Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e3ab0f6a-4b89-3949-b3dd-1b3a371dbcc6.roa
File:                     e3ab0f6a-4b89-3949-b3dd-1b3a371dbcc6.roa (raw, json)
Hash identifier:          fgPWQrBb69DLXoKylOGUMTdHbBGUzDtNTme3ocRKe7Q=
Subject key identifier:   67:55:0C:04:BD:4B:AF:DA:D2:F0:81:71:37:FC:4A:EB:B7:CE:0B:5F
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285849CBCFA3B6B16AF874CA52BB00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e3ab0f6a-4b89-3949-b3dd-1b3a371dbcc6.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     1239
IP address blocks:        216.185.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a3:b6:b1:6a:f8:74:ca:52:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=743fe317-6d0c-4046-b00e-5d0ddd698dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:62:33:9c:f3:49:25:75:a5:15:a7:33:9e:
                    8b:f4:0b:88:6c:66:31:f7:16:c8:7f:d5:bb:b7:ee:
                    cf:ea:54:67:4f:1c:22:6a:88:b2:42:f4:f1:5c:c2:
                    f4:95:88:a2:00:3c:b8:e8:ee:c3:92:fc:81:91:a7:
                    9f:7a:04:2e:48:06:6b:cb:c3:96:a2:e7:62:e1:05:
                    a9:a9:cd:50:04:e3:f1:ff:34:2a:2f:6d:9e:c5:d9:
                    cf:ba:fb:da:2f:20:0c:18:a1:50:28:23:58:48:e6:
                    5b:5b:4d:3e:fa:c1:83:e8:36:ae:e6:db:84:97:46:
                    9e:16:e2:31:fe:7f:88:24:6c:4e:d4:94:72:bb:b9:
                    93:39:36:dd:df:e2:a7:23:b2:8d:91:b8:0a:25:34:
                    4f:33:6c:12:d0:48:f0:21:cb:e0:55:77:89:f5:ca:
                    11:c3:17:90:3b:ff:c4:18:9a:32:ec:b8:c8:9f:0c:
                    c3:86:ae:3f:97:69:1b:5d:38:03:9e:69:8d:18:24:
                    29:a7:4b:36:b0:c7:97:fb:99:4a:55:a7:cc:ba:9d:
                    90:25:be:89:1a:ff:8f:89:1b:8e:58:de:1f:32:d4:
                    2c:9d:81:d9:4f:41:5f:06:d1:06:f8:a7:46:48:7c:
                    34:e6:c3:f6:67:a5:42:63:8c:83:f9:2e:51:89:55:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:55:0C:04:BD:4B:AF:DA:D2:F0:81:71:37:FC:4A:EB:B7:CE:0B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e3ab0f6a-4b89-3949-b3dd-1b3a371dbcc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:0f:ae:54:2d:e5:e5:61:81:10:58:79:21:74:50:bc:9a:00:
         7a:25:cd:26:c6:89:26:c2:33:8b:c0:fa:55:87:39:d2:e9:0d:
         ab:10:fa:3a:1e:77:76:7f:e9:db:73:bf:0e:38:ef:8f:4f:8f:
         cc:ea:ef:f4:33:2e:a4:6a:04:5c:fe:e5:84:5b:ab:ef:f8:07:
         f9:c6:ce:ab:2a:e2:cf:d6:67:66:62:29:b4:4d:b7:29:a6:b2:
         0a:0d:46:f2:c8:3f:f5:79:de:f0:ea:d6:91:b0:b5:38:a4:83:
         f9:e7:e2:cb:f1:dd:b9:cf:d8:dd:fd:30:97:67:02:f7:41:23:
         ca:05:3a:00:52:93:25:8e:28:ff:bf:26:52:53:b9:34:0b:56:
         c5:80:79:06:e8:2d:12:e6:1d:fb:26:78:a6:4e:d8:38:b2:d8:
         6b:7e:49:80:7f:7b:9f:9d:6b:74:f1:81:ea:e1:44:d7:12:e1:
         d1:43:c9:f8:84:45:dd:e5:54:d6:f3:69:52:de:72:23:75:ea:
         59:e9:1d:bc:0f:e1:fd:b2:2e:a7:bc:e1:58:55:5f:9e:f7:e9:
         c4:6b:12:f8:0f:b0:4d:f0:76:67:37:e3:04:97:fa:8e:20:10:
         1c:51:9a:29:58:3e:ac:a5:e3:30:73:0f:ff:72:c6:ac:7d:6f:
         39:be:cc:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6O2sWr4dMpSuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk
NzQzZmUzMTctNmQwYy00MDQ2LWIwMGUtNWQwZGRkNjk4ZGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfpiM5zzSSV1pRWnM56L9AuIbGYx9xbIf9W7
t+7P6lRnTxwiaoiyQvTxXML0lYiiADy46O7DkvyBkaefegQuSAZry8OWoudi4QWp
qc1QBOPx/zQqL22exdnPuvvaLyAMGKFQKCNYSOZbW00++sGD6Dau5tuEl0aeFuIx
/n+IJGxO1JRyu7mTOTbd3+KnI7KNkbgKJTRPM2wS0EjwIcvgVXeJ9coRwxeQO//E
GJoy7LjInwzDhq4/l2kbXTgDnmmNGCQpp0s2sMeX+5lKVafMup2QJb6JGv+PiRuO
WN4fMtQsnYHZT0FfBtEG+KdGSHw05sP2Z6VCY4yD+S5RiVXv1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGdVDAS9S6/a0vCBcTf8Suu3zgtfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvZTNhYjBmNmEtNGI4OS0z
OTQ5LWIzZGQtMWIzYTM3MWRiY2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Lk4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAPrlQt5eVhgRBYeSF0ULyaAHolzSbGiSbCM4vA+lWHOdLpDasQ+joe
d3Z/6dtzvw44749Pj8zq7/QzLqRqBFz+5YRbq+/4B/nGzqsq4s/WZ2ZiKbRNtymm
sgoNRvLIP/V53vDq1pGwtTikg/nn4svx3bnP2N39MJdnAvdBI8oFOgBSkyWOKP+/
JlJTuTQLVsWAeQboLRLmHfsmeKZO2Diy2Gt+SYB/e5+da3TxgerhRNcS4dFDyfiE
Rd3lVNbzaVLeciN16lnpHbwP4f2yLqe84VhVX5736cRrEvgPsE3wdmc34wSX+o4g
EBxRmilYPqyl4zBzD/9yxqx9bzm+zLU=
-----END CERTIFICATE-----
Generated at Sat May 10 22:18:51 2025 by rpki-client