Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/2731d0ed-f273-36ca-997b-8f2c5f23b735.roa
File:                     2731d0ed-f273-36ca-997b-8f2c5f23b735.roa (raw, json)
Hash identifier:          ixDq4Am2O25t1b80/ejSEdEDlGDZCOXHHFphVCudjC0=
Subject key identifier:   81:CA:BB:A7:4E:5A:B3:CD:4A:4C:A5:44:70:AF:03:3F:D1:C2:4A:0B
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F43285849998F38394182CE91ADFFB9E0
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/2731d0ed-f273-36ca-997b-8f2c5f23b735.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     40403
IP address blocks:        134.202.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:38:39:41:82:ce:91:ad:ff:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=43447397-d724-4ef9-a3a6-ef82cceeb48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:33:dd:36:36:4c:4e:9d:d7:f4:73:56:74:
                    6e:71:61:29:a5:c8:70:ad:cc:35:de:8e:1e:46:4e:
                    d9:e2:a6:2b:46:a3:61:ad:20:da:86:de:75:6c:cf:
                    e7:8f:08:62:54:c9:7f:f5:9d:fc:e0:24:5f:8f:96:
                    f8:e5:ed:b7:46:10:14:30:61:a9:81:f9:6c:73:14:
                    87:74:c8:85:78:52:fb:77:f5:bd:4b:d7:a1:45:f7:
                    d6:4c:a4:ce:4d:f1:06:b0:67:44:69:59:6f:c8:99:
                    b7:73:9c:fc:13:62:b5:86:fc:e4:64:bb:a9:a5:a7:
                    63:e5:bd:dc:0c:48:86:2c:8d:21:66:25:77:8e:41:
                    8c:d2:76:62:d2:5e:12:8f:1f:7d:50:92:17:fe:a4:
                    70:e4:71:eb:68:27:cd:9f:83:53:14:a9:73:4d:5e:
                    3e:03:df:eb:44:00:d2:33:fd:3c:a5:6a:e4:4a:6a:
                    9d:1c:98:5c:f7:da:4d:27:b3:8b:0e:08:3d:b0:d1:
                    df:22:8b:f9:25:75:65:b5:bd:ad:ca:73:fd:e3:e0:
                    41:75:79:13:23:36:e4:85:c2:ca:7c:94:d6:a6:56:
                    7a:b6:9e:71:bb:79:09:c7:5c:d6:46:f3:73:88:f5:
                    22:68:2d:8b:a3:67:3f:c0:94:c0:22:17:bb:15:21:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CA:BB:A7:4E:5A:B3:CD:4A:4C:A5:44:70:AF:03:3F:D1:C2:4A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/2731d0ed-f273-36ca-997b-8f2c5f23b735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:16:b5:69:83:ed:46:cf:05:2e:d3:0d:c7:7f:c7:ad:1f:
         65:0c:37:c7:b6:79:0a:ef:ea:d9:18:39:e0:0e:19:45:02:59:
         94:8a:4d:8d:e1:58:8c:57:90:1f:f2:29:19:69:23:f2:1e:a2:
         51:a1:40:41:c9:b1:66:11:ba:9c:de:af:0b:be:96:46:9e:90:
         40:c0:01:04:80:7f:e0:d1:df:b9:b9:ea:b6:71:a0:e7:eb:b4:
         fd:84:76:e5:73:dd:b4:82:34:80:69:36:f7:66:19:6a:05:e3:
         a3:96:ad:28:d2:48:fa:89:f4:c0:41:71:eb:ef:c0:d9:7d:31:
         59:30:1e:e7:06:60:a8:ba:f7:9c:c0:63:37:2b:90:b9:a2:45:
         ea:cf:8e:95:34:a7:4e:00:b7:dc:0b:cd:c1:cf:2d:5f:f9:4e:
         ef:7d:04:41:0d:72:2b:9e:8a:82:22:a2:e4:bb:47:40:68:3b:
         ff:60:6f:90:e2:ff:d2:18:e0:05:d7:09:46:61:b8:86:3c:af:
         fe:ba:e6:04:65:a6:3f:6f:41:81:bb:81:4a:bb:5b:0f:d9:11:
         bc:42:a5:fa:08:3c:da:8a:30:49:13:3e:65:e8:88:6c:8b:58:
         42:b9:be:68:ef:fd:21:21:2b:d5:03:d3:f7:7f:7e:a0:02:aa:
         eb:25:48:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzg5QYLOka3/ueAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk
NDM0NDczOTctZDcyNC00ZWY5LWEzYTYtZWY4MmNjZWViNDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSkz3TY2TE6d1/RzVnRucWEppchwrcw13o4e
Rk7Z4qYrRqNhrSDaht51bM/njwhiVMl/9Z384CRfj5b45e23RhAUMGGpgflscxSH
dMiFeFL7d/W9S9ehRffWTKTOTfEGsGdEaVlvyJm3c5z8E2K1hvzkZLuppadj5b3c
DEiGLI0hZiV3jkGM0nZi0l4Sjx99UJIX/qRw5HHraCfNn4NTFKlzTV4+A9/rRADS
M/08pWrkSmqdHJhc99pNJ7OLDgg9sNHfIov5JXVltb2tynP94+BBdXkTIzbkhcLK
fJTWplZ6tp5xu3kJx1zWRvNziPUiaC2Lo2c/wJTAIhe7FSGWtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIHKu6dOWrPNSkylRHCvAz/RwkoLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvMjczMWQwZWQtZjI3My0z
NmNhLTk5N2ItOGYyYzVmMjNiNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhso4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBdFrVpg+1GzwUu0w3Hf8etH2UMN8e2eQrv6tkYOeAOGUUCWZSKTY3h
WIxXkB/yKRlpI/IeolGhQEHJsWYRupzerwu+lkaekEDAAQSAf+DR37m56rZxoOfr
tP2EduVz3bSCNIBpNvdmGWoF46OWrSjSSPqJ9MBBcevvwNl9MVkwHucGYKi695zA
YzcrkLmiRerPjpU0p04At9wLzcHPLV/5Tu99BEENciueioIiouS7R0BoO/9gb5Di
/9IY4AXXCUZhuIY8r/665gRlpj9vQYG7gUq7Ww/ZEbxCpfoIPNqKMEkTPmXoiGyL
WEK5vmjv/SEhK9UD0/d/fqACquslSKo=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:51:40 2025 by rpki-client