Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b62d59-d3e9-3c92-b4a6-077ff54a73ac.roa
File:                     f3b62d59-d3e9-3c92-b4a6-077ff54a73ac.roa (raw, json)
Hash identifier:          5iLsuukmGDs9aOlU83WrDc1LSUrmJgijIJl2ISZFXfk=
Subject key identifier:   5B:52:30:6B:39:36:4E:E8:1B:7E:36:59:41:5E:6C:AF:35:D0:D0:A4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59F73A7C366252897E0CE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b62d59-d3e9-3c92-b4a6-077ff54a73ac.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397215
IP address blocks:        204.74.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:f7:3a:7c:36:62:52:89:7e:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=c8a4c989-b8e5-44c8-9ccf-07c8cc61238a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:fb:ea:1f:32:a0:d7:f2:68:f5:60:39:9b:
                    26:44:a9:1e:00:f4:12:a0:b9:bd:a8:23:a4:d4:a4:
                    9e:fe:34:fb:ed:da:07:8f:8f:be:68:8d:bc:0a:fa:
                    0f:68:09:5f:74:c3:09:0d:8d:0a:dc:08:d9:e7:67:
                    7c:37:b6:1c:1b:71:66:15:ea:44:96:16:fd:aa:51:
                    85:5b:6c:e5:c7:73:c1:50:53:e6:06:0f:86:76:01:
                    3f:2f:a0:29:be:e0:dc:e7:33:15:5f:7d:52:56:da:
                    45:0c:54:4a:8b:ab:21:f7:2f:89:0c:89:5f:bf:c2:
                    20:89:d2:b6:af:c0:f7:69:ce:c0:20:0e:41:57:f5:
                    db:b2:3a:6c:71:03:4e:d5:43:56:f5:f9:c6:50:ec:
                    f8:8e:52:ff:8d:b1:c1:75:b3:46:aa:84:81:7f:d9:
                    a5:8d:5c:3f:87:06:3b:13:83:ee:a7:07:dd:f8:af:
                    b5:c7:34:18:8a:1c:3d:12:8a:e5:02:06:7b:2b:07:
                    4e:78:c2:cf:31:14:89:d4:b0:22:7e:b9:3c:6e:d1:
                    aa:f8:05:93:86:e5:7e:f5:23:f8:43:6c:25:97:53:
                    e1:db:18:45:54:cb:62:53:03:80:b8:f9:97:ba:ea:
                    18:23:c1:0e:5e:f5:db:af:66:e3:30:29:7a:91:92:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:52:30:6B:39:36:4E:E8:1B:7E:36:59:41:5E:6C:AF:35:D0:D0:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b62d59-d3e9-3c92-b4a6-077ff54a73ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f2:16:31:f0:29:1f:dc:93:f1:0d:7d:98:81:d1:0b:15:d3:
         d6:33:5f:aa:97:e7:f7:51:b1:73:71:f4:4f:f4:08:c6:be:39:
         37:5d:37:37:56:ea:f8:c5:02:70:36:1e:df:c2:dc:5f:0b:c5:
         a9:6f:31:bf:a5:96:b1:ff:d3:90:61:d6:4e:7a:45:5e:be:80:
         a2:65:02:bd:4a:c4:b4:7a:8e:50:f5:65:c9:b3:ee:68:64:1f:
         1b:e5:31:ff:66:44:94:2c:b1:6e:75:36:91:85:71:96:6e:c6:
         ca:64:fd:49:c3:f9:06:b1:e9:38:46:c4:a2:82:d4:aa:c8:75:
         b4:36:e1:79:4c:55:6d:4b:98:4a:54:16:ae:1d:db:3a:3b:52:
         00:84:dd:04:70:f9:af:54:95:76:0d:33:12:e6:ba:2e:41:04:
         b3:0e:e2:41:08:6a:30:98:2c:dc:6e:d1:66:2b:d8:da:1a:79:
         92:71:06:39:95:f4:59:02:9f:2c:7d:4f:8e:d7:7b:f7:5a:e7:
         82:fa:62:7b:c0:a8:dd:dd:f2:9d:7c:dc:2d:b6:34:76:83:6d:
         7f:5c:1b:5f:5a:81:6d:1c:55:aa:b5:34:e3:30:c2:b2:61:df:
         b9:a4:2f:33:48:b8:fa:31:2b:0e:c3:6d:48:19:04:64:03:de:
         d0:30:00:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWfc6fDZiUol+DOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
YzhhNGM5ODktYjhlNS00NGM4LTljY2YtMDdjOGNjNjEyMzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cz76h8yoNfyaPVgOZsmRKkeAPQSoLm9qCOk
1KSe/jT77doHj4++aI28CvoPaAlfdMMJDY0K3AjZ52d8N7YcG3FmFepElhb9qlGF
W2zlx3PBUFPmBg+GdgE/L6ApvuDc5zMVX31SVtpFDFRKi6sh9y+JDIlfv8IgidK2
r8D3ac7AIA5BV/XbsjpscQNO1UNW9fnGUOz4jlL/jbHBdbNGqoSBf9mljVw/hwY7
E4Pupwfd+K+1xzQYihw9EorlAgZ7KwdOeMLPMRSJ1LAifrk8btGq+AWThuV+9SP4
Q2wll1Ph2xhFVMtiUwOAuPmXuuoYI8EOXvXbr2bjMCl6kZLcxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtSMGs5Nk7oG342WUFebK810NCkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjNiNjJkNTktZDNlOS0z
YzkyLWI0YTYtMDc3ZmY1NGE3M2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEplMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzyFjHwKR/ck/ENfZiB0QsV09YzX6qX5/dRsXNx9E/0CMa+OTddNzdW
6vjFAnA2Ht/C3F8LxalvMb+llrH/05Bh1k56RV6+gKJlAr1KxLR6jlD1Zcmz7mhk
HxvlMf9mRJQssW51NpGFcZZuxspk/UnD+Qax6ThGxKKC1KrIdbQ24XlMVW1LmEpU
Fq4d2zo7UgCE3QRw+a9UlXYNMxLmui5BBLMO4kEIajCYLNxu0WYr2NoaeZJxBjmV
9FkCnyx9T47Xe/da54L6YnvAqN3d8p183C22NHaDbX9cG19agW0cVaq1NOMwwrJh
37mkLzNIuPoxKw7DbUgZBGQD3tAwAGw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:31:34 2025 by rpki-client