Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/493df7eb-5298-369a-adb2-76f786c0b925.roa
File:                     493df7eb-5298-369a-adb2-76f786c0b925.roa (raw, json)
Hash identifier:          n2GvoHqIAsRCpopwwViiYLRIpb0PTlr6ylInJ/um7JU=
Subject key identifier:   C8:35:7E:E9:5C:FC:BA:3F:55:8D:98:8E:83:53:FE:9B:81:75:B5:F4
Certificate issuer:       /CN=45b0b374-863f-468e-a08d-342445e7a940
Certificate serial:       010D0C9F4328584993F9D9B68FED91D0BBF44880
Authority key identifier: 59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/493df7eb-5298-369a-adb2-76f786c0b925.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     63270
IP address blocks:        209.212.48.0/20 maxlen: 24
                          2604:9fc0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:d9:b6:8f:ed:91:d0:bb:f4:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b0b374-863f-468e-a08d-342445e7a940
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=ca7097d7-c9c6-42d9-a8e0-c04d15915ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:48:3e:ae:e2:e5:42:9a:2a:a3:4a:0a:dd:
                    97:e6:7d:31:28:e7:06:77:b8:cf:9a:9c:25:01:fc:
                    fb:72:c1:fa:8b:c0:f8:2a:b5:a0:9c:e2:a4:5c:e1:
                    b5:1f:d2:3b:5f:11:aa:c0:c3:f8:64:b7:c5:b1:6e:
                    92:1f:c2:06:db:5f:16:29:d9:91:f5:6a:c8:a3:3e:
                    67:87:9a:ec:95:4b:9e:c6:35:10:71:32:e3:63:20:
                    c5:67:00:c0:f0:2f:ef:c6:81:c1:2a:25:16:61:30:
                    20:c0:63:3c:89:2f:34:ff:c2:1d:ef:db:17:6a:a9:
                    34:e8:41:f6:e1:e1:b7:ed:6b:73:d4:dd:5a:5e:49:
                    96:29:9d:6f:cc:9b:08:f3:4e:20:ef:34:87:ca:c4:
                    1c:96:c7:3e:71:a5:15:5a:8c:96:be:4e:43:eb:ed:
                    e4:0d:90:ac:e3:be:72:7e:b1:79:e1:49:a9:70:6d:
                    9c:bf:7b:eb:d4:a4:23:19:7e:0b:a8:ff:ed:f0:66:
                    dd:55:a9:ab:46:e2:f2:9f:36:7d:11:a8:22:a6:4c:
                    69:4c:75:9d:3d:e1:9e:dd:90:0c:0e:24:a8:ab:9a:
                    27:61:b9:74:d3:b6:d2:10:8d:1a:62:6c:27:28:39:
                    40:e9:2e:2c:ff:bc:09:d5:13:30:68:30:6b:7d:03:
                    87:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:35:7E:E9:5C:FC:BA:3F:55:8D:98:8E:83:53:FE:9B:81:75:B5:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/493df7eb-5298-369a-adb2-76f786c0b925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl

            X509v3 Authority Key Identifier:
                keyid:59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.48.0/20
                IPv6:
                  2604:9fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7b:86:60:d4:e1:44:9c:6e:ab:5b:e4:46:9b:ad:0a:e3:ae:
         55:e5:13:7d:ba:6e:eb:eb:76:10:5b:a8:95:fd:db:80:bb:6c:
         21:80:42:3a:cd:91:39:46:85:f8:6e:4b:de:66:67:6e:48:9e:
         c3:02:0a:71:1b:b7:09:34:ae:e5:d1:b0:2d:a2:6e:5c:69:1d:
         f5:0b:50:34:91:67:fb:8a:35:47:56:3b:23:e2:b7:3c:34:09:
         24:1e:5d:31:ed:7c:b1:dc:c4:ea:d7:64:0b:db:df:a0:e5:d9:
         bd:68:46:f6:00:7b:f5:e9:95:be:b6:14:25:11:53:24:4c:c9:
         02:4a:2d:df:78:d9:0b:a2:89:28:9c:56:34:9a:ec:d0:9b:28:
         99:d2:92:54:b3:d8:dc:ff:e1:aa:32:af:fc:0d:48:83:a3:6c:
         d1:5c:88:41:37:1d:2e:0a:d1:84:c9:7b:3c:0d:66:7f:01:e6:
         4e:da:03:d9:d6:3d:b7:5d:ec:9e:dd:d0:92:c8:1d:84:e9:26:
         0f:13:3f:fb:9f:37:4e:c3:6f:d1:dc:ad:63:22:4d:db:9f:62:
         95:92:05:16:53:d0:cc:17:14:89:91:35:ca:47:ce:89:34:26:
         13:14:8e:07:96:b0:f5:4a:cc:78:06:4d:9f:73:06:ac:e7:2d:
         46:8c:f7:25
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEmT+dm2j+2R0Lv0SIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDViMGIzNzQtODYzZi00NjhlLWEwOGQtMzQyNDQ1ZTdh
OTQwMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
Y2E3MDk3ZDctYzljNi00MmQ5LWE4ZTAtYzA0ZDE1OTE1ZWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8JIPq7i5UKaKqNKCt2X5n0xKOcGd7jPmpwl
Afz7csH6i8D4KrWgnOKkXOG1H9I7XxGqwMP4ZLfFsW6SH8IG218WKdmR9WrIoz5n
h5rslUuexjUQcTLjYyDFZwDA8C/vxoHBKiUWYTAgwGM8iS80/8Id79sXaqk06EH2
4eG37Wtz1N1aXkmWKZ1vzJsI804g7zSHysQclsc+caUVWoyWvk5D6+3kDZCs475y
frF54UmpcG2cv3vr1KQjGX4LqP/t8GbdVamrRuLynzZ9EagipkxpTHWdPeGe3ZAM
DiSoq5onYbl007bSEI0aYmwnKDlA6S4s/7wJ1RMwaDBrfQOHXwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFMg1fulc/Lo/VY2YjoNT/puBdbX0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWIw
YjM3NC04NjNmLTQ2OGUtYTA4ZC0zNDI0NDVlN2E5NDAvNDkzZGY3ZWItNTI5OC0z
NjlhLWFkYjItNzZmNzg2YzBiOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDViMGIzNzQtODYzZi00NjhlLWEw
OGQtMzQyNDQ1ZTdhOTQwLzQ1YjBiMzc0LTg2M2YtNDY4ZS1hMDhkLTM0MjQ0NWU3
YTk0MC5jcmwwHwYDVR0jBBgwFoAUWfqRqOr7Ky3+V6oj1tTVl2+8au4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80NWIwYjM3NC04NjNmLTQ2OGUtYTA4ZC0zNDI0
NDVlN2E5NDAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE0dQwMA0E
AgACMAcDBQAmBJ/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAGp7hmDU4UScbqtb5EabrQrjrlXlE326buvr
dhBbqJX924C7bCGAQjrNkTlGhfhuS95mZ25InsMCCnEbtwk0ruXRsC2iblxpHfUL
UDSRZ/uKNUdWOyPitzw0CSQeXTHtfLHcxOrXZAvb36Dl2b1oRvYAe/Xplb62FCUR
UyRMyQJKLd942QuiiSicVjSa7NCbKJnSklSz2Nz/4aoyr/wNSIOjbNFciEE3HS4K
0YTJezwNZn8B5k7aA9nWPbdd7J7d0JLIHYTpJg8TP/ufN07Db9HcrWMiTdufYpWS
BRZT0MwXFImRNcpHzok0JhMUjgeWsPVKzHgGTZ9zBqznLUaM9yU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:58:46 2025 by rpki-client