Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d7a0c3f-4769-3117-a8c1-ed57f37173f9.roa
File:                     2d7a0c3f-4769-3117-a8c1-ed57f37173f9.roa (raw, json)
Hash identifier:          def8Tzz8SnqNPCXacXO3KAGzW9MKGQzHbUtzd/24qoM=
Subject key identifier:   76:93:38:02:51:22:91:FF:1D:4B:32:94:65:30:F2:BC:BA:B4:B4:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858496484682DF2FCB04DFD9B4900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d7a0c3f-4769-3117-a8c1-ed57f37173f9.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.241.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:68:2d:f2:fc:b0:4d:fd:9b:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=6f42e791-2cc3-4f46-a675-0e608a0a4139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f0:f4:b7:7d:bc:7e:1c:c5:e3:c1:08:35:c0:
                    57:ce:95:78:4a:54:7b:70:02:5e:52:13:58:dd:19:
                    f7:13:32:f5:dd:11:6b:ae:e3:3f:79:de:e9:8e:b9:
                    3f:61:94:f5:bf:eb:06:14:6c:5d:c8:e2:6c:f2:b5:
                    b7:33:f9:e4:99:ca:4d:89:83:98:b2:da:2b:ba:21:
                    c1:0c:f2:82:fa:ae:64:62:99:7a:2b:73:30:a6:56:
                    ba:2e:fa:5d:1d:69:7e:86:3f:a1:0c:5d:c1:4e:08:
                    d3:57:08:14:74:f2:7e:32:f0:72:57:cc:6c:3a:78:
                    de:5d:fe:0a:bb:e8:c6:72:ee:f0:d3:f8:8a:60:34:
                    01:fb:e1:37:6f:41:f2:a1:36:ea:ef:19:ea:2f:7f:
                    d0:35:b6:76:95:ed:bb:68:6c:a9:b6:42:43:b6:a5:
                    76:05:a8:66:65:9e:9d:4e:25:42:33:ee:a8:da:23:
                    9b:d3:f4:ef:93:b2:42:de:44:ed:de:24:87:ab:b2:
                    21:e4:a0:c4:59:4b:82:a7:f1:22:73:08:54:4d:e2:
                    5b:38:7b:81:d7:11:79:7e:0a:a0:fa:47:0c:b4:77:
                    be:2b:50:9d:fb:cc:e7:0a:86:f7:eb:77:64:84:51:
                    99:ac:d4:5c:b5:48:e7:15:ca:e6:3b:c0:4f:87:fa:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:93:38:02:51:22:91:FF:1D:4B:32:94:65:30:F2:BC:BA:B4:B4:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d7a0c3f-4769-3117-a8c1-ed57f37173f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d0:03:bb:36:dc:4f:67:a8:66:84:fa:59:55:a2:01:12:86:
         81:04:a5:94:51:61:e3:93:ef:70:7c:44:15:9f:b6:ab:02:c3:
         7e:10:c2:5e:1b:d0:0b:1f:f6:d0:e5:42:de:d6:a7:ca:ac:c1:
         e0:69:55:9a:1c:98:83:42:35:23:76:2c:80:0b:42:9d:c2:37:
         d1:28:ad:92:2e:b0:75:0a:b4:ac:64:77:44:4b:99:ac:d9:8d:
         7f:19:45:11:62:94:bd:dc:1b:8a:77:3a:b3:27:e8:13:21:8b:
         9e:73:70:bb:1b:4e:c6:2d:83:6d:a8:ed:6a:a0:1a:e4:b1:b0:
         4a:6d:25:83:d4:7d:b6:8a:00:e7:c0:a0:5a:bf:e8:a8:28:4c:
         89:0a:b6:e2:7b:45:e1:bf:cc:69:6b:f8:60:9f:9b:65:6a:1e:
         b5:c3:33:4d:54:95:f5:7e:04:7b:1d:01:7c:b2:3e:10:98:17:
         07:53:1d:ae:fa:16:13:8a:8f:e6:0a:8e:c7:8b:31:41:03:c2:
         08:6c:d5:b1:41:36:07:b3:18:4f:a0:f3:ae:d5:18:3d:50:23:
         17:26:95:47:e9:20:62:15:7c:82:9f:25:6b:ba:6f:27:cc:e5:
         0f:f4:d8:62:98:a0:86:8c:e3:47:62:1a:8c:af:dd:90:ba:15:
         1b:0f:32:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhGgt8vywTf2bSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
NmY0MmU3OTEtMmNjMy00ZjQ2LWE2NzUtMGU2MDhhMGE0MTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPD0t328fhzF48EINcBXzpV4SlR7cAJeUhNY
3Rn3EzL13RFrruM/ed7pjrk/YZT1v+sGFGxdyOJs8rW3M/nkmcpNiYOYstoruiHB
DPKC+q5kYpl6K3Mwpla6LvpdHWl+hj+hDF3BTgjTVwgUdPJ+MvByV8xsOnjeXf4K
u+jGcu7w0/iKYDQB++E3b0HyoTbq7xnqL3/QNbZ2le27aGyptkJDtqV2BahmZZ6d
TiVCM+6o2iOb0/Tvk7JC3kTt3iSHq7Ih5KDEWUuCp/EicwhUTeJbOHuB1xF5fgqg
+kcMtHe+K1Cd+8znCob363dkhFGZrNRctUjnFcrmO8BPh/pzlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHaTOAJRIpH/HUsylGUw8ry6tLQsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmQ3YTBjM2YtNDc2OS0z
MTE3LWE4YzEtZWQ1N2YzNzE3M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS/EgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXQA7s23E9nqGaE+llVogEShoEEpZRRYeOT73B8RBWftqsCw34Qwl4b
0Asf9tDlQt7Wp8qsweBpVZocmINCNSN2LIALQp3CN9EorZIusHUKtKxkd0RLmazZ
jX8ZRRFilL3cG4p3OrMn6BMhi55zcLsbTsYtg22o7WqgGuSxsEptJYPUfbaKAOfA
oFq/6KgoTIkKtuJ7ReG/zGlr+GCfm2VqHrXDM01UlfV+BHsdAXyyPhCYFwdTHa76
FhOKj+YKjseLMUEDwghs1bFBNgezGE+g867VGD1QIxcmlUfpIGIVfIKfJWu6byfM
5Q/02GKYoIaM40diGoyv3ZC6FRsPMkM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:12 2025 by rpki-client