Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbb47434-d6c1-3957-8407-810f0b1a034d.roa
File:                     cbb47434-d6c1-3957-8407-810f0b1a034d.roa (raw, json)
Hash identifier:          lSW/uaQvqZZS4HKvIbxH4lRLjCN9ymusKUeg0sOi/uE=
Subject key identifier:   F6:01:6F:41:19:1F:30:28:18:37:C7:E5:C7:C4:5E:CE:B9:B0:AA:2A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921342D8C75E123F42AF39F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbb47434-d6c1-3957-8407-810f0b1a034d.roa
Signing time:             Sun 09 Mar 2025 10:20:38 +0000
ROA not before:           Sun 09 Mar 2025 10:20:38 +0000
ROA not after:            Sat 07 Jun 2025 10:20:38 +0000
asID:                     577
IP address blocks:        70.50.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:2d:8c:75:e1:23:f4:2a:f3:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:38 2025 GMT
            Not After : Jun  7 10:20:38 2025 GMT
        Subject: CN=48c7b948-8dd7-4087-82cb-d9d60573444c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:99:d0:e6:0b:a7:e9:db:4c:ff:7c:81:b9:
                    ff:0a:c5:a7:d2:bc:96:2f:c7:a5:9c:16:b8:65:df:
                    a9:db:33:21:e4:b8:9a:4e:49:0e:67:3c:42:bd:02:
                    ed:d8:8d:f4:ce:22:96:0e:3d:85:f0:5d:b8:3e:8f:
                    7c:05:0d:0f:ac:e9:ad:1f:3a:6d:30:89:4d:a9:a1:
                    20:d3:ce:4f:e0:d1:ad:99:63:c4:2a:17:e0:35:82:
                    f6:26:5f:f9:e6:59:5f:3a:3e:df:ef:3c:60:98:11:
                    f8:b4:df:df:b5:63:22:f0:70:df:95:d6:69:5a:31:
                    1d:ed:52:98:b5:7f:4b:06:d7:56:a5:4b:b5:13:dd:
                    3f:43:53:88:03:c0:39:e9:95:6b:1a:ad:3c:b7:d6:
                    de:b4:65:2b:93:16:0d:29:f6:ad:e0:1e:fa:36:b5:
                    b6:a5:12:f3:2a:da:1e:59:2a:f9:fa:dd:aa:4d:9b:
                    13:5e:6b:82:c4:86:4b:90:c1:08:89:bc:8c:9e:3b:
                    df:88:8d:36:42:7a:52:da:9b:f5:29:5e:ab:5f:93:
                    96:f1:c7:60:6e:18:c0:7a:59:0a:94:50:72:42:51:
                    ef:7b:36:b1:ba:1f:cf:a3:11:d3:11:d3:ff:0c:11:
                    55:81:cc:58:61:70:06:0d:a5:d6:45:05:bd:ba:6e:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:01:6F:41:19:1F:30:28:18:37:C7:E5:C7:C4:5E:CE:B9:B0:AA:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbb47434-d6c1-3957-8407-810f0b1a034d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.50.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:8f:31:bf:a3:87:c5:d3:f7:cc:91:5f:56:22:a9:4f:6a:88:
         14:c3:a9:c7:1e:43:ea:c8:d7:a8:f5:09:ac:30:2d:dd:39:bb:
         1f:ad:84:63:2a:ad:b2:0c:01:62:14:50:d4:eb:df:12:3d:ea:
         a0:c5:b6:bc:3f:21:b0:e1:ea:73:38:79:26:2c:b0:9a:76:48:
         ef:4d:90:9a:13:75:0b:1e:37:90:97:59:ea:25:01:40:e4:03:
         6f:82:c9:90:d4:cb:0c:27:fa:06:9f:2b:0b:5e:b2:ba:1f:f8:
         5b:42:b3:ae:29:0f:e0:06:47:9d:35:ac:49:f2:ab:88:dc:20:
         0f:a6:b6:70:fb:2f:53:e9:a8:86:fe:23:d1:10:42:58:cf:6a:
         6a:b3:52:79:81:83:65:6e:45:52:df:d4:b4:cb:44:e3:ea:78:
         85:1a:03:78:f9:96:e0:4c:a4:a6:df:50:18:97:9e:c7:95:f1:
         8b:ba:de:e4:ed:3f:6a:2d:6a:30:77:1b:d0:28:57:8c:0e:32:
         8f:27:17:fb:c5:a0:7e:86:b4:af:95:57:d0:4f:88:17:56:09:
         27:62:07:a6:ff:9d:85:91:f9:db:2b:52:fd:b6:79:10:9c:77:
         4d:3c:9e:7d:09:4a:49:27:59:8f:5c:af:7d:7e:c2:e5:fb:58:
         78:e6:f8:34
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkhNC2MdeEj9CrznwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjAzOFoXDTI1MDYwNzEwMjAzOFowLzEtMCsGA1UEAxMk
NDhjN2I5NDgtOGRkNy00MDg3LTgyY2ItZDlkNjA1NzM0NDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4yZ0OYLp+nbTP98gbn/CsWn0ryWL8elnBa4
Zd+p2zMh5LiaTkkOZzxCvQLt2I30ziKWDj2F8F24Po98BQ0PrOmtHzptMIlNqaEg
085P4NGtmWPEKhfgNYL2Jl/55llfOj7f7zxgmBH4tN/ftWMi8HDfldZpWjEd7VKY
tX9LBtdWpUu1E90/Q1OIA8A56ZVrGq08t9betGUrkxYNKfat4B76NrW2pRLzKtoe
WSr5+t2qTZsTXmuCxIZLkMEIibyMnjvfiI02QnpS2pv1KV6rX5OW8cdgbhjAelkK
lFByQlHvezaxuh/PoxHTEdP/DBFVgcxYYXAGDaXWRQW9um66FQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPYBb0EZHzAoGDfH5cfEXs65sKoqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvY2JiNDc0MzQtZDZjMS0z
OTU3LTg0MDctODEwZjBiMWEwMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARjIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYY8xv6OHxdP3zJFfViKpT2qIFMOpxx5D6sjXqPUJrDAt3Tm7H62EYyqt
sgwBYhRQ1OvfEj3qoMW2vD8hsOHqczh5JiywmnZI702QmhN1Cx43kJdZ6iUBQOQD
b4LJkNTLDCf6Bp8rC16yuh/4W0KzrikP4AZHnTWsSfKriNwgD6a2cPsvU+mohv4j
0RBCWM9qarNSeYGDZW5FUt/UtMtE4+p4hRoDePmW4Eykpt9QGJeex5Xxi7re5O0/
ai1qMHcb0ChXjA4yjycX+8Wgfoa0r5VX0E+IF1YJJ2IHpv+dhZH52ytS/bZ5EJx3
TTyefQlKSSdZj1yvfX7C5ftYeOb4NA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:32 2025 by rpki-client