Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1a5f1a2b-2efd-39c9-a560-f6118a6ae6cd.roa
File:                     1a5f1a2b-2efd-39c9-a560-f6118a6ae6cd.roa (raw, json)
Hash identifier:          wN5vrUV9TiUgJlRHN25/y7XmAZPbKSlPWnU5C22BSTQ=
Subject key identifier:   50:D7:94:86:E4:B3:95:2B:A3:3B:49:7F:60:21:21:0F:C4:EC:87:74
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFDB1A2ADF3A72DE35E300
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1a5f1a2b-2efd-39c9-a560-f6118a6ae6cd.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     53338
IP address blocks:        216.191.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:db:1a:2a:df:3a:72:de:35:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=00f8a0be-fafd-4494-b749-ae52325df805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:98:8e:06:34:b4:94:4d:68:07:89:90:4b:
                    41:fa:c2:44:a5:0f:19:72:81:cb:c0:1d:b1:1c:3e:
                    af:79:68:85:36:4d:74:01:48:f9:31:c2:c5:9a:9a:
                    87:3b:a3:38:5b:65:97:3d:bf:2d:7c:c9:1d:44:a9:
                    8e:82:3c:6e:b2:a4:c7:ff:d3:90:73:1b:ff:94:8a:
                    9f:e0:d9:c6:4a:66:93:22:dc:91:91:8b:67:48:d0:
                    0e:ac:cc:3d:06:a2:3d:6a:62:87:ae:69:ab:fc:ab:
                    35:ee:2a:69:5e:f1:e6:0b:46:39:f1:96:b6:4f:5b:
                    9c:ef:ef:77:68:03:94:03:8b:31:4f:20:06:ed:90:
                    0c:f7:f2:ef:d9:3b:da:9f:59:6b:1a:41:9d:8b:49:
                    6d:d1:3d:c8:17:af:0f:49:c1:f8:3f:c8:09:d9:79:
                    8c:80:df:c9:e2:57:1c:01:62:aa:20:57:75:13:4b:
                    86:cf:d9:66:bd:01:42:6b:74:b4:40:ec:42:6a:ad:
                    36:c9:fe:62:5c:fa:83:90:15:8e:fe:ff:eb:15:47:
                    3d:95:2a:0f:7c:87:e7:23:4d:60:db:cd:8f:9e:ea:
                    7c:22:4f:51:1e:ee:60:27:18:bc:b6:3e:1b:b1:e2:
                    f2:73:93:e0:fc:05:fe:8c:1b:4c:ab:ee:fb:db:25:
                    26:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D7:94:86:E4:B3:95:2B:A3:3B:49:7F:60:21:21:0F:C4:EC:87:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1a5f1a2b-2efd-39c9-a560-f6118a6ae6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0f:d3:b3:b3:5a:d0:43:26:8c:10:da:f7:ee:68:74:da:d4:
         12:e6:c5:cd:57:97:b1:cc:22:89:42:73:35:65:a6:2a:91:0b:
         03:6a:7d:97:83:e1:db:64:d1:a4:e1:08:49:30:c9:54:93:f6:
         29:77:5c:9b:a1:32:87:aa:4a:92:44:e9:89:b5:7b:53:a0:2d:
         20:49:af:81:4c:62:0f:c2:5f:02:57:74:e2:e6:5a:75:49:45:
         44:61:be:af:79:bc:1d:cd:f7:1a:07:7a:76:e9:42:bf:fa:85:
         9d:1b:12:a1:b0:ea:bc:60:36:d5:ac:5d:c9:d2:7d:d5:6e:96:
         a9:90:88:4d:30:a0:99:93:58:49:74:e5:5d:5e:d1:21:65:ee:
         00:70:dc:36:1a:9a:33:a0:a9:ef:58:fb:63:04:29:a0:47:fc:
         68:e2:c3:66:7e:fb:6a:74:e5:4f:02:7f:28:5b:0b:49:a6:99:
         1f:97:88:7c:8f:a6:50:36:2c:e6:f4:d3:1f:e1:c9:8b:f5:66:
         3b:3c:4d:95:80:69:0d:b0:07:28:fa:17:26:3b:b7:c1:5b:6c:
         53:fe:a1:7a:6d:6f:07:8a:54:70:37:08:9a:cc:ab:c1:9a:42:
         9c:67:45:c1:65:79:79:2a:9f:39:38:43:fd:56:6c:9a:f1:a8:
         92:1e:c2:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539saKt86ct414wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
MDBmOGEwYmUtZmFmZC00NDk0LWI3NDktYWU1MjMyNWRmODA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8SYjgY0tJRNaAeJkEtB+sJEpQ8ZcoHLwB2x
HD6veWiFNk10AUj5McLFmpqHO6M4W2WXPb8tfMkdRKmOgjxusqTH/9OQcxv/lIqf
4NnGSmaTItyRkYtnSNAOrMw9BqI9amKHrmmr/Ks17ippXvHmC0Y58Za2T1uc7+93
aAOUA4sxTyAG7ZAM9/Lv2Tvan1lrGkGdi0lt0T3IF68PScH4P8gJ2XmMgN/J4lcc
AWKqIFd1E0uGz9lmvQFCa3S0QOxCaq02yf5iXPqDkBWO/v/rFUc9lSoPfIfnI01g
282Pnup8Ik9RHu5gJxi8tj4bseLyc5Pg/AX+jBtMq+772yUmYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDXlIbks5UroztJf2AhIQ/E7Id0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMWE1ZjFhMmItMmVmZC0z
OWM5LWE1NjAtZjYxMThhNmFlNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2L8VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADIP07OzWtBDJowQ2vfuaHTa1BLmxc1Xl7HMIolCczVlpiqRCwNqfZeD
4dtk0aThCEkwyVST9il3XJuhMoeqSpJE6Ym1e1OgLSBJr4FMYg/CXwJXdOLmWnVJ
RURhvq95vB3N9xoHenbpQr/6hZ0bEqGw6rxgNtWsXcnSfdVulqmQiE0woJmTWEl0
5V1e0SFl7gBw3DYamjOgqe9Y+2MEKaBH/Gjiw2Z++2p05U8CfyhbC0mmmR+XiHyP
plA2LOb00x/hyYv1Zjs8TZWAaQ2wByj6FyY7t8FbbFP+oXptbweKVHA3CJrMq8Ga
QpxnRcFleXkqnzk4Q/1WbJrxqJIewmE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:24:11 2025 by rpki-client