Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/637ec565-5a93-39a0-85c1-1851ef668bbb.roa
File:                     637ec565-5a93-39a0-85c1-1851ef668bbb.roa (raw, json)
Hash identifier:          c7uCFeezBmvcc4SpiclxA46DJFVOIZ3OrqDWSELH7Io=
Subject key identifier:   61:A5:32:F3:B4:01:0F:43:B8:B0:8E:49:E2:CB:08:3A:72:9D:2F:7B
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F43285849B6DF5C2E2575706224AA7680
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/637ec565-5a93-39a0-85c1-1851ef668bbb.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     53535
IP address blocks:        199.180.180.0/22 maxlen: 24
                          2001:500:f0::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5c:2e:25:75:70:62:24:aa:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=97de8e77-5519-4258-85ba-bd7cec275ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4e:57:1d:68:1b:7c:b5:eb:bb:b4:43:2c:57:
                    4d:d7:09:3a:48:43:6f:56:11:71:3d:85:2b:c5:fc:
                    36:ad:e7:7c:ea:6b:2d:3c:64:56:3a:72:29:10:46:
                    f4:ee:ea:52:5f:ca:cc:b3:0e:5f:81:9c:57:16:84:
                    3e:c9:d4:2d:52:94:be:9f:df:c6:aa:74:83:fe:30:
                    7f:70:ed:30:92:c2:ba:22:2f:7a:5f:fb:f7:90:17:
                    73:63:fb:71:00:96:f5:ff:dc:9b:79:88:af:89:1f:
                    69:8d:b1:89:7f:d6:39:52:f9:82:9f:56:fe:29:a6:
                    15:43:c3:a0:93:37:14:e0:cc:2d:a4:cf:b4:01:91:
                    56:2c:09:eb:c9:d4:0f:f9:dd:3f:92:e9:94:60:00:
                    dd:2e:bf:28:d1:b9:e4:c9:45:8e:f4:d3:99:e1:f8:
                    29:ac:90:e7:20:5e:d5:c2:28:8e:69:89:67:2c:c0:
                    ee:db:c1:ca:8c:32:b1:71:36:af:d6:8f:d2:77:cb:
                    3f:d4:b7:56:7b:8e:2f:4d:0c:1b:75:5b:7f:98:53:
                    fb:61:57:2d:89:f8:56:55:e4:f5:83:a7:08:b1:2e:
                    3f:48:33:44:ce:1d:84:cf:7e:d2:61:d1:fb:52:c6:
                    5a:f3:d3:ff:50:61:ae:d8:8f:8a:da:ff:06:2c:dc:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A5:32:F3:B4:01:0F:43:B8:B0:8E:49:E2:CB:08:3A:72:9D:2F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/637ec565-5a93-39a0-85c1-1851ef668bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.180.0/22
                IPv6:
                  2001:500:f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:ee:d7:4d:2f:bd:e8:52:ff:2a:21:a5:57:0e:6b:24:d5:df:
         d3:c3:d7:e9:6c:89:35:a3:15:cf:b5:2d:c3:aa:a1:31:f7:cc:
         1a:9e:25:f1:d0:de:9f:4e:7c:fe:f6:bb:42:0a:bb:40:61:a4:
         4f:27:51:37:dd:d6:1e:99:40:eb:65:cb:c0:b3:dc:3b:ed:3f:
         28:ce:62:60:01:1f:f6:e3:d6:36:5d:37:6d:a6:f2:80:67:d2:
         e8:c5:d1:da:eb:52:d2:2c:6a:13:d1:ff:9d:ba:cf:5b:7c:e6:
         62:16:9b:6f:b5:81:1b:05:e8:08:89:f8:2f:6f:e7:f0:37:c1:
         c1:32:56:a2:d3:70:df:db:09:5c:0b:c5:41:80:34:43:80:c9:
         54:5b:f2:54:68:58:b0:57:d8:0e:23:f8:95:50:7b:c7:5c:62:
         08:a9:78:8f:42:6e:22:74:4d:cd:5b:81:69:99:90:b9:d3:aa:
         fd:43:60:27:af:66:18:c0:03:2c:e0:85:77:49:0c:8b:f8:e8:
         2f:ba:13:70:98:05:ae:13:fa:d0:49:3f:c8:6e:82:f9:b1:88:
         2f:39:3f:62:1e:06:63:9b:d7:b6:20:09:8a:ef:a4:45:5f:18:
         1e:bd:cf:44:68:8e:ef:e0:1a:57:38:fe:64:c7:6f:a3:56:1d:
         bf:2d:bc:28
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEm231wuJXVwYiSqdoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2
ZDNlMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk
OTdkZThlNzctNTUxOS00MjU4LTg1YmEtYmQ3Y2VjMjc1YWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE5XHWgbfLXru7RDLFdN1wk6SENvVhFxPYUr
xfw2red86mstPGRWOnIpEEb07upSX8rMsw5fgZxXFoQ+ydQtUpS+n9/GqnSD/jB/
cO0wksK6Ii96X/v3kBdzY/txAJb1/9ybeYiviR9pjbGJf9Y5UvmCn1b+KaYVQ8Og
kzcU4MwtpM+0AZFWLAnrydQP+d0/kumUYADdLr8o0bnkyUWO9NOZ4fgprJDnIF7V
wiiOaYlnLMDu28HKjDKxcTav1o/Sd8s/1LdWe44vTQwbdVt/mFP7YVctifhWVeT1
g6cIsS4/SDNEzh2Ez37SYdH7UsZa89P/UGGu2I+K2v8GLNwcqQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFGGlMvO0AQ9DuLCOSeLLCDpynS97MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1
NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvNjM3ZWM1NjUtNWE5My0z
OWEwLTg1YzEtMTg1MWVmNjY4YmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk
MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5
NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm
YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCx7S0MA8E
AgACMAkDBwAgAQUAAPAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvO7XTS+96FL/KiGlVw5rJNXf08PX6WyJ
NaMVz7Utw6qhMffMGp4l8dDen058/va7Qgq7QGGkTydRN93WHplA62XLwLPcO+0/
KM5iYAEf9uPWNl03babygGfS6MXR2utS0ixqE9H/nbrPW3zmYhabb7WBGwXoCIn4
L2/n8DfBwTJWotNw39sJXAvFQYA0Q4DJVFvyVGhYsFfYDiP4lVB7x1xiCKl4j0Ju
InRNzVuBaZmQudOq/UNgJ69mGMADLOCFd0kMi/joL7oTcJgFrhP60Ek/yG6C+bGI
Lzk/Yh4GY5vXtiAJiu+kRV8YHr3PRGiO7+AaVzj+ZMdvo1Ydvy28KA==
-----END CERTIFICATE-----
Generated at Mon May 12 19:39:15 2025 by rpki-client