Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a77d3f9-fc5d-37f1-b09a-7d3ad78f0d29.roa
File:                     5a77d3f9-fc5d-37f1-b09a-7d3ad78f0d29.roa (raw, json)
Hash identifier:          jtOfE69R7KEn0vnyS/fo5qd3tP+051zH258uArkTuPg=
Subject key identifier:   A2:B3:C0:CC:E5:69:F2:EF:B1:5F:0E:84:97:FC:D9:61:D7:75:03:C3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF0655DBD4B53CB1D5740
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a77d3f9-fc5d-37f1-b09a-7d3ad78f0d29.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397241
IP address blocks:        209.173.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f0:65:5d:bd:4b:53:cb:1d:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=56196242-cc4e-4024-b7fc-da79865c3c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:3c:c4:dd:62:ab:87:78:a9:ae:b5:3d:16:
                    92:0e:00:72:dc:7a:89:1a:f9:65:04:47:85:ac:97:
                    2a:36:05:29:65:bc:79:3e:18:f5:f6:4c:ed:38:42:
                    7b:90:44:b3:72:02:78:6c:2d:27:c3:71:fb:2d:33:
                    bb:53:63:25:a7:1a:b5:d7:a8:96:6a:02:23:e4:6a:
                    91:c0:70:1f:ab:34:62:28:39:43:21:5c:67:7e:f1:
                    3d:49:92:76:f1:b9:c6:e1:b6:8d:53:83:3a:b7:30:
                    2d:88:e1:a1:8f:3b:86:35:bd:f6:a5:11:95:5c:07:
                    f8:c6:95:29:77:4c:98:c0:b8:c9:c9:7c:2d:99:53:
                    3b:4e:0b:0a:30:0d:48:c2:c7:d5:02:b1:26:ae:45:
                    10:ca:a1:dc:2a:bb:86:df:c9:42:93:bf:f6:30:b9:
                    bd:06:9f:02:32:c7:20:b3:c4:f3:73:62:5c:cd:79:
                    26:81:b4:55:78:55:36:54:40:9d:23:b2:f6:f7:d2:
                    aa:c2:2e:51:67:dc:78:04:79:e2:4e:4b:20:39:8c:
                    ba:3f:0e:b2:60:1e:92:18:0d:b6:f1:f1:47:f8:99:
                    6a:ec:6a:c2:d5:d1:4c:6c:86:18:7e:94:b9:51:bb:
                    10:1a:df:20:18:a3:5c:fe:99:f4:11:1d:bc:91:7a:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:C0:CC:E5:69:F2:EF:B1:5F:0E:84:97:FC:D9:61:D7:75:03:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a77d3f9-fc5d-37f1-b09a-7d3ad78f0d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9c:7c:cc:4a:db:ad:db:9c:1b:71:f7:3c:8d:f2:50:c2:45:
         1b:bd:35:d0:06:af:b3:93:17:f9:9b:12:3f:a0:d4:95:d1:ec:
         71:bc:d0:04:50:ad:ef:33:a1:c4:bc:d1:e2:49:e5:1f:2f:8c:
         fb:fa:9d:59:f1:9e:1b:7b:6d:c9:3d:1a:6d:07:fa:8b:bd:c5:
         52:3d:6f:70:1b:e0:77:76:b7:22:58:42:bf:81:a0:ce:10:9e:
         90:4f:b8:56:80:3b:45:77:df:32:82:b5:bf:30:32:32:13:d2:
         de:f2:8f:2f:72:3f:25:78:b9:0f:05:99:e2:5a:bf:20:ab:a4:
         c5:16:47:b5:d1:21:26:d0:fe:0f:fc:bd:28:9f:65:6a:07:47:
         cf:89:4e:39:01:2a:07:04:80:b8:5a:16:2d:e8:5c:05:c7:ec:
         93:07:7d:e1:6f:59:e6:4a:0e:31:ac:a0:9f:bb:30:f5:58:64:
         9a:d2:01:5c:eb:a1:fa:e4:f0:70:7b:90:85:88:61:ae:be:71:
         4b:33:10:a1:d9:b9:9b:44:46:09:d4:48:49:8e:6f:f0:70:65:
         ce:51:52:62:aa:9f:2c:fd:24:cc:7f:58:30:b8:15:cc:70:2a:
         c3:95:d2:ef:4c:21:3b:a3:31:19:87:4f:d6:90:18:e2:be:16:
         99:7d:a3:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf/BlXb1LU8sdV0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
NTYxOTYyNDItY2M0ZS00MDI0LWI3ZmMtZGE3OTg2NWMzYzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oo8xN1iq4d4qa61PRaSDgBy3HqJGvllBEeF
rJcqNgUpZbx5Phj19kztOEJ7kESzcgJ4bC0nw3H7LTO7U2Mlpxq116iWagIj5GqR
wHAfqzRiKDlDIVxnfvE9SZJ28bnG4baNU4M6tzAtiOGhjzuGNb32pRGVXAf4xpUp
d0yYwLjJyXwtmVM7TgsKMA1IwsfVArEmrkUQyqHcKruG38lCk7/2MLm9Bp8CMscg
s8Tzc2JczXkmgbRVeFU2VECdI7L299Kqwi5RZ9x4BHniTksgOYy6Pw6yYB6SGA22
8fFH+Jlq7GrC1dFMbIYYfpS5UbsQGt8gGKNc/pn0ER28kXoIBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKKzwMzlafLvsV8OhJf82WHXdQPDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWE3N2QzZjktZmM1ZC0z
N2YxLWIwOWEtN2QzYWQ3OGYwZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEycfMxK263bnBtx9zyN8lDCRRu9NdAGr7OTF/mbEj+g1JXR7HG80ARQ
re8zocS80eJJ5R8vjPv6nVnxnht7bck9Gm0H+ou9xVI9b3Ab4Hd2tyJYQr+BoM4Q
npBPuFaAO0V33zKCtb8wMjIT0t7yjy9yPyV4uQ8FmeJavyCrpMUWR7XRISbQ/g/8
vSifZWoHR8+JTjkBKgcEgLhaFi3oXAXH7JMHfeFvWeZKDjGsoJ+7MPVYZJrSAVzr
ofrk8HB7kIWIYa6+cUszEKHZuZtERgnUSEmOb/BwZc5RUmKqnyz9JMx/WDC4Fcxw
KsOV0u9MITujMRmHT9aQGOK+Fpl9o6c=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:09:08 2025 by rpki-client