Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa
File:                     2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa (raw, json)
Hash identifier:          wThRDl1Cg+V0X26feWI7Bw5dbmj05cSnMGIjjTduLpY=
Subject key identifier:   E0:A4:FE:88:CC:66:57:E3:14:3B:BF:4B:53:C3:80:49:81:CC:EB:2D
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F43285849AE7F4009FA6EAFEDD0AFD420
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     2615
IP address blocks:        147.1.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:40:09:fa:6e:af:ed:d0:af:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=8b2adbe9-6a9f-47fc-8baf-49b7b55c14be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:19:57:ce:d3:94:61:3e:ce:60:a3:04:dc:
                    ea:90:b1:49:a0:eb:ee:bd:b1:41:71:e0:d1:01:24:
                    d8:d3:dd:5e:84:9e:ee:a1:aa:de:c6:a7:2d:02:96:
                    23:32:09:25:e8:ca:26:d5:c7:bb:2e:c9:cc:f6:bc:
                    29:2f:25:85:1c:23:b2:eb:ac:24:bc:5e:61:d8:be:
                    50:3d:37:8b:68:da:85:0d:cb:42:31:75:ae:c7:f0:
                    f8:36:1e:d7:66:d2:7e:38:d8:bd:e1:b4:d3:e8:c2:
                    cd:3d:a9:b7:00:83:08:8c:b9:0d:d3:72:3e:1d:28:
                    01:7b:ea:b6:5b:c2:e4:fa:4c:5c:e8:cc:b9:d3:c0:
                    82:0a:05:f0:f2:54:d4:e8:d0:fe:df:22:0d:72:2c:
                    fe:6b:85:9e:3e:29:8c:d4:f5:7e:f8:7b:27:f6:11:
                    9e:bc:33:64:74:33:ee:26:15:38:8b:d2:58:b7:cd:
                    3b:91:98:b8:89:b4:ba:42:9d:2b:29:0a:a4:38:87:
                    68:c3:a8:5e:20:2e:07:b9:68:ba:f7:ae:d1:67:1e:
                    6f:9a:bd:ff:cd:06:98:88:63:93:c7:13:12:b6:28:
                    3f:3a:bf:b6:9d:2b:48:5d:5f:06:03:62:d3:ad:17:
                    fd:64:06:2a:c2:b4:8d:62:d1:88:16:19:7b:45:8b:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A4:FE:88:CC:66:57:E3:14:3B:BF:4B:53:C3:80:49:81:CC:EB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:db:ba:39:9a:8f:ff:ca:5f:8d:61:24:8b:b1:72:d6:0d:
         a5:29:96:d8:02:60:98:a1:4b:1c:96:5d:54:b2:ba:c4:f2:da:
         f8:a9:db:78:e7:3e:c0:64:ae:6e:b2:3f:3f:9f:15:90:e6:c1:
         9c:16:b4:68:51:9b:d5:60:9a:53:8a:4b:0b:12:68:3a:0d:5b:
         90:1e:78:8f:84:86:2f:c4:e3:8e:ae:aa:fd:dc:4a:9f:6b:5b:
         25:79:d0:05:f4:60:75:34:53:8d:50:dd:f6:53:69:df:44:eb:
         2b:9b:9a:ad:c2:50:5b:1c:d1:47:af:1b:b0:7d:80:e7:dd:6b:
         09:08:58:57:bf:8c:e2:36:b1:d4:51:24:8f:06:20:50:89:8a:
         66:c8:fe:4a:02:75:ff:62:7d:96:ae:31:40:90:b7:af:3e:13:
         62:df:e3:15:d8:15:3b:68:dd:95:79:39:c4:1e:c3:a9:87:c4:
         a3:87:fc:22:7b:31:9f:01:61:6b:7c:31:7f:71:b5:b4:40:6b:
         29:b6:21:20:45:06:3a:07:7c:be:aa:a5:6a:ff:79:29:29:93:
         a9:09:ae:79:a5:e2:ba:e8:4b:11:6f:79:13:42:aa:2c:3e:a3:
         6f:89:2f:74:09:ad:47:e5:4d:dd:36:dc:e1:d2:b5:5e:84:e2:
         fb:34:3f:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0AJ+m6v7dCv1CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk
OGIyYWRiZTktNmE5Zi00N2ZjLThiYWYtNDliN2I1NWMxNGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/YZV87TlGE+zmCjBNzqkLFJoOvuvbFBceDR
ASTY091ehJ7uoarexqctApYjMgkl6Mom1ce7LsnM9rwpLyWFHCOy66wkvF5h2L5Q
PTeLaNqFDctCMXWux/D4Nh7XZtJ+ONi94bTT6MLNPam3AIMIjLkN03I+HSgBe+q2
W8Lk+kxc6My508CCCgXw8lTU6ND+3yINciz+a4WePimM1PV++Hsn9hGevDNkdDPu
JhU4i9JYt807kZi4ibS6Qp0rKQqkOIdow6heIC4HuWi6967RZx5vmr3/zQaYiGOT
xxMStig/Or+2nStIXV8GA2LTrRf9ZAYqwrSNYtGIFhl7RYtJQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOCk/ojMZlfjFDu/S1PDgEmBzOstMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmNkM2M3NzItMTEyYy0z
MjIyLWFlOGUtN2FmMDRiZjFkNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3Y27o5mo//yl+NYSSLsXLWDaUpltgCYJihSxyWXVSyusTy2vip23jn
PsBkrm6yPz+fFZDmwZwWtGhRm9VgmlOKSwsSaDoNW5AeeI+Ehi/E446uqv3cSp9r
WyV50AX0YHU0U41Q3fZTad9E6yubmq3CUFsc0UevG7B9gOfdawkIWFe/jOI2sdRR
JI8GIFCJimbI/koCdf9ifZauMUCQt68+E2Lf4xXYFTto3ZV5OcQew6mHxKOH/CJ7
MZ8BYWt8MX9xtbRAaym2ISBFBjoHfL6qpWr/eSkpk6kJrnml4rroSxFveRNCqiw+
o2+JL3QJrUflTd023OHStV6E4vs0Pxw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:46 2025 by rpki-client