Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa
File:                     885503bb-67f7-33bb-a275-0063d04ac58e.roa (raw, json)
Hash identifier:          BV1FRidkPzENibt3LfjR17iTzpi15pnHxIXMyddMo9o=
Subject key identifier:   D9:08:76:54:DC:DD:BC:76:A4:5F:F0:4D:72:F9:4D:0C:CE:90:25:3E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849FCAA747558A305BDA7629460
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     2914
IP address blocks:        129.250.53.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:74:75:58:a3:05:bd:a7:62:94:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=0855dd79-5458-4844-8ea4-f82463beb538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:6f:97:12:08:b7:31:1a:4b:ce:e4:ce:4e:
                    8b:70:09:b1:9e:5d:a6:f9:11:81:2b:da:00:50:a4:
                    4f:93:e2:8d:e2:94:4a:6c:a2:4a:62:ab:3b:05:f7:
                    b1:09:37:d8:83:c1:8b:c1:8d:35:bb:ca:6e:1d:cf:
                    89:e2:e1:bc:de:1a:29:1e:ba:29:b8:86:72:4a:0b:
                    ca:c5:4a:ab:6d:d4:84:ce:4e:c4:b4:cd:54:e4:50:
                    96:2b:09:47:92:96:7f:b9:2f:40:4a:5c:1b:74:be:
                    e6:a7:35:7b:27:b8:3e:98:19:9b:32:47:7f:db:31:
                    b4:3f:44:58:0a:1c:33:fa:86:9c:02:b2:78:ef:db:
                    c8:b1:6b:a3:29:07:7f:5d:2d:a4:d2:03:61:73:34:
                    17:2e:b8:2a:5d:6c:09:e0:7a:7b:ab:75:f8:af:57:
                    13:9b:8a:30:60:2b:a3:f1:bc:ac:fe:d2:76:1b:31:
                    3a:50:91:4b:c8:34:96:85:80:8f:a3:84:09:de:b5:
                    fc:f6:ad:cc:cb:75:cd:d1:cd:32:05:94:27:de:e1:
                    5e:08:a7:6e:95:dc:58:dc:d7:4f:b3:99:1e:a4:3d:
                    3d:dd:8a:de:3b:70:e2:ae:88:e7:ee:11:ad:76:fd:
                    62:c8:67:10:f8:1a:ab:1c:89:ec:9f:62:51:71:ca:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:08:76:54:DC:DD:BC:76:A4:5F:F0:4D:72:F9:4D:0C:CE:90:25:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.53.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:21:f9:b7:73:8b:3c:00:1f:4e:da:93:97:c1:e7:0f:f9:d3:
         d1:b4:2d:c1:f6:ae:08:81:3c:5d:dc:b3:36:e2:bf:f2:e0:59:
         53:e8:6b:e6:1c:65:b2:71:30:15:3e:78:f6:ef:56:c8:60:02:
         33:c4:e9:98:b0:9c:5f:2f:a9:bb:6b:ff:33:44:47:5d:19:45:
         e3:fe:17:86:f8:cb:c4:2e:2d:40:9b:2e:c5:32:94:b8:91:0c:
         31:30:71:51:a7:48:5d:94:1a:48:71:f0:22:0f:02:ee:e3:ae:
         e2:1f:72:1b:83:e3:79:be:18:4b:2d:63:bc:89:f5:aa:46:e6:
         86:a5:14:e9:98:ac:a7:87:3d:3a:ff:be:ff:59:bc:2d:6a:f5:
         b0:80:5f:b0:2a:a8:82:dd:31:63:3f:6e:23:a4:c8:37:32:21:
         97:61:75:9b:20:64:3d:6b:ac:78:9f:44:d3:be:2c:78:2e:7e:
         19:93:c4:88:a3:e9:41:39:12:91:78:15:82:5b:99:26:8e:c1:
         cc:05:7a:4c:45:54:6d:7c:23:4a:19:55:89:a8:89:df:0a:29:
         ff:f1:81:ad:b6:51:4b:d6:58:da:7c:02:4b:5c:8b:35:0b:e2:
         ac:12:75:a2:df:e3:0a:1e:f0:60:69:fd:37:b5:c6:9d:b7:ce:
         e9:bf:0e:18
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn8qnR1WKMFvadilGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
MDg1NWRkNzktNTQ1OC00ODQ0LThlYTQtZjgyNDYzYmViNTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv5vlxIItzEaS87kzk6LcAmxnl2m+RGBK9oA
UKRPk+KN4pRKbKJKYqs7BfexCTfYg8GLwY01u8puHc+J4uG83hopHropuIZySgvK
xUqrbdSEzk7EtM1U5FCWKwlHkpZ/uS9ASlwbdL7mpzV7J7g+mBmbMkd/2zG0P0RY
Chwz+oacArJ479vIsWujKQd/XS2k0gNhczQXLrgqXWwJ4Hp7q3X4r1cTm4owYCuj
8bys/tJ2GzE6UJFLyDSWhYCPo4QJ3rX89q3My3XN0c0yBZQn3uFeCKduldxY3NdP
s5kepD093YreO3Dirojn7hGtdv1iyGcQ+BqrHInsn2JRccoa2QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNkIdlTc3bx2pF/wTXL5TQzOkCU+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODg1NTAzYmItNjdmNy0z
M2JiLWEyNzUtMDA2M2QwNGFjNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfo1ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDDIfm3c4s8AB9O2pOXwecP+dPRtC3B9q4IgTxd3LM24r/y4FlT6Gvm
HGWycTAVPnj271bIYAIzxOmYsJxfL6m7a/8zREddGUXj/heG+MvELi1Amy7FMpS4
kQwxMHFRp0hdlBpIcfAiDwLu467iH3Ibg+N5vhhLLWO8ifWqRuaGpRTpmKynhz06
/77/WbwtavWwgF+wKqiC3TFjP24jpMg3MiGXYXWbIGQ9a6x4n0TTvix4Ln4Zk8SI
o+lBORKReBWCW5kmjsHMBXpMRVRtfCNKGVWJqInfCin/8YGttlFL1ljafAJLXIs1
C+KsEnWi3+MKHvBgaf03tcadt87pvw4Y
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:57:04 2025 by rpki-client