Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa
File:                     f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa (raw, json)
Hash identifier:          ErcMH89SWMJMennuOGjgckoTrDHVGANa8ttZfklolBU=
Subject key identifier:   7F:64:33:63:04:7D:6C:76:79:E1:7B:74:DB:3F:AE:C9:51:E4:4C:1C
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858496A19A4B1C3E3612CEDB9D600
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     19905
IP address blocks:        207.218.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a4:b1:c3:e3:61:2c:ed:b9:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=477cae42-2bd9-4e01-8ffe-4b9798ad9d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e4:ad:fb:2a:fc:21:79:54:2a:7e:8d:ff:97:
                    ab:81:9f:f3:b1:73:c2:78:03:f5:d0:a4:1a:25:0f:
                    e0:b9:26:78:9c:32:b1:e9:25:2e:3f:a4:23:e3:f2:
                    67:20:71:2e:60:9c:58:13:99:7b:b3:b3:f0:96:5b:
                    4d:81:d0:80:0a:66:ff:0f:10:f1:36:2b:79:89:a5:
                    a9:62:53:6c:50:e5:74:3b:f6:11:8d:65:23:c0:af:
                    ff:92:84:6b:93:2a:9f:80:20:2c:43:b7:31:c1:e2:
                    22:b0:b1:2d:96:ba:4c:3c:a4:7e:22:14:33:08:19:
                    44:fa:34:24:45:b1:e6:d9:4f:2d:3b:d3:09:39:48:
                    7a:2f:1c:b9:9c:63:90:aa:14:b4:e4:f9:4c:c1:ea:
                    5d:2a:50:93:d5:ce:fb:9a:3a:39:e5:24:0c:55:7f:
                    c0:d5:85:5b:08:44:fe:ab:99:ed:fa:5f:b6:0b:00:
                    05:f3:2a:01:87:35:ef:f0:f9:f6:67:ef:25:56:da:
                    53:72:63:97:3a:d2:9f:4c:5a:cc:2e:94:e4:4e:e1:
                    99:c3:5a:ee:ce:05:59:11:ca:52:0a:22:25:a2:bd:
                    49:9a:2f:e0:68:c1:23:f4:c5:3c:ac:cc:81:d5:b7:
                    8b:a6:3f:75:16:10:48:06:1a:a8:bd:2f:61:56:55:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:64:33:63:04:7D:6C:76:79:E1:7B:74:DB:3F:AE:C9:51:E4:4C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.218.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:42:8b:00:e5:7b:a0:31:1b:0c:64:81:a1:92:b4:24:e7:f9:
         81:70:a0:0b:6f:1e:a6:14:7f:20:71:3d:c2:3e:6a:77:e9:3c:
         22:56:11:44:90:20:12:bb:4b:dc:6e:dc:8a:46:54:18:12:ed:
         6f:86:f3:e9:69:10:16:80:2f:dc:49:e6:0f:f9:a5:c2:de:cc:
         40:d1:45:f5:fe:22:f3:86:90:e1:90:64:2c:b9:df:97:d0:49:
         52:ef:e2:79:55:09:8d:ed:a8:af:63:29:31:92:0d:ef:5e:1b:
         59:43:b1:c1:4e:64:04:ee:d1:3b:37:48:43:d6:21:93:db:fb:
         ef:15:a8:97:ae:0f:b9:3a:51:68:ff:ec:f5:d2:8a:6e:30:70:
         23:77:60:17:37:cd:f8:df:b8:94:4d:cc:db:41:5a:99:d3:0e:
         7e:cb:a9:cf:83:2a:a5:89:5b:83:0a:af:30:1a:2c:d2:16:e1:
         69:0f:2c:a7:21:5b:b9:36:55:6b:74:c6:87:b1:ed:21:42:86:
         f6:ef:85:89:59:e2:02:2e:f8:90:c2:6d:6c:a1:78:b5:10:98:
         a6:74:76:89:e9:39:2d:52:84:e6:e7:ac:3b:67:13:00:45:bb:
         ff:96:f1:1f:71:1c:90:a6:7d:68:fc:3c:c3:09:6f:2c:11:60:
         9a:f6:9a:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGaSxw+NhLO251gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
NDc3Y2FlNDItMmJkOS00ZTAxLThmZmUtNGI5Nzk4YWQ5ZDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eSt+yr8IXlUKn6N/5ergZ/zsXPCeAP10KQa
JQ/guSZ4nDKx6SUuP6Qj4/JnIHEuYJxYE5l7s7PwlltNgdCACmb/DxDxNit5iaWp
YlNsUOV0O/YRjWUjwK//koRrkyqfgCAsQ7cxweIisLEtlrpMPKR+IhQzCBlE+jQk
RbHm2U8tO9MJOUh6Lxy5nGOQqhS05PlMwepdKlCT1c77mjo55SQMVX/A1YVbCET+
q5nt+l+2CwAF8yoBhzXv8Pn2Z+8lVtpTcmOXOtKfTFrMLpTkTuGZw1ruzgVZEcpS
CiIlor1Jmi/gaMEj9MU8rMyB1beLpj91FhBIBhqovS9hVlXwGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9kM2MEfWx2eeF7dNs/rslR5EwcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjMxZDA1NmUtZDhhMS0z
NzNiLTlmZTMtOTI0MGFiMjNiNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz9qaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBCiwDle6AxGwxkgaGStCTn+YFwoAtvHqYUfyBxPcI+anfpPCJWEUSQ
IBK7S9xu3IpGVBgS7W+G8+lpEBaAL9xJ5g/5pcLezEDRRfX+IvOGkOGQZCy535fQ
SVLv4nlVCY3tqK9jKTGSDe9eG1lDscFOZATu0Ts3SEPWIZPb++8VqJeuD7k6UWj/
7PXSim4wcCN3YBc3zfjfuJRNzNtBWpnTDn7Lqc+DKqWJW4MKrzAaLNIW4WkPLKch
W7k2VWt0xoex7SFChvbvhYlZ4gIu+JDCbWyheLUQmKZ0donpOS1ShObnrDtnEwBF
u/+W8R9xHJCmfWj8PMMJbywRYJr2mjY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:18:20 2025 by rpki-client