Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a75b54a2-e274-333c-8b3a-24b062ceb489.roa
File:                     a75b54a2-e274-333c-8b3a-24b062ceb489.roa (raw, json)
Hash identifier:          fwBKxihJEhEywFFLlXySaSo19BrWePiVZU8IqeZnAJA=
Subject key identifier:   61:07:5B:32:01:D8:95:C0:66:3D:00:B4:75:29:25:B0:71:72:40:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849998F4962F8EDD1A0173EAA74
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a75b54a2-e274-333c-8b3a-24b062ceb489.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     397198
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:49:62:f8:ed:d1:a0:17:3e:aa:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=d1547d1d-ff52-43e7-b2e9-0e4bf2035e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:57:be:b1:6b:5b:f9:c1:1c:1c:5e:87:48:
                    c4:c8:54:5a:7c:1d:ec:6a:55:95:3b:6c:f1:fc:34:
                    d9:99:8d:b0:fc:b0:e7:c2:6c:91:c5:27:69:73:86:
                    ff:23:18:2e:17:c8:c7:96:70:df:b8:8f:c0:80:9f:
                    29:88:20:2a:e6:fa:89:a4:be:8f:33:d2:62:83:c1:
                    a9:86:22:a6:30:f9:82:cf:a5:31:c3:58:b8:37:48:
                    6d:02:c4:5a:47:d2:b4:56:b0:62:3f:df:cd:df:45:
                    1d:03:05:51:99:64:0d:74:03:26:cf:51:de:5b:f2:
                    bb:c6:b4:a6:b0:e9:37:33:fa:88:f7:67:b8:ae:7f:
                    5d:92:12:98:59:2d:b7:06:eb:2a:75:12:65:d0:6c:
                    0f:45:82:7d:d4:55:7c:85:5b:04:f0:b5:64:2f:19:
                    42:90:61:00:2c:1a:f2:e9:df:58:e9:84:8c:26:e4:
                    3d:49:a9:57:cf:b6:1b:f4:b5:fe:2f:02:94:22:66:
                    84:43:3b:23:7b:97:d3:cc:44:0b:f9:8e:4f:8a:30:
                    fd:2a:38:b3:c2:a4:92:f5:41:9b:ca:35:a8:eb:ee:
                    60:73:35:6a:e7:69:ba:42:53:fb:c9:eb:23:61:e2:
                    ab:73:9f:44:2a:ae:92:cc:2a:2a:56:2a:ae:c1:06:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:5B:32:01:D8:95:C0:66:3D:00:B4:75:29:25:B0:71:72:40:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a75b54a2-e274-333c-8b3a-24b062ceb489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:38:15:a9:b7:4f:90:12:d1:d3:9d:22:51:6e:d8:c1:21:44:
         52:43:c1:f6:6a:dc:6c:e9:b5:21:52:56:07:88:9d:11:9e:00:
         98:88:ef:22:52:f7:f7:cf:f5:ea:cd:20:5e:ae:c0:7a:1f:50:
         26:30:85:7b:e6:9f:1a:49:74:f1:0c:32:1f:b4:35:9b:0c:e6:
         cc:81:f5:7d:ee:e2:cc:a5:48:64:58:6c:1f:7e:e0:b1:f5:ed:
         b5:99:a6:68:d4:9d:cc:18:52:03:d7:be:2e:81:a5:3b:66:61:
         f5:0a:c2:a5:3a:71:ff:9e:8b:c8:88:bc:1e:52:44:fc:3c:a4:
         9b:8e:09:36:c4:eb:51:d8:d6:34:4e:05:d2:c1:5f:fd:9c:5d:
         ca:b5:ce:a5:0f:9c:7d:cb:6b:e6:1b:36:c0:29:71:cb:e7:be:
         99:c9:4d:03:c8:eb:05:1a:19:57:70:0b:00:ff:8a:d9:f4:67:
         8b:f8:d1:8f:e0:69:e5:0b:a8:6c:cd:9a:65:87:7d:e6:b6:8e:
         62:ae:e4:3f:6f:cb:8f:40:cd:9a:e9:87:b9:19:4d:3c:fc:32:
         68:87:96:9f:36:c1:5a:bb:55:53:c4:06:ca:13:fb:af:66:b6:
         34:cb:17:84:4d:cb:82:0b:46:71:f2:1c:4e:ad:b6:fc:a7:d5:
         59:6b:11:6d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmZj0li+O3RoBc+qnQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk
ZDE1NDdkMWQtZmY1Mi00M2U3LWIyZTktMGU0YmYyMDM1ZTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3lXvrFrW/nBHBxeh0jEyFRafB3salWVO2zx
/DTZmY2w/LDnwmyRxSdpc4b/IxguF8jHlnDfuI/AgJ8piCAq5vqJpL6PM9Jig8Gp
hiKmMPmCz6Uxw1i4N0htAsRaR9K0VrBiP9/N30UdAwVRmWQNdAMmz1HeW/K7xrSm
sOk3M/qI92e4rn9dkhKYWS23BusqdRJl0GwPRYJ91FV8hVsE8LVkLxlCkGEALBry
6d9Y6YSMJuQ9SalXz7Yb9LX+LwKUImaEQzsje5fTzEQL+Y5PijD9KjizwqSS9UGb
yjWo6+5gczVq52m6QlP7yesjYeKrc59EKq6SzCoqViquwQYSlwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGEHWzIB2JXAZj0AtHUpJbBxckDmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTc1YjU0YTItZTI3NC0z
MzNjLThiM2EtMjRiMDYyY2ViNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQByOBWpt0+QEtHTnSJRbtjBIURSQ8H2atxs6bUh
UlYHiJ0RngCYiO8iUvf3z/XqzSBersB6H1AmMIV75p8aSXTxDDIftDWbDObMgfV9
7uLMpUhkWGwffuCx9e21maZo1J3MGFID174ugaU7ZmH1CsKlOnH/novIiLweUkT8
PKSbjgk2xOtR2NY0TgXSwV/9nF3Ktc6lD5x9y2vmGzbAKXHL576ZyU0DyOsFGhlX
cAsA/4rZ9GeL+NGP4GnlC6hszZplh33mto5iruQ/b8uPQM2a6Ye5GU08/DJoh5af
NsFau1VTxAbKE/uvZrY0yxeETcuCC0Zx8hxOrbb8p9VZaxFt
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:39:49 2025 by rpki-client