Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa
File:                     d6d8cee2-6301-3063-826d-b91ab0fc7577.roa (raw, json)
Hash identifier:          bVmQvTaAwqRG4palVnjjeGAlF+91nIa2xo4K35B5cX8=
Subject key identifier:   E9:F4:59:7F:54:31:3D:3F:89:04:45:7B:68:58:E9:84:A3:A4:DF:42
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584993F9E305157F1736D55F1700
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     13332
IP address blocks:        172.84.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:e3:05:15:7f:17:36:d5:5f:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=b546ac7c-ff0a-40a4-be88-891d4e17cbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3e:47:1f:16:52:c5:17:12:3a:79:79:81:ff:
                    60:56:2c:b5:fb:d1:06:f0:99:15:75:ba:86:f9:38:
                    6c:44:ea:ed:d6:39:25:5d:ac:f7:27:50:98:be:64:
                    d8:91:b7:4d:90:7f:90:ae:f4:6d:a1:60:5b:6a:ac:
                    39:cd:d3:91:62:cb:41:41:98:ad:14:13:8d:ef:5d:
                    aa:4e:75:ac:a4:50:f4:2d:72:d9:e4:43:9a:9c:26:
                    ae:3f:fd:1a:3a:24:38:38:7e:63:38:1d:02:12:c1:
                    62:fa:22:46:64:26:8a:66:c2:35:63:fe:eb:58:a1:
                    5c:fe:c7:e7:af:f7:d8:0f:ee:68:dd:e9:a4:c5:f2:
                    f6:12:7a:a9:30:ea:ab:d3:fc:26:18:78:70:48:77:
                    73:51:29:79:15:ed:c6:22:55:5c:61:9b:22:83:35:
                    54:79:ef:01:15:9d:70:b9:9f:67:0d:27:2d:76:f4:
                    34:da:32:05:2e:6d:5d:9b:61:55:c9:bc:e6:d2:a4:
                    7d:00:03:f7:ba:34:8d:f3:74:24:db:8c:55:f6:04:
                    ae:a9:83:63:f1:b5:28:c7:2c:50:f6:b2:49:7f:ee:
                    7d:6f:3f:5f:14:1c:7d:29:a1:d8:cb:1e:44:f5:53:
                    cf:d1:db:9b:fc:f1:1a:4d:5c:67:7d:ac:6d:cc:9c:
                    66:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F4:59:7F:54:31:3D:3F:89:04:45:7B:68:58:E9:84:A3:A4:DF:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:17:c1:ab:9f:b6:47:02:8c:26:33:f0:e6:b9:e4:b8:61:c8:
         42:3e:52:44:cf:ff:86:7e:1c:ed:f1:fb:aa:01:58:60:37:e4:
         4f:a2:ae:de:30:c8:b0:df:5b:5a:52:0d:ff:df:2d:3b:27:e5:
         97:4a:11:37:42:ee:5e:46:03:49:d0:99:0e:c4:6f:d0:54:58:
         19:42:d7:d2:57:40:a4:35:5c:fb:c1:2f:f7:e8:ac:ab:7e:4d:
         6a:24:dc:a1:8c:22:ee:d0:b6:b2:9d:8f:fb:c3:2f:08:30:a9:
         54:49:c9:db:5f:1a:5d:9d:da:39:8d:38:56:fd:d9:e0:d6:28:
         d9:50:15:6f:ce:06:98:c3:b2:93:14:10:4a:db:4f:d8:a8:19:
         95:53:cf:37:8c:ac:f2:37:1d:dc:f7:29:5a:f8:d5:53:ef:15:
         b9:d5:40:fb:2c:78:84:00:e3:b2:2b:64:1e:9d:6e:75:d3:31:
         06:d4:f8:cc:b8:89:b0:6a:c4:fc:16:fb:a5:5d:b5:b9:21:66:
         be:5d:ef:f0:7f:cf:da:1c:24:33:ee:d6:60:e9:30:c4:c8:df:
         1f:f9:3f:23:29:88:f4:eb:ee:7e:ea:2f:dc:f8:e5:f7:97:8c:
         c0:4f:fc:cc:e0:35:5c:9e:d7:82:56:77:9e:2e:c8:d1:40:c4:
         52:25:10:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eMFFX8XNtVfFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz
NGQ2MB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
YjU0NmFjN2MtZmYwYS00MGE0LWJlODgtODkxZDRlMTdjYmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz5HHxZSxRcSOnl5gf9gViy1+9EG8JkVdbqG
+ThsROrt1jklXaz3J1CYvmTYkbdNkH+QrvRtoWBbaqw5zdORYstBQZitFBON712q
TnWspFD0LXLZ5EOanCauP/0aOiQ4OH5jOB0CEsFi+iJGZCaKZsI1Y/7rWKFc/sfn
r/fYD+5o3emkxfL2EnqpMOqr0/wmGHhwSHdzUSl5Fe3GIlVcYZsigzVUee8BFZ1w
uZ9nDSctdvQ02jIFLm1dm2FVybzm0qR9AAP3ujSN83Qk24xV9gSuqYNj8bUoxyxQ
9rJJf+59bz9fFBx9KaHYyx5E9VPP0dub/PEaTVxnfaxtzJxmwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOn0WX9UMT0/iQRFe2hY6YSjpN9CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey
NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvZDZkOGNlZTItNjMwMS0z
MDYzLTgyNmQtYjkxYWIwZmM3NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0
YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1
MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2
MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFR8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsXwauftkcCjCYz8Oa55LhhyEI+UkTP/4Z+HO3x+6oBWGA35E+irt4w
yLDfW1pSDf/fLTsn5ZdKETdC7l5GA0nQmQ7Eb9BUWBlC19JXQKQ1XPvBL/forKt+
TWok3KGMIu7QtrKdj/vDLwgwqVRJydtfGl2d2jmNOFb92eDWKNlQFW/OBpjDspMU
EErbT9ioGZVTzzeMrPI3Hdz3KVr41VPvFbnVQPsseIQA47IrZB6dbnXTMQbU+My4
ibBqxPwW+6VdtbkhZr5d7/B/z9ocJDPu1mDpMMTI3x/5PyMpiPTr7n7qL9z45feX
jMBP/MzgNVye14JWd54uyNFAxFIlEHk=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:53:39 2025 by rpki-client