Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8de79c85-303c-3f1c-bc94-1b1504bb1df9.roa
File:                     8de79c85-303c-3f1c-bc94-1b1504bb1df9.roa (raw, json)
Hash identifier:          0U/4gZvn1DrZFGhnu+gfTTeap/l3smQffPafGqH8YU0=
Subject key identifier:   6C:44:A7:BF:C9:4D:76:19:4D:C5:6D:7C:E9:C3:AB:CC:CD:69:E8:76
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F43285849E91FA59BCDAF78A485D3DCA8
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8de79c85-303c-3f1c-bc94-1b1504bb1df9.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     394437
IP address blocks:        72.46.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a5:9b:cd:af:78:a4:85:d3:dc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=ea3e074b-7a0b-459b-9534-c27394e13a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:95:00:86:a3:cb:c6:cd:cf:84:e3:b2:55:
                    50:46:35:2a:56:4a:65:0c:21:6e:c2:b1:0e:12:4a:
                    ab:d7:fe:18:58:86:0d:ac:f8:ca:2d:d3:50:92:c3:
                    62:3b:92:36:1e:ba:17:65:55:51:0b:e3:6d:d5:47:
                    9d:64:f1:08:b6:b2:80:7e:53:43:1b:37:51:c0:9d:
                    78:86:3a:04:09:7c:9a:f5:45:26:d8:a2:38:2e:0f:
                    c6:a1:3f:78:75:e3:56:ac:a6:3a:11:73:bf:60:f4:
                    83:0f:ec:64:d3:0a:74:ca:f5:12:88:b7:7f:67:c1:
                    d2:a0:c1:b3:dc:46:04:63:09:45:f5:8c:44:82:f5:
                    fc:f6:c4:e1:2e:4d:e0:af:54:de:ea:68:f8:98:56:
                    aa:fd:6b:d5:28:a2:a0:da:98:48:b8:1a:27:72:61:
                    c9:a8:f4:b4:c9:00:49:62:3f:6f:4a:1f:2d:1d:ff:
                    56:2f:04:8e:5d:5d:0a:30:7f:78:65:5a:e5:9e:67:
                    42:6d:0a:45:89:26:f4:fe:65:be:83:4d:98:c0:21:
                    d7:b4:36:4f:7a:8c:10:b5:64:7f:f1:81:19:6b:1f:
                    67:b8:3b:f2:14:24:ed:fe:07:79:02:f5:27:de:78:
                    ea:2c:65:93:0c:f1:2e:2e:ed:76:52:64:d5:08:10:
                    17:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:44:A7:BF:C9:4D:76:19:4D:C5:6D:7C:E9:C3:AB:CC:CD:69:E8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8de79c85-303c-3f1c-bc94-1b1504bb1df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:00:a5:dd:3e:bf:0f:b2:9f:df:ea:b8:fe:a2:01:e3:0e:55:
         aa:26:ea:75:23:f1:b0:ac:b1:d3:4f:f2:4c:1a:d2:b6:a0:71:
         e9:03:0a:60:0b:f3:00:32:5f:26:fd:b1:c8:be:c9:83:cf:1f:
         92:aa:bb:96:52:82:55:75:51:4e:89:3f:39:10:03:4e:6b:e8:
         e6:27:04:90:9e:92:73:84:16:ed:74:77:c9:7f:32:bd:5e:cf:
         db:55:5f:33:18:d7:d9:7e:3c:60:e6:a6:f0:6d:4d:05:b5:90:
         f7:c5:d4:a8:d0:c9:ec:6b:50:05:49:65:57:48:2a:8d:54:eb:
         5f:55:17:05:a1:a7:b2:14:47:79:d3:ee:5d:3a:4e:a2:e0:34:
         a8:3a:32:85:74:4e:1b:4d:7a:57:7c:c0:a7:4c:78:aa:2e:35:
         f5:77:53:8e:43:94:cd:07:40:ea:a3:71:14:56:77:21:57:c0:
         e6:9c:15:ba:04:ca:53:ed:88:06:52:ef:d6:a3:73:7f:5b:41:
         38:6c:40:1a:6b:60:83:0b:9e:93:f7:ee:69:54:4f:c2:e0:3d:
         eb:ed:3c:2b:df:ea:51:a1:05:66:72:6f:eb:b1:31:ba:35:d5:
         6a:4d:f8:bd:ec:90:3d:37:e0:1e:f0:28:01:cb:7f:7f:36:e7:
         ef:08:f4:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6Wbza94pIXT3KgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk
ZWEzZTA3NGItN2EwYi00NTliLTk1MzQtYzI3Mzk0ZTEzYTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1SVAIajy8bNz4TjslVQRjUqVkplDCFuwrEO
Ekqr1/4YWIYNrPjKLdNQksNiO5I2HroXZVVRC+Nt1UedZPEItrKAflNDGzdRwJ14
hjoECXya9UUm2KI4Lg/GoT94deNWrKY6EXO/YPSDD+xk0wp0yvUSiLd/Z8HSoMGz
3EYEYwlF9YxEgvX89sThLk3gr1Te6mj4mFaq/WvVKKKg2phIuBoncmHJqPS0yQBJ
Yj9vSh8tHf9WLwSOXV0KMH94ZVrlnmdCbQpFiSb0/mW+g02YwCHXtDZPeowQtWR/
8YEZax9nuDvyFCTt/gd5AvUn3njqLGWTDPEuLu12UmTVCBAXGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxEp7/JTXYZTcVtfOnDq8zNaeh2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOGRlNzljODUtMzAzYy0z
ZjFjLWJjOTQtMWIxNTA0YmIxZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSC5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0Apd0+vw+yn9/quP6iAeMOVaom6nUj8bCssdNP8kwa0ragcekDCmAL
8wAyXyb9sci+yYPPH5Kqu5ZSglV1UU6JPzkQA05r6OYnBJCeknOEFu10d8l/Mr1e
z9tVXzMY19l+PGDmpvBtTQW1kPfF1KjQyexrUAVJZVdIKo1U619VFwWhp7IUR3nT
7l06TqLgNKg6MoV0ThtNeld8wKdMeKouNfV3U45DlM0HQOqjcRRWdyFXwOacFboE
ylPtiAZS79ajc39bQThsQBprYIMLnpP37mlUT8LgPevtPCvf6lGhBWZyb+uxMbo1
1WpN+L3skD034B7wKAHLf3825+8I9CM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:18:56 2025 by rpki-client