Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/e005422c-909f-3583-b023-368a18698d57.roa
File:                     e005422c-909f-3583-b023-368a18698d57.roa (raw, json)
Hash identifier:          dQqpi7mXNtKnfEwClECZIkWBgxFE1kSPiSLCHXjA9cs=
Subject key identifier:   D2:62:3B:C2:D5:54:A8:6F:C1:36:C1:71:A0:3B:2F:0D:7C:CB:40:E9
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F432858499DDE72B9ECD00CC59B940980
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/e005422c-909f-3583-b023-368a18698d57.roa
Signing time:             Wed 23 Apr 2025 02:03:56 +0000
ROA not before:           Wed 23 Apr 2025 02:03:56 +0000
ROA not after:            Tue 22 Jul 2025 02:03:56 +0000
asID:                     0
IP address blocks:        157.133.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:de:72:b9:ec:d0:0c:c5:9b:94:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Apr 23 02:03:56 2025 GMT
            Not After : Jul 22 02:03:56 2025 GMT
        Subject: CN=74e66f1d-41bb-4d2b-84fa-e345d6f3129c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:0f:74:c4:7d:b1:9e:75:91:e0:0e:81:cc:
                    1b:18:f1:e0:16:5a:e9:fd:b4:5a:2d:bb:1f:6a:52:
                    16:70:12:48:7f:be:12:c8:d5:8f:12:9a:20:0d:fa:
                    b0:27:f6:92:96:8c:85:0d:43:92:4d:0e:b0:af:74:
                    e5:fe:c5:c1:b5:90:01:80:ed:d5:93:9e:55:9b:cd:
                    13:1a:23:be:f8:99:3b:42:c3:44:d9:4d:57:bf:32:
                    21:c6:06:b3:26:d2:51:55:34:42:5d:7e:a7:84:26:
                    ad:60:78:d3:26:b9:ee:29:8e:75:c5:25:e8:04:3d:
                    d4:96:40:df:c8:76:67:ef:0f:c2:54:93:13:94:fc:
                    7b:f7:ef:ef:ef:9e:98:fe:79:67:e6:ab:66:ba:bc:
                    3b:a1:c7:a7:84:31:89:45:3f:6d:ef:98:6b:7f:c0:
                    f0:f4:f3:d3:00:39:d3:f7:3a:b7:ac:a7:a1:da:4c:
                    81:52:70:1e:e5:73:e7:19:49:72:15:76:77:95:45:
                    79:cb:fb:35:d7:a3:b2:4d:86:92:05:87:24:bd:10:
                    41:25:30:89:31:0a:fa:6e:d8:7b:50:65:02:c0:08:
                    59:e3:4e:e8:74:10:f0:fd:8e:d1:5c:d2:f6:e7:17:
                    29:f8:48:1d:ee:ed:da:33:9f:09:7a:ff:20:3e:97:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:62:3B:C2:D5:54:A8:6F:C1:36:C1:71:A0:3B:2F:0D:7C:CB:40:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/e005422c-909f-3583-b023-368a18698d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:38:10:cd:f0:87:6d:aa:cb:b7:59:57:21:58:80:a2:75:
         a5:54:fd:da:db:b6:f5:a8:76:4c:2c:0f:a0:0b:77:7c:09:97:
         09:bc:aa:3e:ce:1b:84:77:5c:4d:e1:6a:a3:26:33:ae:6c:fd:
         15:e2:43:ee:94:0d:94:ce:ce:e2:48:2a:88:fb:16:63:b6:3b:
         b6:bd:9f:a9:2f:01:cf:5f:89:a3:75:b8:6d:16:4b:4b:d8:08:
         04:eb:5f:6b:cb:74:4c:d4:7e:e5:91:20:a4:34:43:88:ea:5a:
         18:62:bb:fb:0d:7e:52:2d:23:60:01:22:3b:af:92:32:e6:5c:
         b2:23:dc:f3:b7:f9:53:a9:ef:41:7d:58:92:ca:fc:ac:27:4b:
         d8:07:d2:9f:19:7a:e3:fd:86:77:aa:df:aa:fc:9f:4e:20:74:
         67:0d:c4:b4:ff:49:2c:de:c5:0a:e9:a5:be:32:af:3b:16:d8:
         9c:bf:54:42:11:ae:71:a5:13:22:f3:14:cc:14:a7:75:e9:02:
         1e:73:e2:49:02:35:78:c9:a1:9a:3d:c3:e1:9b:7d:53:a3:08:
         09:a1:18:be:8c:61:91:5a:c1:21:46:12:a7:1d:7a:a1:a4:04:
         50:72:d2:41:98:7d:6b:61:c0:11:c7:da:d2:cf:73:44:d5:fb:
         b0:63:0c:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmd3nK57NAMxZuUCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI1MDQyMzAyMDM1NloXDTI1MDcyMjAyMDM1NlowLzEtMCsGA1UEAxMk
NzRlNjZmMWQtNDFiYi00ZDJiLTg0ZmEtZTM0NWQ2ZjMxMjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldkPdMR9sZ51keAOgcwbGPHgFlrp/bRaLbsf
alIWcBJIf74SyNWPEpogDfqwJ/aSloyFDUOSTQ6wr3Tl/sXBtZABgO3Vk55Vm80T
GiO++Jk7QsNE2U1XvzIhxgazJtJRVTRCXX6nhCatYHjTJrnuKY51xSXoBD3UlkDf
yHZn7w/CVJMTlPx79+/v756Y/nln5qtmurw7ocenhDGJRT9t75hrf8Dw9PPTADnT
9zq3rKeh2kyBUnAe5XPnGUlyFXZ3lUV5y/s116OyTYaSBYckvRBBJTCJMQr6bth7
UGUCwAhZ407odBDw/Y7RXNL25xcp+Egd7u3aM58Jev8gPpdkhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJiO8LVVKhvwTbBcaA7Lw18y0DpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZTAwNTQyMmMtOTA5Zi0z
NTgzLWIwMjMtMzY4YTE4Njk4ZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnYUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+/OBDN8Idtqsu3WVchWICidaVU/drbtvWodkwsD6ALd3wJlwm8qj7O
G4R3XE3haqMmM65s/RXiQ+6UDZTOzuJIKoj7FmO2O7a9n6kvAc9fiaN1uG0WS0vY
CATrX2vLdEzUfuWRIKQ0Q4jqWhhiu/sNflItI2ABIjuvkjLmXLIj3PO3+VOp70F9
WJLK/KwnS9gH0p8ZeuP9hneq36r8n04gdGcNxLT/SSzexQrppb4yrzsW2Jy/VEIR
rnGlEyLzFMwUp3XpAh5z4kkCNXjJoZo9w+GbfVOjCAmhGL6MYZFawSFGEqcdeqGk
BFBy0kGYfWthwBHH2tLPc0TV+7BjDK4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:52:03 2025 by rpki-client