Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50a69fb5-9e91-38c3-9015-d579d4f0ae3d.roa
File:                     50a69fb5-9e91-38c3-9015-d579d4f0ae3d.roa (raw, json)
Hash identifier:          5LZIJdmk5nuZ9RNdww4mpLlabjgVKWe5a2MMcHCpYME=
Subject key identifier:   41:D2:85:08:94:ED:D6:5F:69:C2:3D:1C:E2:53:DF:DC:8B:64:0E:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99E13B6D89223AF56A6A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50a69fb5-9e91-38c3-9015-d579d4f0ae3d.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     396592
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:e1:3b:6d:89:22:3a:f5:6a:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=1324b5ab-ae1a-45ad-b59d-8749a6896bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:61:fe:bb:42:f4:2e:f5:b3:23:be:4c:b5:e5:
                    f1:03:a6:0b:d7:9e:83:b7:d6:35:f9:60:7c:f5:39:
                    25:f4:57:ca:51:27:d5:48:52:62:07:d7:24:5c:31:
                    77:3d:86:68:6f:99:a2:d2:d6:9f:22:27:09:97:86:
                    8a:77:db:dc:f2:d6:71:1e:2f:fe:d6:1a:56:36:f2:
                    6f:90:7b:a6:38:af:42:00:44:81:79:64:03:fd:b7:
                    50:74:12:3d:eb:b2:26:c3:eb:2d:d5:81:4d:4e:ce:
                    f3:65:ad:19:0f:04:97:9a:c7:87:1a:db:f7:5a:8e:
                    85:2f:d0:31:01:c7:53:80:cf:bd:33:ae:53:b8:9f:
                    04:6f:01:07:9e:26:78:c9:e5:cb:77:37:5d:8d:b0:
                    9f:22:b9:27:90:42:f2:fb:52:55:e9:ec:00:9b:3c:
                    e4:03:2f:e7:1f:52:a2:1f:67:2c:8c:74:64:3c:e5:
                    8e:ca:5e:58:67:cb:4a:10:9b:32:5f:01:e4:f2:b0:
                    5a:e0:fc:82:7d:90:34:b3:9c:38:b6:1f:d5:79:ec:
                    87:2f:08:a9:1d:d6:1d:dc:71:ec:0c:0e:d7:3e:ad:
                    cf:83:b7:09:10:3f:8f:0b:d7:0e:94:44:dc:82:cf:
                    44:33:1d:86:c2:12:45:49:ba:62:ed:58:94:f9:4d:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D2:85:08:94:ED:D6:5F:69:C2:3D:1C:E2:53:DF:DC:8B:64:0E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50a69fb5-9e91-38c3-9015-d579d4f0ae3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:37:18:a6:87:73:d4:0c:b6:8e:5c:06:17:7e:b8:b3:3b:18:
         45:84:95:5d:9e:7c:84:10:2e:25:04:68:ca:9d:d7:cb:89:3b:
         e2:02:13:bc:2d:d2:22:b8:f6:8d:55:24:56:b6:77:7c:92:24:
         15:bc:87:0d:91:f6:3e:60:ef:ee:db:85:5a:51:b4:81:2a:10:
         7c:c7:01:8f:61:b4:19:4b:15:ea:43:af:93:19:c4:20:6d:44:
         5b:02:bc:8d:37:e4:29:a2:9b:50:58:99:f5:a8:8e:0d:74:41:
         0d:ab:e1:69:27:07:cf:1c:77:26:83:71:c6:32:19:78:a9:99:
         48:40:6a:c7:cb:9e:b5:02:98:6d:93:46:ab:2a:27:b8:49:68:
         71:57:73:b3:de:e4:2b:a1:40:7e:6b:9f:5f:a2:41:c8:f6:44:
         7b:eb:bc:a4:46:0e:19:cb:a3:7e:7c:e7:76:b7:87:9b:34:f4:
         68:97:67:c1:af:76:81:f2:2c:11:ca:ff:7c:1e:44:67:3d:a8:
         33:83:11:0e:97:06:90:b3:ea:b8:79:2c:62:8d:0f:8e:22:65:
         59:d1:40:bb:9d:65:74:50:06:11:90:de:05:a1:14:c4:cf:bd:
         fb:a8:d4:a2:6a:80:92:47:07:7a:11:40:5d:ff:34:c1:06:72:
         65:a8:17:0b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmeE7bYkiOvVqagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk
MTMyNGI1YWItYWUxYS00NWFkLWI1OWQtODc0OWE2ODk2YmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmH+u0L0LvWzI75MteXxA6YL156Dt9Y1+WB8
9Tkl9FfKUSfVSFJiB9ckXDF3PYZob5mi0tafIicJl4aKd9vc8tZxHi/+1hpWNvJv
kHumOK9CAESBeWQD/bdQdBI967Imw+st1YFNTs7zZa0ZDwSXmseHGtv3Wo6FL9Ax
AcdTgM+9M65TuJ8EbwEHniZ4yeXLdzddjbCfIrknkELy+1JV6ewAmzzkAy/nH1Ki
H2csjHRkPOWOyl5YZ8tKEJsyXwHk8rBa4PyCfZA0s5w4th/VeeyHLwipHdYd3HHs
DA7XPq3Pg7cJED+PC9cOlETcgs9EMx2GwhJFSbpi7ViU+U1GEQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEHShQiU7dZfacI9HOJT39yLZA4jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTBhNjlmYjUtOWU5MS0z
OGMzLTkwMTUtZDU3OWQ0ZjBhZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAXNximh3PUDLaOXAYXfrizOxhFhJVdnnyEEC4l
BGjKndfLiTviAhO8LdIiuPaNVSRWtnd8kiQVvIcNkfY+YO/u24VaUbSBKhB8xwGP
YbQZSxXqQ6+TGcQgbURbAryNN+QpoptQWJn1qI4NdEENq+FpJwfPHHcmg3HGMhl4
qZlIQGrHy561Aphtk0arKie4SWhxV3Oz3uQroUB+a59fokHI9kR767ykRg4Zy6N+
fOd2t4ebNPRol2fBr3aB8iwRyv98HkRnPagzgxEOlwaQs+q4eSxijQ+OImVZ0UC7
nWV0UAYRkN4FoRTEz737qNSiaoCSRwd6EUBd/zTBBnJlqBcL
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:48:17 2025 by rpki-client