Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/56e70db2-5754-37c3-aedf-32bf25d357a9.roa
File:                     56e70db2-5754-37c3-aedf-32bf25d357a9.roa (raw, json)
Hash identifier:          BdERhnPsnmgaUuYlH8G4PTDoaGRbG8zNcpR53NA0wWA=
Subject key identifier:   B2:55:03:4A:B6:FD:B7:46:58:B0:04:34:29:0D:9D:CC:02:E2:7B:5A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849C20A228E00BD63FB31949EA0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/56e70db2-5754-37c3-aedf-32bf25d357a9.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     203
IP address blocks:        192.57.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:22:8e:00:bd:63:fb:31:94:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=fa5003de-fab9-4d0b-887e-50b08203b9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:c2:4c:8a:fe:83:26:57:28:bc:6c:de:07:
                    38:62:53:29:47:75:5b:e6:d0:c8:f3:d5:bd:df:8f:
                    86:1a:90:0e:ed:e0:0d:f2:63:fa:27:1e:fc:87:10:
                    82:06:ae:a1:ea:1e:ae:4e:af:5c:33:60:89:62:df:
                    0e:71:8e:2c:ac:52:ef:1d:b1:2b:cd:82:f2:02:db:
                    12:f7:5e:48:c7:dc:0e:fe:09:fa:6b:f7:6b:68:40:
                    5f:16:27:05:a9:07:37:15:7c:1f:ce:41:61:26:eb:
                    eb:f3:71:d5:be:4c:06:7f:ea:8d:45:fc:65:63:25:
                    00:06:80:6e:f5:1f:6a:34:d8:6e:ec:c5:19:08:31:
                    21:3c:e6:b7:22:c6:08:a0:81:d0:f6:45:57:48:26:
                    94:8b:45:55:0b:00:01:3e:12:68:ed:71:d3:71:ad:
                    9e:cc:18:67:6f:2d:c5:cf:9c:ed:93:58:09:31:6d:
                    49:0b:e5:4b:bb:5b:a7:0d:96:a0:f8:3f:82:41:7b:
                    d6:a0:a2:bb:64:5f:74:20:39:82:3d:03:42:d3:20:
                    fc:61:66:7a:8b:69:b7:7d:5a:ff:d7:82:a8:47:eb:
                    2a:16:76:9f:6c:23:62:07:45:0d:dd:39:5c:56:e9:
                    f8:54:c9:3d:71:9d:e0:37:e7:eb:01:2f:07:57:4d:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:03:4A:B6:FD:B7:46:58:B0:04:34:29:0D:9D:CC:02:E2:7B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/56e70db2-5754-37c3-aedf-32bf25d357a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:43:c8:6f:b1:89:33:05:36:57:f4:92:4c:85:af:a2:e3:04:
         96:7d:47:7d:a0:77:d7:79:9a:a4:cb:75:d9:39:c9:64:ca:77:
         f5:ce:c2:23:81:b4:63:98:ba:78:ed:15:2a:f0:13:96:ca:30:
         19:62:84:6b:b4:46:88:7f:f8:43:b4:aa:a3:f2:db:bc:dc:47:
         bb:3e:d5:95:b5:40:9d:c0:8a:cd:08:6c:79:7f:35:c2:e5:a3:
         bd:b5:23:f7:0a:be:d8:29:6c:09:04:0f:04:e9:b4:2c:cd:8c:
         b5:0a:4d:60:72:2b:e6:a2:a9:b9:a0:d6:90:f9:93:42:aa:f7:
         c6:82:21:0a:74:8d:8b:ff:7a:c4:f0:1e:5e:e5:9d:fa:f6:e9:
         3b:83:20:37:ec:86:04:a7:d6:09:de:23:0c:21:5d:f5:60:06:
         38:ad:67:07:77:69:1c:82:c7:3f:db:5e:e7:ec:6a:51:af:29:
         83:d2:af:2b:3d:d1:3e:16:aa:f5:49:c0:ab:e6:a1:1e:f6:bd:
         1f:aa:91:d1:bc:a4:fb:8b:78:89:c1:bb:d9:a7:c7:e4:5d:e4:
         a1:f0:c0:cd:40:e4:5c:df:bf:b0:f6:08:61:83:eb:27:c2:ae:
         b7:d6:ba:b9:c9:1d:68:55:9a:66:d1:16:61:55:0c:87:57:ea:
         4e:bc:5e:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiKOAL1j+zGUnqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZmE1MDAzZGUtZmFiOS00ZDBiLTg4N2UtNTBiMDgyMDNiOWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNXCTIr+gyZXKLxs3gc4YlMpR3Vb5tDI89W9
34+GGpAO7eAN8mP6Jx78hxCCBq6h6h6uTq9cM2CJYt8OcY4srFLvHbErzYLyAtsS
915Ix9wO/gn6a/draEBfFicFqQc3FXwfzkFhJuvr83HVvkwGf+qNRfxlYyUABoBu
9R9qNNhu7MUZCDEhPOa3IsYIoIHQ9kVXSCaUi0VVCwABPhJo7XHTca2ezBhnby3F
z5ztk1gJMW1JC+VLu1unDZag+D+CQXvWoKK7ZF90IDmCPQNC0yD8YWZ6i2m3fVr/
14KoR+sqFnafbCNiB0UN3TlcVun4VMk9cZ3gN+frAS8HV03X3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJVA0q2/bdGWLAENCkNncwC4ntaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTZlNzBkYjItNTc1NC0z
N2MzLWFlZGYtMzJiZjI1ZDM1N2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDmEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNDyG+xiTMFNlf0kkyFr6LjBJZ9R32gd9d5mqTLddk5yWTKd/XOwiOB
tGOYunjtFSrwE5bKMBlihGu0Roh/+EO0qqPy27zcR7s+1ZW1QJ3Ais0IbHl/NcLl
o721I/cKvtgpbAkEDwTptCzNjLUKTWByK+aiqbmg1pD5k0Kq98aCIQp0jYv/esTw
Hl7lnfr26TuDIDfshgSn1gneIwwhXfVgBjitZwd3aRyCxz/bXufsalGvKYPSrys9
0T4WqvVJwKvmoR72vR+qkdG8pPuLeInBu9mnx+Rd5KHwwM1A5Fzfv7D2CGGD6yfC
rrfWurnJHWhVmmbRFmFVDIdX6k68Xhs=
-----END CERTIFICATE-----
Generated at Fri May 9 02:53:08 2025 by rpki-client