa5D/Edp1QU=
Subject key identifier:   25:0F:E1:9A:5F:93:75:14:AF:9D:4F:B2:2C:6A:C4:58:DF:20:AF:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150E75BA2EEEF210FD08240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/140b9f38-48bb-33cf-814c-8089951577e2.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.194.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:e7:5b:a2:ee:ef:21:0f:d0:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=5244bc16-da66-448b-a645-c73aa80ef4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:61:f3:b4:31:37:b2:d4:b2:0d:a1:2b:6c:
                    12:a0:bb:52:e7:da:35:7b:97:98:c1:e3:d6:6c:b8:
                    e6:c1:a1:9a:d8:07:e7:a8:62:a1:25:7f:f1:1e:18:
                    bd:e0:ea:b6:0b:98:86:08:14:1f:89:59:98:ce:be:
                    b6:39:d1:04:4c:8f:c6:41:ed:d9:4c:b4:af:45:0a:
                    1a:9d:04:27:8b:c4:68:e0:55:ac:c0:0b:8d:9b:88:
                    cc:e0:c6:59:e7:b7:13:21:3b:d3:b2:d2:3f:b5:32:
                    da:9e:ca:56:a5:3e:fe:31:db:cf:44:62:63:60:85:
                    90:9f:e2:e4:de:63:3f:d9:57:ff:f4:d3:d0:26:5a:
                    fc:ef:62:4f:68:a9:98:46:18:d2:c7:56:2b:90:dd:
                    68:3d:48:1d:46:06:64:52:77:af:82:58:2b:87:fe:
                    b6:72:e7:5c:37:60:b1:0c:46:9a:24:46:2d:a1:83:
                    c0:91:e2:7b:a7:a4:df:7d:f4:06:ff:8b:ed:f2:77:
                    85:80:9a:09:2a:9f:89:12:90:14:1d:8f:56:a0:4a:
                    47:7c:bd:67:1f:a4:6e:4d:87:86:5a:2c:a2:2a:ec:
                    be:44:5e:7a:07:62:75:be:74:09:42:f3:85:2a:47:
                    bf:76:21:d7:e6:c0:b3:da:fe:99:03:e4:1c:29:42:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0F:E1:9A:5F:93:75:14:AF:9D:4F:B2:2C:6A:C4:58:DF:20:AF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/140b9f38-48bb-33cf-814c-8089951577e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.194.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:35:77:ff:03:11:ce:c8:b5:00:df:4a:e1:a0:81:84:b2:7b:
         f7:72:1f:eb:f9:1a:52:5c:98:b9:6e:05:2e:c1:b9:a3:2d:f0:
         c4:42:3f:58:7f:83:0c:21:b8:df:3e:3a:3d:6e:af:8f:d2:8e:
         5d:8b:a0:65:78:c9:a3:64:87:78:31:02:99:72:db:00:9d:d6:
         17:b1:2a:d6:d9:c1:f9:1a:2a:7e:06:8d:bd:32:55:0c:b7:71:
         6d:dd:eb:42:9e:c7:b6:ce:6c:d7:22:c6:ab:1f:c7:33:62:17:
         a7:5b:1d:38:2a:a4:88:72:6a:37:64:19:0b:d7:f5:5a:de:15:
         0b:42:20:22:f7:b8:64:d8:d4:cf:90:11:dc:51:ba:5a:07:e6:
         70:64:55:3d:fa:bc:c2:ef:fa:51:3e:d2:4c:cc:74:a3:98:ec:
         6f:f5:8e:aa:ae:28:37:72:b0:fe:fe:df:63:4d:b6:a9:1b:30:
         57:b5:32:13:a2:10:87:1a:ca:6e:e1:57:63:76:69:c4:f3:98:
         93:7d:f7:de:12:79:80:58:81:ca:df:61:74:a5:08:e3:68:b0:
         8b:67:2a:53:80:cb:57:bc:52:b1:71:9b:57:f9:f2:8e:61:da:
         bf:7d:0a:0a:dd:79:61:f2:15:c0:3c:41:c0:b1:ec:7e:61:d9:
         74:5b:67:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOdbou7vIQ/QgkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NTI0NGJjMTYtZGE2Ni00NDhiLWE2NDUtYzczYWE4MGVmNGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup5h87QxN7LUsg2hK2wSoLtS59o1e5eYwePW
bLjmwaGa2AfnqGKhJX/xHhi94Oq2C5iGCBQfiVmYzr62OdEETI/GQe3ZTLSvRQoa
nQQni8Ro4FWswAuNm4jM4MZZ57cTITvTstI/tTLanspWpT7+MdvPRGJjYIWQn+Lk
3mM/2Vf/9NPQJlr872JPaKmYRhjSx1YrkN1oPUgdRgZkUnevglgrh/62cudcN2Cx
DEaaJEYtoYPAkeJ7p6TfffQG/4vt8neFgJoJKp+JEpAUHY9WoEpHfL1nH6RuTYeG
WiyiKuy+RF56B2J1vnQJQvOFKke/diHX5sCz2v6ZA+QcKUJOgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUP4Zpfk3UUr51PsixqxFjfIK8sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTQwYjlmMzgtNDhiYi0z
M2NmLTgxNGMtODA4OTk1MTU3N2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQ1d/8DEc7ItQDfSuGggYSye/dyH+v5GlJcmLluBS7BuaMt8MRCP1h/
gwwhuN8+Oj1ur4/Sjl2LoGV4yaNkh3gxAply2wCd1hexKtbZwfkaKn4Gjb0yVQy3
cW3d60Kex7bObNcixqsfxzNiF6dbHTgqpIhyajdkGQvX9VreFQtCICL3uGTY1M+Q
EdxRuloH5nBkVT36vMLv+lE+0kzMdKOY7G/1jqquKDdysP7+32NNtqkbMFe1MhOi
EIcaym7hV2N2acTzmJN9994SeYBYgcrfYXSlCONosItnKlOAy1e8UrFxm1f58o5h
2r99CgrdeWHyFcA8QcCx7H5h2XRbZz4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:10:49 2025 by rpki-client