Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
File:                     7c8dea26-fd51-3016-9371-cf841d680f6b.roa (raw, json)
Hash identifier:          4gWuyfCNhrM6XiBIkfANTaDuo8Xj4qWR2BqAK7eftCk=
Subject key identifier:   AF:9D:5B:7C:00:F8:B4:1F:A9:13:21:03:3B:D5:18:D3:2D:52:AF:B4
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F432858497AD9BD2DD3C7F7B7929EBB40
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     6079
IP address blocks:        167.253.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:bd:2d:d3:c7:f7:b7:92:9e:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=247214cd-4a48-4ff6-bf95-b5c391f3523c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:a1:91:a2:43:f8:31:23:0d:c2:59:33:29:
                    ea:50:4c:81:44:78:69:c8:b2:2e:b6:0f:53:97:5c:
                    53:2c:b8:5a:48:41:3f:b7:37:d7:38:13:18:08:9e:
                    00:1e:0e:dc:16:6d:15:05:d1:cc:42:f9:6b:79:e5:
                    77:92:d6:b8:61:8f:82:2d:0e:d9:e5:07:3c:31:7b:
                    2e:3e:b2:ea:1f:9f:e3:bd:9e:e8:17:a8:dd:36:5f:
                    bc:d5:e3:6d:90:d5:5d:9b:54:b9:0d:5a:ee:ad:42:
                    25:cf:cc:ba:ae:3a:a3:8c:95:32:44:c2:a0:da:1c:
                    75:ce:11:89:b3:62:f4:87:43:94:55:92:12:fd:29:
                    a8:b4:40:46:30:75:3c:f4:b7:ef:73:44:4e:74:e8:
                    1c:f8:c5:c9:82:53:56:41:37:7f:79:93:f3:35:eb:
                    71:05:5e:7a:34:36:6b:2a:fa:20:83:7a:33:5b:fa:
                    a1:77:d7:3e:81:fb:53:2b:b8:98:bb:75:00:37:e2:
                    d4:fd:64:7e:de:18:dd:f5:cd:0b:ce:26:cd:b4:82:
                    b3:97:2c:63:0f:c9:f4:31:75:44:54:89:ab:9c:10:
                    36:92:94:49:bb:81:1e:02:27:6a:c9:c1:07:cb:14:
                    1e:bc:6d:be:24:1f:5d:37:84:e9:ff:fc:b8:99:f5:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9D:5B:7C:00:F8:B4:1F:A9:13:21:03:3B:D5:18:D3:2D:52:AF:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a5:40:28:9a:a1:78:85:94:8e:8f:46:6d:dc:5d:eb:92:77:
         8d:51:1f:52:2b:7d:f3:1d:00:0f:18:c8:df:04:98:aa:4c:b9:
         7e:76:da:c1:e2:60:0f:04:48:a2:7b:90:df:1a:e9:24:08:12:
         7d:07:fe:dd:08:c1:95:51:27:35:c8:7a:a1:41:42:e7:fd:fd:
         b2:43:c6:b2:f4:c1:cf:5f:50:78:fc:85:3b:9c:e1:11:de:ed:
         54:95:cd:13:f5:4e:81:8a:56:90:c9:ef:9d:6a:8b:54:ed:cd:
         34:71:86:cc:ea:f5:41:27:b7:66:58:3c:f3:ad:58:cc:41:3b:
         b7:f6:e3:ee:cc:87:c5:0a:a0:f3:12:7a:2e:ba:7a:bf:25:16:
         12:6b:cb:23:ff:cd:55:a5:76:25:d6:ab:35:27:78:4a:92:e7:
         21:37:69:d3:60:80:a0:8d:b3:5d:0c:03:85:02:b1:42:84:a2:
         0f:fc:c1:2c:e4:96:72:35:92:36:b3:00:a3:c3:cd:37:b5:21:
         6a:4b:66:ba:c8:0b:ce:ff:80:36:e3:ef:e0:61:e8:0b:a9:dd:
         6f:34:95:f8:19:02:79:3c:3a:d4:89:7e:d5:21:4a:de:d8:fd:
         82:4e:42:50:b2:f0:a6:34:87:fe:19:8a:df:c0:fb:52:d2:78:
         c3:57:f4:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62b0t08f3t5Keu0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl
ODRhMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk
MjQ3MjE0Y2QtNGE0OC00ZmY2LWJmOTUtYjVjMzkxZjM1MjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUihkaJD+DEjDcJZMynqUEyBRHhpyLIutg9T
l1xTLLhaSEE/tzfXOBMYCJ4AHg7cFm0VBdHMQvlreeV3kta4YY+CLQ7Z5Qc8MXsu
PrLqH5/jvZ7oF6jdNl+81eNtkNVdm1S5DVrurUIlz8y6rjqjjJUyRMKg2hx1zhGJ
s2L0h0OUVZIS/SmotEBGMHU89Lfvc0ROdOgc+MXJglNWQTd/eZPzNetxBV56NDZr
Kvogg3ozW/qhd9c+gftTK7iYu3UAN+LU/WR+3hjd9c0LzibNtIKzlyxjD8n0MXVE
VImrnBA2kpRJu4EeAidqycEHyxQevG2+JB9dN4Tp//y4mfX2PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+dW3wA+LQfqRMhAzvVGNMtUq+0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw
NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvN2M4ZGVhMjYtZmQ1MS0z
MDE2LTkzNzEtY2Y4NDFkNjgwZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh
NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4
ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm
NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/15MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6lQCiaoXiFlI6PRm3cXeuSd41RH1IrffMdAA8YyN8EmKpMuX522sHi
YA8ESKJ7kN8a6SQIEn0H/t0IwZVRJzXIeqFBQuf9/bJDxrL0wc9fUHj8hTuc4RHe
7VSVzRP1ToGKVpDJ751qi1TtzTRxhszq9UEnt2ZYPPOtWMxBO7f24+7Mh8UKoPMS
ei66er8lFhJryyP/zVWldiXWqzUneEqS5yE3adNggKCNs10MA4UCsUKEog/8wSzk
lnI1kjazAKPDzTe1IWpLZrrIC87/gDbj7+Bh6Aup3W80lfgZAnk8OtSJftUhSt7Y
/YJOQlCy8KY0h/4Zit/A+1LSeMNX9Bo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:55:04 2025 by rpki-client