Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4c50a6ea-ddb8-3abd-924b-30110b57ed65.roa
File:                     4c50a6ea-ddb8-3abd-924b-30110b57ed65.roa (raw, json)
Hash identifier:          NHtWz11Bnm2D09tkNkv18z0thouiSZmYPCICfvZb3+w=
Subject key identifier:   DB:40:F5:70:1A:01:BA:96:48:47:33:07:85:E2:FD:DC:40:EC:26:53
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858499294A871DEDEBDCAA1DBE9E0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4c50a6ea-ddb8-3abd-924b-30110b57ed65.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     2914
IP address blocks:        161.58.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a8:71:de:de:bd:ca:a1:db:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=fd630f39-fa40-406d-8ac1-edda115edf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:ad:8b:c4:d4:6b:2c:20:8b:c8:7e:47:19:
                    6a:6c:38:27:71:00:74:c9:53:da:f8:69:67:07:2e:
                    48:25:6f:3c:0b:bf:67:99:55:84:0e:d1:c6:64:c9:
                    aa:da:31:eb:5d:56:ae:c3:39:62:cb:eb:e9:e4:8b:
                    1a:ed:c1:a2:c2:bf:9e:36:a7:76:71:88:96:80:43:
                    74:3a:40:e5:40:e5:94:8e:5c:ee:f0:0e:95:de:ec:
                    d9:d1:fa:5f:3f:90:5f:32:08:ec:35:3b:03:9a:c4:
                    1d:16:ea:7e:bd:d7:90:51:de:6d:1e:be:af:72:f9:
                    ce:f3:ef:85:36:26:41:06:94:61:c3:1d:91:ec:d9:
                    e5:e8:48:37:03:c6:2a:76:23:4d:76:53:c1:7c:ea:
                    1a:48:c4:d5:b3:79:99:75:8a:18:02:9a:97:07:d0:
                    8d:5f:db:62:39:74:1d:19:e8:5a:06:71:e7:a7:23:
                    cf:cf:ac:0a:b5:c8:0e:aa:a3:48:c5:c2:0a:91:bc:
                    74:9e:66:f8:80:ed:70:93:61:1c:1f:38:6f:f4:15:
                    ee:8e:7a:8d:4e:a3:bc:d7:e0:bf:1d:10:10:fc:e4:
                    e3:56:86:ed:04:2e:7d:34:41:e5:00:9d:fd:66:ae:
                    0e:aa:22:4c:82:e7:2b:ca:b8:5d:f2:49:70:04:eb:
                    e4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:40:F5:70:1A:01:BA:96:48:47:33:07:85:E2:FD:DC:40:EC:26:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4c50a6ea-ddb8-3abd-924b-30110b57ed65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.58.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:aa:7f:6f:96:7b:ba:22:d1:ed:01:cc:ae:97:19:2f:5c:66:
         39:67:4f:2c:e5:c4:a3:a7:f8:23:cf:23:5e:05:ba:31:1a:18:
         14:47:2f:9a:88:13:20:a5:86:35:e9:9c:53:bd:61:17:fa:27:
         c0:5d:47:a1:f9:92:4d:9a:ff:6e:54:2e:a1:1c:56:a9:83:7a:
         37:84:fa:51:69:0a:12:38:b5:87:b8:5f:ac:39:4d:62:22:2f:
         57:15:e9:e3:a5:da:70:bf:e3:b9:ed:99:f4:53:2f:a9:b3:bb:
         36:ec:4a:6d:16:22:2c:dd:1a:54:42:ea:ef:ce:a1:21:88:de:
         b8:3b:97:3d:e6:93:85:3f:60:b7:50:b5:89:f9:87:9c:45:3c:
         75:fe:f3:9c:f1:09:00:07:da:32:2e:28:60:ef:1a:d5:4f:1e:
         74:c0:44:b7:57:d7:78:50:65:8f:b6:97:53:3e:fd:36:1f:9d:
         ba:b3:2a:73:23:3a:4c:84:47:b2:0d:cf:7f:02:68:b4:9c:ff:
         96:19:68:87:8a:16:f3:ab:ee:47:7f:78:70:0b:86:05:82:79:
         93:e4:89:fb:fe:33:a4:2e:3d:6b:1c:7a:f0:59:cd:f3:8b:50:
         35:5a:df:ba:84:d0:d1:c0:47:2f:b7:1d:11:e3:af:01:b1:1e:
         7e:5b:5e:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKhx3t69yqHb6eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk
ZmQ2MzBmMzktZmE0MC00MDZkLThhYzEtZWRkYTExNWVkZjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibuti8TUaywgi8h+RxlqbDgncQB0yVPa+Gln
By5IJW88C79nmVWEDtHGZMmq2jHrXVauwzliy+vp5Isa7cGiwr+eNqd2cYiWgEN0
OkDlQOWUjlzu8A6V3uzZ0fpfP5BfMgjsNTsDmsQdFup+vdeQUd5tHr6vcvnO8++F
NiZBBpRhwx2R7Nnl6Eg3A8YqdiNNdlPBfOoaSMTVs3mZdYoYApqXB9CNX9tiOXQd
GehaBnHnpyPPz6wKtcgOqqNIxcIKkbx0nmb4gO1wk2EcHzhv9BXujnqNTqO81+C/
HRAQ/OTjVobtBC59NEHlAJ39Zq4OqiJMgucryrhd8klwBOvkfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtA9XAaAbqWSEczB4Xi/dxA7CZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGM1MGE2ZWEtZGRiOC0z
YWJkLTkyNGItMzAxMTBiNTdlZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoTqeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiqf2+We7oi0e0BzK6XGS9cZjlnTyzlxKOn+CPPI14FujEaGBRHL5qI
EyClhjXpnFO9YRf6J8BdR6H5kk2a/25ULqEcVqmDejeE+lFpChI4tYe4X6w5TWIi
L1cV6eOl2nC/47ntmfRTL6mzuzbsSm0WIizdGlRC6u/OoSGI3rg7lz3mk4U/YLdQ
tYn5h5xFPHX+85zxCQAH2jIuKGDvGtVPHnTARLdX13hQZY+2l1M+/TYfnbqzKnMj
OkyER7INz38CaLSc/5YZaIeKFvOr7kd/eHALhgWCeZPkifv+M6QuPWscevBZzfOL
UDVa37qE0NHARy+3HRHjrwGxHn5bXu4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:11:38 2025 by rpki-client