Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/721b2d7c-17d9-34cf-b678-3594c8cbf7b5.roa
File:                     721b2d7c-17d9-34cf-b678-3594c8cbf7b5.roa (raw, json)
Hash identifier:          wws9Q8iBW0BcqHwMGaR1sxf/DDPPv2iu991pct2ZvZw=
Subject key identifier:   DD:DE:18:9C:78:71:CA:89:54:A6:47:FC:8F:20:8F:47:3B:2C:4C:6F
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285849350E944BF57348EF3EE84CB0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/721b2d7c-17d9-34cf-b678-3594c8cbf7b5.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     8987
IP address blocks:        155.226.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:94:4b:f5:73:48:ef:3e:e8:4c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=f1e55cca-a74c-4814-9a41-2f57ed1c1a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7c:74:a1:89:d5:f8:98:c1:35:e6:92:26:ff:
                    37:4d:ae:92:42:ff:10:48:7b:6b:f6:08:c6:1e:1f:
                    dd:91:93:43:c5:1a:2d:87:d1:a0:9c:5f:b1:3b:46:
                    ed:f4:0a:90:c6:8e:9a:ed:e1:3f:99:53:3b:68:34:
                    83:34:e3:b2:fa:7f:e5:3c:c8:9c:ee:7a:16:3a:94:
                    f1:d5:67:ce:b9:ef:ce:43:84:e7:66:ca:fa:ab:18:
                    a1:92:ad:13:cf:13:21:c4:e1:47:53:33:11:22:20:
                    c1:e2:0b:5e:c2:6f:c2:41:e7:15:59:25:81:40:3d:
                    69:04:17:08:8d:3f:59:30:57:0a:98:4b:e8:89:4b:
                    83:07:1a:71:7d:0e:78:f1:af:57:20:13:7d:a2:b6:
                    75:32:aa:46:71:fa:2a:03:bf:6a:4a:62:6c:cd:ed:
                    04:e7:24:a7:85:88:60:70:18:80:56:67:be:46:44:
                    b4:62:d7:3a:9a:c4:6a:92:d3:ed:53:42:01:91:2d:
                    9c:5d:37:15:fd:78:22:e8:a9:2d:88:d8:a3:14:1c:
                    f7:23:1d:5e:ff:04:83:94:16:8b:3a:0b:a3:51:7a:
                    a2:86:1b:c4:6d:00:aa:d5:cb:a3:7d:e2:1b:e8:35:
                    7a:1c:4f:55:9c:b1:ab:94:f0:32:c8:7b:86:4a:d0:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DE:18:9C:78:71:CA:89:54:A6:47:FC:8F:20:8F:47:3B:2C:4C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/721b2d7c-17d9-34cf-b678-3594c8cbf7b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:1e:81:81:ac:08:e9:19:9d:cd:d1:06:98:0c:db:77:75:
         05:a9:19:fa:44:33:67:87:15:6e:42:c8:0b:43:d8:75:97:52:
         32:42:70:1a:9c:9b:66:f4:a7:69:56:a1:d6:49:0b:4b:e0:c0:
         e8:e6:5d:c1:ae:a8:7d:0c:17:49:8b:84:4a:e9:f3:2a:61:a3:
         5a:d7:94:26:a8:5f:ed:ec:97:4d:a9:c2:34:8f:42:5a:ee:18:
         ab:04:8e:ae:04:f5:42:b6:78:49:9a:03:c8:0c:04:60:40:81:
         5d:7b:04:61:44:35:6b:8d:4d:7b:c5:65:1e:31:9a:f3:2e:1a:
         b2:30:a1:7b:9d:92:9e:ca:66:1f:7f:ba:47:f6:3f:20:65:4b:
         2a:89:9f:76:ca:7e:9f:54:4a:24:74:91:47:70:74:c7:40:2b:
         70:03:40:62:d3:8b:4b:08:b2:7e:86:81:32:11:74:e0:3a:cf:
         47:b8:9f:59:eb:96:b3:42:c7:79:4b:fc:e6:29:f1:5b:3a:9c:
         42:9d:8f:3f:7f:94:c6:08:da:21:29:95:39:35:27:b6:9f:0b:
         27:17:2b:cf:da:96:6f:31:d4:a1:54:10:12:5a:88:78:5f:7c:
         e2:3b:88:76:fc:78:94:44:9b:41:12:8e:da:1a:35:87:c5:64:
         67:b1:ba:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpRL9XNI7z7oTLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZjFlNTVjY2EtYTc0Yy00ODE0LTlhNDEtMmY1N2VkMWMxYTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXx0oYnV+JjBNeaSJv83Ta6SQv8QSHtr9gjG
Hh/dkZNDxRoth9GgnF+xO0bt9AqQxo6a7eE/mVM7aDSDNOOy+n/lPMic7noWOpTx
1WfOue/OQ4TnZsr6qxihkq0TzxMhxOFHUzMRIiDB4gtewm/CQecVWSWBQD1pBBcI
jT9ZMFcKmEvoiUuDBxpxfQ548a9XIBN9orZ1MqpGcfoqA79qSmJsze0E5ySnhYhg
cBiAVme+RkS0Ytc6msRqktPtU0IBkS2cXTcV/Xgi6KktiNijFBz3Ix1e/wSDlBaL
OgujUXqihhvEbQCq1cujfeIb6DV6HE9VnLGrlPAyyHuGStB+rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3eGJx4ccqJVKZH/I8gj0c7LExvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNzIxYjJkN2MtMTdkOS0z
NGNmLWI2NzgtMzU5NGM4Y2JmN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm+LAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXIHoGBrAjpGZ3N0QaYDNt3dQWpGfpEM2eHFW5CyAtD2HWXUjJCcBqc
m2b0p2lWodZJC0vgwOjmXcGuqH0MF0mLhErp8ypho1rXlCaoX+3sl02pwjSPQlru
GKsEjq4E9UK2eEmaA8gMBGBAgV17BGFENWuNTXvFZR4xmvMuGrIwoXudkp7KZh9/
ukf2PyBlSyqJn3bKfp9USiR0kUdwdMdAK3ADQGLTi0sIsn6GgTIRdOA6z0e4n1nr
lrNCx3lL/OYp8Vs6nEKdjz9/lMYI2iEplTk1J7afCycXK8/alm8x1KFUEBJaiHhf
fOI7iHb8eJREm0ESjtoaNYfFZGexuj8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:24 2025 by rpki-client