Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9de78308-59ad-33b2-a95c-5da471104942.roa
File:                     9de78308-59ad-33b2-a95c-5da471104942.roa (raw, json)
Hash identifier:          oXna977UFgjx4GoFv/qnqoE2CO001obWiijuv9vHjoY=
Subject key identifier:   4F:59:78:75:F8:06:6F:02:56:14:AB:90:CC:B0:5B:61:6B:79:45:07
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA951A75A39DB510DCF8C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9de78308-59ad-33b2-a95c-5da471104942.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        172.243.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:95:1a:75:a3:9d:b5:10:dc:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d136ebc3-05a3-4f73-8f90-649d5b17327e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:fb:ab:01:a0:4e:91:27:a2:60:85:d8:f7:
                    30:58:86:d9:a8:95:39:84:1f:d4:78:6f:fa:01:ac:
                    7a:13:68:30:ca:e6:e2:ff:6c:e6:34:5e:00:7b:cb:
                    ad:09:a6:be:5d:2a:17:3f:cc:3c:b9:8a:2a:50:14:
                    36:2a:ed:47:91:50:40:c9:5d:58:e5:07:af:32:7e:
                    fe:0e:96:52:f6:88:55:49:91:61:57:cd:1d:5f:12:
                    ef:e0:e5:c2:11:00:a2:2f:21:f1:67:df:82:42:84:
                    05:a1:a3:4b:57:3a:44:4e:62:98:f8:c8:8d:4a:47:
                    50:ef:f8:f9:c5:82:cb:25:01:65:38:c8:fe:90:01:
                    1c:ec:11:0b:38:91:48:f9:95:18:ba:6f:21:cf:0a:
                    28:2d:3c:eb:93:cf:fb:88:b5:0a:68:64:0f:6b:fe:
                    fe:d8:c6:48:c5:19:a9:0c:27:5c:8e:b3:93:0c:7f:
                    cc:e2:97:f7:4a:a9:49:34:71:0d:ee:02:47:5e:29:
                    71:10:51:7e:bb:04:35:41:72:87:8e:dc:55:42:af:
                    df:6b:e7:ff:5c:b7:b0:4b:2c:cb:24:92:ea:42:09:
                    d1:de:40:55:51:a7:1b:4e:bc:aa:18:66:3d:3a:15:
                    5e:8b:b2:7f:b4:f3:1c:49:f2:2e:c4:71:6d:a2:67:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:59:78:75:F8:06:6F:02:56:14:AB:90:CC:B0:5B:61:6B:79:45:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9de78308-59ad-33b2-a95c-5da471104942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:af:59:2a:57:1d:9a:e1:20:d4:0d:2d:41:23:88:11:36:48:
         1d:e9:52:02:38:ee:db:83:e7:4c:2d:14:15:91:7d:3d:bf:f4:
         15:0f:b3:0d:36:f8:c5:3c:3a:92:b5:0e:b7:9f:cb:50:f7:25:
         ec:b5:96:6c:63:88:16:b2:c8:c3:77:c3:eb:e3:6b:53:9c:4c:
         99:d2:fa:9a:18:79:5b:5e:0a:f6:f1:26:c6:08:ca:35:9f:0c:
         f5:a2:9f:59:60:34:f2:a3:b3:3e:2d:73:aa:6e:d0:c3:17:63:
         01:4d:ed:a7:9e:af:76:63:f8:60:3d:a8:9a:a2:eb:a3:a4:9d:
         a0:9f:0c:e1:77:83:e7:8f:f2:dc:76:3c:03:d0:23:c3:2b:0c:
         4d:1a:6d:79:f7:31:f7:bb:0d:9f:0e:d5:af:e6:4e:d8:34:0c:
         2f:d2:78:b0:57:dc:97:d8:3e:52:97:eb:2e:f1:71:b5:03:29:
         4d:98:84:af:5d:2c:d7:8e:97:2a:ca:60:13:74:6d:87:86:61:
         f8:0e:74:a4:c5:5c:10:23:3b:3c:1d:c8:e1:6c:f4:05:37:58:
         f7:9b:2d:90:e3:69:8a:fb:57:f1:e8:5b:0e:4b:dd:f0:31:5a:
         25:54:47:1c:86:7c:b1:ad:b6:b0:47:f6:47:31:b9:67:52:8a:
         d9:07:fb:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupUadaOdtRDc+MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZDEzNmViYzMtMDVhMy00ZjczLThmOTAtNjQ5ZDViMTczMjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZf7qwGgTpEnomCF2PcwWIbZqJU5hB/UeG/6
Aax6E2gwyubi/2zmNF4Ae8utCaa+XSoXP8w8uYoqUBQ2Ku1HkVBAyV1Y5QevMn7+
DpZS9ohVSZFhV80dXxLv4OXCEQCiLyHxZ9+CQoQFoaNLVzpETmKY+MiNSkdQ7/j5
xYLLJQFlOMj+kAEc7BELOJFI+ZUYum8hzwooLTzrk8/7iLUKaGQPa/7+2MZIxRmp
DCdcjrOTDH/M4pf3SqlJNHEN7gJHXilxEFF+uwQ1QXKHjtxVQq/fa+f/XLewSyzL
JJLqQgnR3kBVUacbTryqGGY9OhVei7J/tPMcSfIuxHFtomfO6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9ZeHX4Bm8CVhSrkMywW2FreUUHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWRlNzgzMDgtNTlhZC0z
M2IyLWE5NWMtNWRhNDcxMTA0OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2vWSpXHZrhINQNLUEjiBE2SB3pUgI47tuD50wtFBWRfT2/9BUPsw02
+MU8OpK1Drefy1D3Jey1lmxjiBayyMN3w+vja1OcTJnS+poYeVteCvbxJsYIyjWf
DPWin1lgNPKjsz4tc6pu0MMXYwFN7aeer3Zj+GA9qJqi66OknaCfDOF3g+eP8tx2
PAPQI8MrDE0abXn3Mfe7DZ8O1a/mTtg0DC/SeLBX3JfYPlKX6y7xcbUDKU2YhK9d
LNeOlyrKYBN0bYeGYfgOdKTFXBAjOzwdyOFs9AU3WPebLZDjaYr7V/HoWw5L3fAx
WiVURxyGfLGttrBH9kcxuWdSitkH+zI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:33 2025 by rpki-client