Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23f0a046-f44f-3006-96da-8c2bc9086b18.roa
File:                     23f0a046-f44f-3006-96da-8c2bc9086b18.roa (raw, json)
Hash identifier:          mTifrTqC4AWdBJrTEGKpFr8NdIQiilmWnMN7YBPS05o=
Subject key identifier:   A5:B1:7B:D3:8E:81:64:4A:6E:F0:DD:E0:FB:F2:F4:C4:C1:90:33:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99E090A85A5166D8DE7E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23f0a046-f44f-3006-96da-8c2bc9086b18.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     397208
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:e0:90:a8:5a:51:66:d8:de:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=c6c8f0c7-a2c3-4078-81b7-0ff8cd4d83b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:5b:78:c3:e6:d9:1a:fd:26:e6:50:31:51:
                    b6:8e:d3:a0:7d:5d:a6:16:38:97:87:74:ac:7e:b7:
                    aa:40:75:b2:ed:4e:6d:52:d1:7a:ac:b5:f5:c1:ee:
                    02:92:4a:ad:cd:63:f7:ed:46:ea:3d:b5:b2:d9:8e:
                    0d:bf:a8:dd:a1:6d:d1:4e:7e:75:46:27:ab:04:d8:
                    18:b7:07:d7:2d:a6:26:23:1e:33:2a:06:13:cf:0c:
                    3f:94:d0:11:5c:0d:e4:8c:20:ec:75:3c:4f:d6:be:
                    80:ea:a2:bc:12:6c:8f:84:b6:95:1e:1b:96:6d:f4:
                    91:5e:18:bb:be:48:c5:c9:55:75:ed:36:8a:97:95:
                    1d:b7:a2:e8:13:6c:2d:cf:d0:e5:92:0f:8c:0e:ef:
                    c2:db:94:01:8f:e4:f4:08:6c:10:7b:b8:e5:5d:e7:
                    7b:34:81:2c:3f:8f:54:87:10:14:66:e9:de:4b:4d:
                    88:f8:d6:a1:21:2c:11:c2:24:2e:10:71:cb:2a:62:
                    ff:a8:28:00:2a:05:bb:84:2a:70:50:d7:d0:dc:0e:
                    67:4d:10:7a:b3:c6:27:50:d0:53:d0:57:1a:c2:52:
                    f3:a9:ba:8f:d6:b6:ff:82:e4:94:dd:53:35:27:50:
                    2c:18:a3:74:65:84:a4:88:8a:9a:b3:b4:b8:2e:b7:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B1:7B:D3:8E:81:64:4A:6E:F0:DD:E0:FB:F2:F4:C4:C1:90:33:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23f0a046-f44f-3006-96da-8c2bc9086b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:f5:f7:f5:b7:0d:45:05:d2:bf:7f:d7:e7:46:91:1b:95:
         51:aa:ec:02:af:72:3a:b4:df:f7:56:ca:22:f5:0d:36:92:ab:
         f7:f6:d4:94:01:29:f5:9e:75:70:81:7b:0d:4d:fc:34:dd:23:
         c5:66:1b:f8:0c:6f:f6:64:e0:32:a4:73:d7:f6:c4:07:7a:41:
         f5:3c:8f:29:28:58:a4:88:ca:a0:e9:66:93:2f:7e:14:dd:81:
         93:d1:c0:f0:16:50:b5:c9:42:65:50:dd:df:42:82:33:d6:bd:
         fc:21:53:b0:65:22:f5:63:21:01:4c:7a:8f:e4:ab:20:c5:ce:
         2a:93:55:cf:f0:df:40:a6:6e:dd:f8:0c:44:a4:8c:71:c7:26:
         bf:1b:65:5e:69:b2:7b:9e:86:35:1d:57:e9:24:5a:27:e1:d1:
         eb:72:f7:95:f4:9c:69:c5:12:e9:a5:96:2e:54:fe:22:da:4c:
         c0:76:4b:04:50:f2:62:73:91:e8:16:91:d1:c1:6c:60:62:99:
         c3:9f:3e:2e:96:ee:59:99:f8:30:8c:72:26:d1:a4:05:b1:14:
         cd:17:98:0d:e1:db:28:be:90:1b:d1:fe:e2:d4:ee:7f:c9:ae:
         a7:af:8b:2c:43:52:c9:73:5f:9e:10:9b:1b:28:7a:69:3c:c7:
         4a:93:ed:8e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmeCQqFpRZtjefgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk
YzZjOGYwYzctYTJjMy00MDc4LTgxYjctMGZmOGNkNGQ4M2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSVbeMPm2Rr9JuZQMVG2jtOgfV2mFjiXh3Ss
freqQHWy7U5tUtF6rLX1we4CkkqtzWP37UbqPbWy2Y4Nv6jdoW3RTn51RierBNgY
twfXLaYmIx4zKgYTzww/lNARXA3kjCDsdTxP1r6A6qK8EmyPhLaVHhuWbfSRXhi7
vkjFyVV17TaKl5Udt6LoE2wtz9Dlkg+MDu/C25QBj+T0CGwQe7jlXed7NIEsP49U
hxAUZuneS02I+NahISwRwiQuEHHLKmL/qCgAKgW7hCpwUNfQ3A5nTRB6s8YnUNBT
0FcawlLzqbqP1rb/guSU3VM1J1AsGKN0ZYSkiIqas7S4LreqLQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKWxe9OOgWRKbvDd4Pvy9MTBkDO1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNmMGEwNDYtZjQ0Zi0z
MDA2LTk2ZGEtOGMyYmM5MDg2YjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCqTfX39bcNRQXSv3/X50aRG5VRquwCr3I6tN/3
Vsoi9Q02kqv39tSUASn1nnVwgXsNTfw03SPFZhv4DG/2ZOAypHPX9sQHekH1PI8p
KFikiMqg6WaTL34U3YGT0cDwFlC1yUJlUN3fQoIz1r38IVOwZSL1YyEBTHqP5Ksg
xc4qk1XP8N9Apm7d+AxEpIxxxya/G2VeabJ7noY1HVfpJFon4dHrcveV9JxpxRLp
pZYuVP4i2kzAdksEUPJic5HoFpHRwWxgYpnDnz4ulu5ZmfgwjHIm0aQFsRTNF5gN
4dsovpAb0f7i1O5/ya6nr4ssQ1LJc1+eEJsbKHppPMdKk+2O
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:22 2025 by rpki-client