Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/221130ec-2300-3246-a448-52ae6483117b.roa
File:                     221130ec-2300-3246-a448-52ae6483117b.roa (raw, json)
Hash identifier:          8BrW00E0i99KDJyfSQGmm/DxzQh+yrATwv6ektBXikI=
Subject key identifier:   65:87:57:68:20:98:80:99:D1:1E:7C:95:32:27:92:95:DD:B0:0A:72
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849898667636F93036A7B0C7188
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/221130ec-2300-3246-a448-52ae6483117b.roa
Signing time:             Tue 15 Apr 2025 19:10:23 +0000
ROA not before:           Tue 15 Apr 2025 19:10:23 +0000
ROA not after:            Mon 14 Jul 2025 19:10:23 +0000
asID:                     6984
IP address blocks:        63.26.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:86:67:63:6f:93:03:6a:7b:0c:71:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:10:23 2025 GMT
            Not After : Jul 14 19:10:23 2025 GMT
        Subject: CN=7fac4490-8806-4626-a552-d58053c17e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:38:e8:18:75:61:b9:de:90:43:d0:d6:61:
                    9d:e8:88:66:f9:9c:9b:85:64:a0:3a:bb:6b:c2:a2:
                    32:cb:e4:02:34:be:02:a9:62:31:21:4f:f0:bf:07:
                    1d:05:6f:b8:d4:da:f4:6b:98:08:29:39:4a:4c:cd:
                    41:ab:29:28:42:ac:29:2e:c0:3f:8b:8b:5f:a0:e0:
                    a4:26:eb:89:2a:3c:2c:81:cc:a9:4b:d2:99:b3:d5:
                    2c:0e:29:f6:d3:fc:6f:dc:4d:37:16:b5:a0:ac:45:
                    28:c3:34:36:10:bd:4a:6e:6e:31:34:68:73:ea:d3:
                    c6:4c:1b:f5:ee:c9:0e:14:f6:8f:28:05:87:d6:c4:
                    0f:96:32:6c:2c:ed:23:87:46:69:dd:cb:23:e2:84:
                    f8:ed:30:0d:ab:54:53:89:61:30:2c:6d:a8:fa:f2:
                    ff:29:0f:7b:86:58:09:11:c0:8e:1b:ec:a5:c3:89:
                    2c:9d:af:5f:fa:fb:98:b9:5a:42:d1:ab:94:eb:de:
                    f1:c7:2c:69:ca:8e:61:9a:2d:2e:c5:e8:b7:df:84:
                    52:c7:21:00:21:41:ba:2c:69:c3:97:0d:ca:c6:8c:
                    70:5b:9f:0b:ed:fd:bc:07:4c:ae:0b:f3:39:79:b0:
                    04:2d:22:aa:ae:74:5c:e4:1c:81:7f:d0:4a:d3:51:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:87:57:68:20:98:80:99:D1:1E:7C:95:32:27:92:95:DD:B0:0A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/221130ec-2300-3246-a448-52ae6483117b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.26.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:fc:4c:23:e5:af:35:b9:ec:21:07:e3:b6:c0:e7:ef:68:a6:
         a3:5d:48:cb:a4:f3:d5:a3:4b:63:d2:c3:5a:44:ed:61:b3:ee:
         7b:48:ce:5b:69:19:98:cd:44:39:39:1a:62:31:b5:fa:cd:f3:
         3c:df:b9:24:d0:e6:e6:7e:91:af:8f:58:46:01:39:cf:e4:90:
         4a:4c:bc:97:8e:da:9b:9d:64:f4:8c:63:cf:f5:ae:90:29:bb:
         5f:9e:dc:f6:13:b0:68:a2:e2:46:39:6f:b9:7d:5d:37:d9:44:
         8e:9a:d0:8d:9a:bb:9f:ea:0e:3b:88:da:81:4a:56:92:78:0d:
         a2:84:f2:52:68:3b:35:85:da:7d:38:10:11:e7:78:8a:59:73:
         e1:d0:ae:0c:b7:5b:bc:c9:56:5e:79:4a:f0:20:4f:04:7c:2d:
         dd:6a:a1:55:4c:a0:72:dc:22:ce:e5:5f:91:48:2e:36:71:bf:
         6c:53:4f:b3:97:99:25:b4:02:f4:19:bf:32:20:74:7b:30:ed:
         7a:14:92:e9:8e:3c:f1:f0:e2:57:7c:34:67:ba:eb:72:60:a9:
         db:91:88:36:9d:2d:65:31:77:56:82:11:2b:8c:d6:1a:f1:c8:
         24:1f:a3:0b:a0:b7:a7:09:c8:22:ae:e2:39:af:00:bd:11:4b:
         fa:30:1f:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmJhmdjb5MDansMcYgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQxNTE5MTAyM1oXDTI1MDcxNDE5MTAyM1owLzEtMCsGA1UEAxMk
N2ZhYzQ0OTAtODgwNi00NjI2LWE1NTItZDU4MDUzYzE3ZTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3446Bh1YbnekEPQ1mGd6Ihm+ZybhWSgOrtr
wqIyy+QCNL4CqWIxIU/wvwcdBW+41Nr0a5gIKTlKTM1BqykoQqwpLsA/i4tfoOCk
JuuJKjwsgcypS9KZs9UsDin20/xv3E03FrWgrEUowzQ2EL1Kbm4xNGhz6tPGTBv1
7skOFPaPKAWH1sQPljJsLO0jh0Zp3csj4oT47TANq1RTiWEwLG2o+vL/KQ97hlgJ
EcCOG+ylw4ksna9f+vuYuVpC0auU697xxyxpyo5hmi0uxei334RSxyEAIUG6LGnD
lw3KxoxwW58L7f28B0yuC/M5ebAELSKqrnRc5ByBf9BK01Gl3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGWHV2ggmICZ0R58lTInkpXdsApyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjIxMTMwZWMtMjMwMC0z
MjQ2LWE0NDgtNTJhZTY0ODMxMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPxoIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABv8TCPlrzW57CEH47bA5+9opqNdSMuk89WjS2PSw1pE7WGz7ntIzltp
GZjNRDk5GmIxtfrN8zzfuSTQ5uZ+ka+PWEYBOc/kkEpMvJeO2pudZPSMY8/1rpAp
u1+e3PYTsGii4kY5b7l9XTfZRI6a0I2au5/qDjuI2oFKVpJ4DaKE8lJoOzWF2n04
EBHneIpZc+HQrgy3W7zJVl55SvAgTwR8Ld1qoVVMoHLcIs7lX5FILjZxv2xTT7OX
mSW0AvQZvzIgdHsw7XoUkumOPPHw4ld8NGe663JgqduRiDadLWUxd1aCESuM1hrx
yCQfowugt6cJyCKu4jmvAL0RS/owH+s=
-----END CERTIFICATE-----
Generated at Thu May 1 13:33:55 2025 by rpki-client