Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/57cac038-d064-3e35-8465-48a803ad61e7.roa
File:                     57cac038-d064-3e35-8465-48a803ad61e7.roa (raw, json)
Hash identifier:          Hb8pmLFGMIJBjVPa6HBZ4RJDDdWt75lRqyIxuV7XOdY=
Subject key identifier:   0C:D3:8E:15:DB:F8:60:27:96:B4:D7:6C:53:6C:66:D3:06:25:72:EA
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F43285849B9AA0268C835C4B35C18CE80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/57cac038-d064-3e35-8465-48a803ad61e7.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     174
IP address blocks:        2001:550:abba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:02:68:c8:35:c4:b3:5c:18:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=4290b5e3-9130-499b-bfe7-11d18e114e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:e9:00:d3:13:b3:c5:76:f2:46:2b:8c:5a:
                    b8:e6:3b:c1:47:f6:c4:3f:c4:29:a9:08:82:25:e5:
                    c6:b4:db:d8:ba:e2:35:4e:19:a5:20:0b:02:87:c6:
                    a9:50:93:48:34:4b:aa:b2:1f:51:bd:f6:28:27:ff:
                    8b:7e:7e:a3:16:b6:21:32:d0:d6:9c:42:6c:fb:62:
                    93:77:d0:f1:ed:c8:f2:bb:bc:f6:41:84:47:d3:d9:
                    db:fb:5c:19:4c:a9:ef:c9:90:f4:21:c6:06:13:a3:
                    e8:7b:8a:7e:f0:e9:0f:96:0b:ab:1c:1b:5c:f0:b6:
                    47:a3:c6:c7:da:7c:10:62:d5:22:be:53:fb:91:4b:
                    25:f3:02:02:ba:28:fc:90:5b:a4:7b:52:94:2c:51:
                    89:3b:f4:11:00:28:8f:c2:b4:b2:85:9b:e4:f1:c5:
                    d4:e6:91:29:1a:b9:88:5a:7a:42:6e:e6:64:93:b0:
                    7c:d6:6b:2f:c9:ee:c1:f4:c9:07:aa:df:7a:12:25:
                    bd:6b:6a:ce:5a:15:e8:74:58:24:0b:90:18:33:38:
                    d1:8e:eb:12:0b:5d:13:5d:3e:ee:14:01:ef:1a:84:
                    46:ab:56:bd:52:fc:e8:e3:d8:a3:b1:0b:10:55:d2:
                    32:60:3c:f5:a4:aa:8e:97:8f:b0:82:51:e0:76:0e:
                    14:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D3:8E:15:DB:F8:60:27:96:B4:D7:6C:53:6C:66:D3:06:25:72:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/57cac038-d064-3e35-8465-48a803ad61e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:550:abba::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:66:e2:f9:4a:58:79:8b:4c:51:5a:66:88:19:af:e7:12:05:
         de:60:97:ea:17:e7:0b:d7:55:98:12:22:42:7b:1c:9f:75:75:
         e2:2d:19:70:60:a7:76:18:eb:f4:1c:fa:40:60:c4:f1:79:a9:
         4b:a1:d4:2e:70:f3:5d:7b:4b:57:9a:d5:56:3e:36:b8:9e:ee:
         96:d6:c9:3d:48:1e:14:8a:ef:81:e1:94:34:3b:96:de:43:c7:
         af:bb:c7:0c:f6:d4:be:35:b0:2a:83:bb:ee:af:2b:7f:7a:5c:
         c0:68:62:cd:ee:07:6f:5e:b6:6c:a1:4e:1f:06:ce:ce:5a:1e:
         81:1e:92:8e:cf:e8:56:8f:44:72:20:23:15:df:36:5c:88:57:
         fc:cf:0c:d1:8b:29:e2:4e:46:91:fc:72:37:7d:f9:53:9e:35:
         c4:f2:b3:2d:06:8d:b8:fc:00:73:d5:d4:aa:26:a3:eb:b1:08:
         c4:41:e3:4e:c7:7b:89:0e:e4:e0:91:14:9c:eb:af:07:1c:cb:
         22:88:e4:58:1e:69:47:ca:ab:a7:33:c7:8d:5c:a4:68:97:8a:
         4d:95:30:73:a1:d5:87:27:2e:75:bc:3d:20:79:13:44:ab:39:
         2e:50:9a:b5:60:ea:78:d7:4f:58:41:f8:24:27:26:19:17:87:
         04:93:61:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm5qgJoyDXEs1wYzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk
NDI5MGI1ZTMtOTEzMC00OTliLWJmZTctMTFkMThlMTE0ZTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9bpANMTs8V28kYrjFq45jvBR/bEP8QpqQiC
JeXGtNvYuuI1ThmlIAsCh8apUJNINEuqsh9RvfYoJ/+Lfn6jFrYhMtDWnEJs+2KT
d9Dx7cjyu7z2QYRH09nb+1wZTKnvyZD0IcYGE6Poe4p+8OkPlgurHBtc8LZHo8bH
2nwQYtUivlP7kUsl8wICuij8kFuke1KULFGJO/QRACiPwrSyhZvk8cXU5pEpGrmI
WnpCbuZkk7B81msvye7B9MkHqt96EiW9a2rOWhXodFgkC5AYMzjRjusSC10TXT7u
FAHvGoRGq1a9Uvzo49ijsQsQVdIyYDz1pKqOl4+wglHgdg4UTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAzTjhXb+GAnlrTXbFNsZtMGJXLqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNTdjYWMwMzgtZDA2NC0z
ZTM1LTg0NjUtNDhhODAzYWQ2MWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFUKu6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAJm4vlKWHmLTFFaZogZr+cSBd5gl+oX5wvXVZgSIkJ7HJ91deIt
GXBgp3YY6/Qc+kBgxPF5qUuh1C5w8117S1ea1VY+Nrie7pbWyT1IHhSK74HhlDQ7
lt5Dx6+7xwz21L41sCqDu+6vK396XMBoYs3uB29etmyhTh8Gzs5aHoEeko7P6FaP
RHIgIxXfNlyIV/zPDNGLKeJORpH8cjd9+VOeNcTysy0Gjbj8AHPV1Komo+uxCMRB
407He4kO5OCRFJzrrwccyyKI5FgeaUfKq6czx41cpGiXik2VMHOh1YcnLnW8PSB5
E0SrOS5QmrVg6njXT1hB+CQnJhkXhwSTYWI=
-----END CERTIFICATE-----
Generated at Wed May 7 11:24:13 2025 by rpki-client