Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa
File:                     3ccb2ccd-6776-345a-bf6d-3805674a638a.roa (raw, json)
Hash identifier:          7xSqVtVMEvbZx60Exy+WbQs8lscNEASRQydanaR7IL8=
Subject key identifier:   D3:88:7A:26:AA:6F:04:F2:1E:0D:13:72:9A:A5:93:96:60:60:78:E1
Certificate issuer:       /CN=61b23514-b37d-4216-9f76-1988ace05318
Certificate serial:       010D0C9F43285849B2AF61653B4BDB346E7275C0
Authority key identifier: 46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa
Signing time:             Wed 30 Apr 2025 13:01:02 +0000
ROA not before:           Wed 30 Apr 2025 13:01:02 +0000
ROA not after:            Tue 29 Jul 2025 13:01:02 +0000
asID:                     32329
IP address blocks:        199.4.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:af:61:65:3b:4b:db:34:6e:72:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b23514-b37d-4216-9f76-1988ace05318
        Validity
            Not Before: Apr 30 13:01:02 2025 GMT
            Not After : Jul 29 13:01:02 2025 GMT
        Subject: CN=58b07a58-3813-448a-8bfc-8b5d32dce1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:25:e6:81:08:68:b7:33:25:da:60:b7:ff:5b:
                    5f:8b:a6:dc:a9:2a:0e:3f:9a:f6:f5:0c:5d:6d:da:
                    71:b8:4e:40:9e:b3:1b:93:36:77:80:47:85:7b:72:
                    ee:5c:29:88:e7:e1:fe:33:df:d6:8e:f7:97:93:97:
                    78:20:12:7b:1c:f8:38:33:da:45:2a:49:5f:1b:38:
                    06:04:82:d8:d3:1a:53:23:d8:50:d4:af:d2:48:8f:
                    5d:04:eb:72:48:72:10:b2:c6:90:28:25:bb:73:ee:
                    09:18:d6:b8:c4:aa:fb:10:fb:b2:b6:83:fd:94:b1:
                    76:2a:0c:d5:f6:2a:90:da:04:61:2f:5b:01:35:bf:
                    45:41:64:6c:18:4d:18:6a:fd:c9:4b:0d:d4:6c:02:
                    04:91:c4:ab:46:2e:72:c5:dd:5e:11:71:eb:41:e5:
                    a4:38:e8:7e:d7:ad:1d:fc:9a:77:5e:35:93:19:41:
                    52:0f:60:ad:52:6f:29:b6:ae:35:c6:5f:bd:12:43:
                    b1:58:c8:8f:5f:6c:49:f6:da:fa:cf:3d:fd:56:f8:
                    86:e9:99:99:83:61:9d:7e:27:6f:39:03:b3:f7:78:
                    45:fb:4a:41:68:4c:64:e3:82:6b:b7:23:4e:21:b1:
                    47:cd:3e:05:55:36:5d:71:e5:33:ff:a2:5a:6c:a5:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:88:7A:26:AA:6F:04:F2:1E:0D:13:72:9A:A5:93:96:60:60:78:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.crl

            X509v3 Authority Key Identifier:
                keyid:46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:ea:92:89:ea:59:86:bf:03:ab:8f:cb:1f:c7:60:1d:af:ec:
         7e:a2:a9:7c:26:6c:49:57:0e:24:8b:30:57:36:43:a3:84:f0:
         e7:de:92:5e:a8:9a:02:fd:1b:20:0f:90:27:9f:aa:84:3b:1d:
         16:69:66:f3:36:39:35:17:03:10:c4:a7:5e:0e:19:ef:85:9a:
         df:d5:12:91:a3:82:ed:7a:cc:56:b9:04:a4:32:a5:34:28:93:
         ce:6e:6d:44:33:75:84:04:60:85:d6:ba:a3:ee:b4:e4:00:24:
         63:d6:ed:d1:71:21:54:3e:ea:13:08:b3:5f:7b:8b:e0:e3:5b:
         27:16:a9:7b:bf:7b:3e:c3:e6:13:82:4f:16:df:64:3d:e8:91:
         cd:b1:e0:74:71:85:17:f9:3b:e2:e9:6c:34:a0:02:41:4b:98:
         22:37:4f:56:fd:11:aa:af:e2:3d:1f:2a:72:c0:86:38:d8:e7:
         20:8d:22:b0:79:50:70:5f:9c:c6:9d:fb:c4:01:92:26:6e:05:
         39:e1:c1:fc:d9:a1:40:2d:cf:22:f8:3c:cb:93:e1:05:bb:16:
         5c:fd:8a:e5:8e:83:4c:47:5f:db:96:7d:b3:d3:3f:36:25:84:
         84:94:76:1c:d4:eb:66:98:a6:27:c2:1d:11:d1:8b:de:26:68:
         b7:a0:e1:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2FlO0vbNG5ydcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFiMjM1MTQtYjM3ZC00MjE2LTlmNzYtMTk4OGFjZTA1
MzE4MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk
NThiMDdhNTgtMzgxMy00NDhhLThiZmMtOGI1ZDMyZGNlMWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiXmgQhotzMl2mC3/1tfi6bcqSoOP5r29Qxd
bdpxuE5AnrMbkzZ3gEeFe3LuXCmI5+H+M9/WjveXk5d4IBJ7HPg4M9pFKklfGzgG
BILY0xpTI9hQ1K/SSI9dBOtySHIQssaQKCW7c+4JGNa4xKr7EPuytoP9lLF2KgzV
9iqQ2gRhL1sBNb9FQWRsGE0Yav3JSw3UbAIEkcSrRi5yxd1eEXHrQeWkOOh+160d
/Jp3XjWTGUFSD2CtUm8ptq41xl+9EkOxWMiPX2xJ9tr6zz39VviG6ZmZg2Gdfidv
OQOz93hF+0pBaExk44JrtyNOIbFHzT4FVTZdceUz/6JabKWQNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNOIeiaqbwTyHg0Tcpqlk5ZgYHjhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWIy
MzUxNC1iMzdkLTQyMTYtOWY3Ni0xOTg4YWNlMDUzMTgvM2NjYjJjY2QtNjc3Ni0z
NDVhLWJmNmQtMzgwNTY3NGE2MzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFiMjM1MTQtYjM3ZC00MjE2LTlm
NzYtMTk4OGFjZTA1MzE4LzYxYjIzNTE0LWIzN2QtNDIxNi05Zjc2LTE5ODhhY2Uw
NTMxOC5jcmwwHwYDVR0jBBgwFoAURn5H4OAsDT/oqxF3S4L+Jy40br4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWIyMzUxNC1iMzdkLTQyMTYtOWY3Ni0xOTg4
YWNlMDUzMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMzqkonqWYa/A6uPyx/HYB2v7H6iqXwmbElXDiSLMFc2Q6OE8Ofekl6o
mgL9GyAPkCefqoQ7HRZpZvM2OTUXAxDEp14OGe+Fmt/VEpGjgu16zFa5BKQypTQo
k85ubUQzdYQEYIXWuqPutOQAJGPW7dFxIVQ+6hMIs197i+DjWycWqXu/ez7D5hOC
TxbfZD3okc2x4HRxhRf5O+LpbDSgAkFLmCI3T1b9Eaqv4j0fKnLAhjjY5yCNIrB5
UHBfnMad+8QBkiZuBTnhwfzZoUAtzyL4PMuT4QW7Flz9iuWOg0xHX9uWfbPTPzYl
hISUdhzU62aYpifCHRHRi94maLeg4Zc=
-----END CERTIFICATE-----
Generated at Thu May 1 19:17:22 2025 by rpki-client