Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32ac0070-33f2-3179-bf7a-1ddaa9b523af.roa
File:                     32ac0070-33f2-3179-bf7a-1ddaa9b523af.roa (raw, json)
Hash identifier:          b9XYPCYOv9CPbbBuV5CIWZU2eJyI2dSoiRMjyA9luco=
Subject key identifier:   FD:2E:F9:26:08:E0:E5:39:47:18:4E:CD:A6:05:DE:5D:16:5A:E1:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C6CD15EE950B128AA9780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32ac0070-33f2-3179-bf7a-1ddaa9b523af.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33287
IP address blocks:        50.77.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:6c:d1:5e:e9:50:b1:28:aa:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=4ce65bf7-c5e0-469d-882d-b9a1d48eb7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:ea:59:fe:ca:3b:bd:31:17:aa:b9:91:58:
                    b7:a4:0b:7c:d0:73:1b:8b:e4:a1:00:8e:e1:4a:aa:
                    f6:5e:6c:3a:9c:4a:0e:04:cc:cb:c1:0d:f1:33:2b:
                    fb:bb:62:74:9e:05:08:ee:af:46:78:82:c5:ea:ed:
                    2d:52:38:f8:9f:ce:60:95:00:89:c4:0e:12:cd:5d:
                    cd:d7:2e:6d:5d:13:59:7c:c4:da:e7:f1:b3:8a:cf:
                    3c:cf:e9:c0:1c:94:d3:c6:6e:ee:0b:92:55:6e:a7:
                    c7:94:e6:b2:c9:73:da:b0:c9:e1:91:1c:c6:02:5a:
                    34:72:b1:de:ae:2a:de:ab:af:2a:ad:5d:ac:d8:dc:
                    0c:3d:73:67:57:38:8e:50:e1:1d:6a:e2:82:a4:5a:
                    83:85:b7:fc:3d:be:7a:ef:69:03:89:97:09:2f:97:
                    69:6b:2c:c5:03:62:20:a2:2c:6a:1e:51:f1:80:93:
                    e5:68:3a:c7:f5:c3:2a:29:19:be:0c:1e:63:28:ab:
                    35:70:f3:f8:ab:a5:02:af:1b:5a:d3:58:a1:f6:84:
                    03:9a:21:fd:5a:d1:52:a4:da:99:a0:97:fb:df:25:
                    79:d7:09:95:4e:af:70:ce:81:36:1c:1a:24:79:e4:
                    49:b2:0c:05:ec:41:81:53:f7:7c:26:f9:66:39:ca:
                    77:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2E:F9:26:08:E0:E5:39:47:18:4E:CD:A6:05:DE:5D:16:5A:E1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32ac0070-33f2-3179-bf7a-1ddaa9b523af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.77.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:38:b4:66:51:ce:1e:c2:fe:68:cb:67:e8:e0:be:3b:7b:ed:
         77:4e:ed:8b:5b:2d:4a:74:33:9a:63:ad:ca:b5:79:e7:00:e4:
         19:57:3f:1a:5b:83:d7:59:4e:5d:29:8e:99:6a:aa:b7:87:cd:
         9c:90:79:6f:4f:05:90:fd:51:4b:fe:da:5e:44:fa:99:fe:d2:
         c6:64:b7:ad:31:38:87:d3:b3:e7:9a:57:67:f2:2d:83:8e:5f:
         85:69:85:e3:26:d6:25:5f:70:31:ab:b4:b6:fe:b0:bc:72:45:
         9c:9f:dd:f8:4a:98:3b:e8:29:f8:a9:5e:f6:ec:74:f3:21:67:
         ba:95:3e:2f:0d:0a:29:d5:39:70:fa:96:c4:f5:a2:3e:e2:af:
         60:25:dd:30:30:44:70:3b:45:9f:42:e9:5d:34:3d:ba:6f:60:
         81:df:5e:0e:e5:8f:77:a2:79:44:dc:fd:b4:90:07:d2:29:c3:
         dd:70:b0:df:97:09:73:71:a4:d0:a1:3a:a0:5c:67:10:44:a9:
         1a:28:1c:93:b6:d5:ed:54:17:e2:c4:f1:e5:00:ec:78:3b:ae:
         18:a6:4c:95:61:13:23:8d:fb:d1:f5:61:34:22:0d:57:fe:9e:
         45:ba:be:c7:89:91:e0:ff:e4:49:df:39:ef:67:ff:fd:8b:e0:
         21:40:0f:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebGzRXulQsSiql4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NGNlNjViZjctYzVlMC00NjlkLTg4MmQtYjlhMWQ0OGViN2E0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVzqWf7KO70xF6q5kVi3pAt80HMbi+ShAI7h
Sqr2Xmw6nEoOBMzLwQ3xMyv7u2J0ngUI7q9GeILF6u0tUjj4n85glQCJxA4SzV3N
1y5tXRNZfMTa5/Gzis88z+nAHJTTxm7uC5JVbqfHlOayyXPasMnhkRzGAlo0crHe
rireq68qrV2s2NwMPXNnVziOUOEdauKCpFqDhbf8Pb5672kDiZcJL5dpayzFA2Ig
oixqHlHxgJPlaDrH9cMqKRm+DB5jKKs1cPP4q6UCrxta01ih9oQDmiH9WtFSpNqZ
oJf73yV51wmVTq9wzoE2HBokeeRJsgwF7EGBU/d8JvlmOcp35QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0u+SYI4OU5RxhOzaYF3l0WWuGjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJhYzAwNzAtMzNmMi0z
MTc5LWJmN2EtMWRkYWE5YjUyM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMk1QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ4tGZRzh7C/mjLZ+jgvjt77XdO7YtbLUp0M5pjrcq1eecA5BlXPxpb
g9dZTl0pjplqqreHzZyQeW9PBZD9UUv+2l5E+pn+0sZkt60xOIfTs+eaV2fyLYOO
X4VpheMm1iVfcDGrtLb+sLxyRZyf3fhKmDvoKfipXvbsdPMhZ7qVPi8NCinVOXD6
lsT1oj7ir2Al3TAwRHA7RZ9C6V00PbpvYIHfXg7lj3eieUTc/bSQB9Ipw91wsN+X
CXNxpNChOqBcZxBEqRooHJO21e1UF+LE8eUA7Hg7rhimTJVhEyON+9H1YTQiDVf+
nkW6vseJkeD/5EnfOe9n//2L4CFAD40=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:26 2025 by rpki-client