Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/efacee15-a69b-3468-987c-40a5d6594481.roa
File:                     efacee15-a69b-3468-987c-40a5d6594481.roa (raw, json)
Hash identifier:          4dVtmS1LPYE5P9RNS/XauDmyLrvPJEYkUGphw4nNs78=
Subject key identifier:   87:C7:A7:62:C0:F4:E8:F7:B7:DE:BE:6F:A4:34:59:A1:AC:09:E8:6F
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849A61F3A522D44CA485FDD8400
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/efacee15-a69b-3468-987c-40a5d6594481.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     17062
IP address blocks:        192.46.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3a:52:2d:44:ca:48:5f:dd:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=709b7e3d-2126-4426-923f-c50b749cff67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a3:c7:67:d0:a5:3e:62:bd:1a:f2:fc:16:4c:
                    82:09:f2:e2:54:29:ba:ca:15:60:ef:8c:bf:90:e8:
                    01:b3:00:c4:61:eb:2c:9c:46:27:27:96:a3:a6:46:
                    fa:0f:d1:1f:27:e6:b4:39:90:4d:4c:e5:36:9d:41:
                    53:99:21:6c:e2:67:1a:fa:58:11:69:62:1f:96:66:
                    36:b3:b3:09:1f:e7:26:55:16:5a:b8:bb:50:16:0d:
                    d4:d9:41:a5:27:98:36:b4:d0:4b:1d:e0:a9:cc:0f:
                    d9:f1:e7:74:3c:15:a0:ae:cf:ee:f3:41:22:56:45:
                    a6:26:ec:8e:f3:8c:cb:e1:c9:f2:c7:6f:c3:ca:b7:
                    a4:7b:f9:18:b7:85:1b:f7:d0:89:d7:32:12:3d:d1:
                    17:9e:3b:fe:6b:d2:1d:52:60:53:20:8f:df:c4:0e:
                    8d:d2:a0:da:ee:cf:a2:36:ff:de:87:80:13:d4:55:
                    18:4e:e7:0a:53:01:e0:31:92:d9:26:b4:c8:53:25:
                    4b:a4:a5:b4:05:d2:d9:45:49:d7:1c:d7:60:e3:16:
                    59:00:f7:f0:88:f0:34:9b:14:26:3d:ae:64:aa:c8:
                    63:a3:5d:a1:71:d7:47:51:93:30:14:1d:b4:4b:1f:
                    19:0d:8c:e6:1e:6a:03:7f:3d:2e:d1:37:d2:9b:62:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C7:A7:62:C0:F4:E8:F7:B7:DE:BE:6F:A4:34:59:A1:AC:09:E8:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/efacee15-a69b-3468-987c-40a5d6594481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:21:21:e0:3d:ad:59:6b:d6:87:0d:55:3a:fd:ea:5e:8d:
         70:65:13:69:89:9d:0b:02:05:a2:24:1c:ae:3d:27:be:da:c3:
         97:78:27:49:5a:25:b3:c2:ec:16:2c:e7:87:74:4e:4b:55:68:
         4b:3b:0c:1f:a1:6f:cb:a1:e8:42:29:79:66:f3:0b:01:9b:a1:
         c0:bd:1d:e1:1a:62:4e:67:0c:c0:45:5c:f9:3a:63:7c:8a:b8:
         c0:c1:d8:c5:d9:f1:68:a3:60:4a:71:2b:12:7f:1f:12:92:b9:
         7e:66:52:c5:bc:eb:88:dd:5d:96:1e:24:74:ef:88:fd:0d:4f:
         ce:8a:e6:9b:ff:08:b6:af:15:ee:ff:bf:b5:2d:8a:54:5c:40:
         28:75:67:f2:41:43:e9:8b:20:cc:4d:ad:3a:89:4b:db:5e:0c:
         98:6c:bc:9e:8e:24:64:80:40:b8:fb:98:6e:a3:dc:b9:f7:8e:
         72:3e:85:c4:55:4a:8a:4a:d7:4e:f6:33:4e:7b:00:82:f9:b1:
         38:1c:13:51:60:13:92:11:93:ad:43:c0:3c:86:b8:03:f8:b0:
         5a:05:8b:a9:54:88:09:1f:13:b3:1a:35:98:11:80:35:ba:81:
         30:2c:c3:29:5c:ad:45:26:a8:3e:0b:0b:53:c8:57:6c:1c:4e:
         b4:2a:ce:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzpSLUTKSF/dhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
NzA5YjdlM2QtMjEyNi00NDI2LTkyM2YtYzUwYjc0OWNmZjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6PHZ9ClPmK9GvL8FkyCCfLiVCm6yhVg74y/
kOgBswDEYessnEYnJ5ajpkb6D9EfJ+a0OZBNTOU2nUFTmSFs4mca+lgRaWIflmY2
s7MJH+cmVRZauLtQFg3U2UGlJ5g2tNBLHeCpzA/Z8ed0PBWgrs/u80EiVkWmJuyO
84zL4cnyx2/Dyreke/kYt4Ub99CJ1zISPdEXnjv+a9IdUmBTII/fxA6N0qDa7s+i
Nv/eh4AT1FUYTucKUwHgMZLZJrTIUyVLpKW0BdLZRUnXHNdg4xZZAPfwiPA0mxQm
Pa5kqshjo12hcddHUZMwFB20Sx8ZDYzmHmoDfz0u0TfSm2KTHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfHp2LA9Oj3t96+b6Q0WaGsCehvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZWZhY2VlMTUtYTY5Yi0z
NDY4LTk4N2MtNDBhNWQ2NTk0NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC4rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI8oISHgPa1Za9aHDVU6/epejXBlE2mJnQsCBaIkHK49J77aw5d4J0la
JbPC7BYs54d0TktVaEs7DB+hb8uh6EIpeWbzCwGbocC9HeEaYk5nDMBFXPk6Y3yK
uMDB2MXZ8WijYEpxKxJ/HxKSuX5mUsW864jdXZYeJHTviP0NT86K5pv/CLavFe7/
v7UtilRcQCh1Z/JBQ+mLIMxNrTqJS9teDJhsvJ6OJGSAQLj7mG6j3Ln3jnI+hcRV
SopK1072M057AIL5sTgcE1FgE5IRk61DwDyGuAP4sFoFi6lUiAkfE7MaNZgRgDW6
gTAswylcrUUmqD4LC1PIV2wcTrQqzss=
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:21:18 2025 by rpki-client