Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa
File:                     9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa (raw, json)
Hash identifier:          CNPn231vRauVLhBbUutXFGdM02jJApjLH1pP+BjbvV8=
Subject key identifier:   E9:F1:0C:18:41:D0:83:3F:27:88:09:4E:17:F0:6B:4A:60:BA:02:82
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849C0A4F512A584243462893F40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     36618
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:f5:12:a5:84:24:34:62:89:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=ee900b04-55b5-42ef-a287-b31086458bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f5:7f:78:e3:a9:98:d8:c8:e6:b7:ae:10:8d:
                    39:70:2a:44:03:1d:1f:10:f9:66:79:63:a0:46:19:
                    29:05:0f:19:6d:7d:78:06:80:7f:b7:54:98:b9:b8:
                    c5:06:c8:02:ee:c9:7a:54:78:69:2d:01:6e:79:65:
                    60:6b:97:29:3b:d4:22:31:e9:9f:ad:2a:df:12:4b:
                    9d:e6:80:07:34:a2:54:2b:7c:ce:21:7c:ba:08:85:
                    0f:d2:3d:00:29:da:26:c0:7c:44:01:62:ba:c4:b3:
                    ad:bc:98:b1:7c:35:e6:60:97:c8:27:88:0c:25:8e:
                    a8:0e:57:89:9d:e6:6b:8f:6d:74:4c:96:79:68:f1:
                    6f:a9:18:22:d7:e0:f0:47:ad:de:40:bf:2d:35:dc:
                    90:51:82:02:e0:ea:2b:64:56:ec:97:1c:a2:8b:76:
                    53:d0:5b:1b:f5:ad:44:cc:88:b9:25:b9:d6:ef:1a:
                    b8:74:a9:6f:a7:75:96:e2:39:65:f7:a1:6c:53:b2:
                    d7:0f:74:c0:a8:34:65:5e:bf:25:62:69:1d:fa:4f:
                    21:9b:c9:51:c5:4b:57:28:f1:62:07:e1:44:ce:c9:
                    84:f2:b7:0a:6a:3d:6d:d1:00:4c:53:e3:e0:ea:8b:
                    dd:fd:d0:8c:5b:7e:c7:a2:b8:43:55:12:1a:30:68:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F1:0C:18:41:D0:83:3F:27:88:09:4E:17:F0:6B:4A:60:BA:02:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:77:9e:da:94:f3:a8:aa:a3:3e:d4:81:7b:6f:0d:18:05:b1:
         09:18:2e:16:64:9b:a8:4f:e9:6a:4b:70:7f:37:57:d7:0f:bd:
         8f:f7:1f:83:ae:44:03:f5:e1:7b:bb:9e:2a:0f:1a:a5:a1:91:
         02:98:25:32:7e:b9:de:71:0c:21:6e:1c:f6:c6:5c:1a:56:2c:
         42:c8:ad:61:53:88:17:a4:d9:60:2a:44:97:cf:b1:d6:aa:b9:
         c3:cc:3b:5e:a6:6f:88:41:22:d9:01:0f:46:77:ce:bb:b4:9e:
         a7:ee:78:17:8d:b7:f3:f4:9b:b4:bf:1d:b3:5c:4f:78:71:da:
         b4:ca:39:3f:1a:69:21:db:76:d4:a0:98:65:85:b9:9d:b5:a6:
         50:0a:16:3a:7a:7d:13:63:6d:2d:15:29:a8:67:e7:3e:aa:db:
         ac:40:f7:99:19:32:a6:35:60:36:65:0e:8d:3f:24:4a:b9:10:
         f0:67:8f:0b:cd:95:60:d2:21:9a:0e:dd:a7:c6:b8:98:00:b9:
         97:db:0a:17:64:7d:78:83:65:27:3f:d5:52:de:1c:68:ae:ad:
         80:4a:17:11:3d:51:39:b5:73:7d:82:10:16:47:b0:40:12:61:
         99:09:ba:9e:b7:1b:ab:32:de:28:c6:10:1a:e0:21:79:c5:8a:
         ce:3f:fb:2d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApPUSpYQkNGKJP0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
ZWU5MDBiMDQtNTViNS00MmVmLWEyODctYjMxMDg2NDU4YmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fV/eOOpmNjI5reuEI05cCpEAx0fEPlmeWOg
RhkpBQ8ZbX14BoB/t1SYubjFBsgC7sl6VHhpLQFueWVga5cpO9QiMemfrSrfEkud
5oAHNKJUK3zOIXy6CIUP0j0AKdomwHxEAWK6xLOtvJixfDXmYJfIJ4gMJY6oDleJ
neZrj210TJZ5aPFvqRgi1+DwR63eQL8tNdyQUYIC4OorZFbslxyii3ZT0Fsb9a1E
zIi5JbnW7xq4dKlvp3WW4jll96FsU7LXD3TAqDRlXr8lYmkd+k8hm8lRxUtXKPFi
B+FEzsmE8rcKaj1t0QBMU+Pg6ovd/dCMW37HorhDVRIaMGgMywIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOnxDBhB0IM/J4gJThfwa0pgugKCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWIyMjMzZjEtYTU0Zi0z
N2NjLWJlYWYtMmFjZGE3YTNmNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQABd57alPOoqqM+1IF7bw0YBbEJGC4WZJuoT+lqS3B/N1fXD72P9x+D
rkQD9eF7u54qDxqloZECmCUyfrnecQwhbhz2xlwaVixCyK1hU4gXpNlgKkSXz7HW
qrnDzDtepm+IQSLZAQ9Gd867tJ6n7ngXjbfz9Ju0vx2zXE94cdq0yjk/Gmkh23bU
oJhlhbmdtaZQChY6en0TY20tFSmoZ+c+qtusQPeZGTKmNWA2ZQ6NPyRKuRDwZ48L
zZVg0iGaDt2nxriYALmX2woXZH14g2UnP9VS3hxorq2AShcRPVE5tXN9ghAWR7BA
EmGZCbqetxurMt4oxhAa4CF5xYrOP/st
-----END CERTIFICATE-----
Generated at Sun May 11 08:14:04 2025 by rpki-client