Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/53c48d25-63ee-31d8-92e0-3f33e0cc62a0.roa
File:                     53c48d25-63ee-31d8-92e0-3f33e0cc62a0.roa (raw, json)
Hash identifier:          0qMqVM/11TqcExthvNdq09gJUKoO33r91mhpDciT6as=
Subject key identifier:   C2:CA:77:A8:B8:3A:46:48:AE:75:28:AF:D9:83:B7:4C:A9:09:0C:5B
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F432858496A19A96880C9D355CBBC6D00
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/53c48d25-63ee-31d8-92e0-3f33e0cc62a0.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     46455
IP address blocks:        76.77.16.0/23 maxlen: 24
                          76.77.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a9:68:80:c9:d3:55:cb:bc:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=a3515bb4-bbb1-489f-813e-7c86bb5a25e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:37:ce:cb:ef:2a:f2:7f:76:1c:85:60:a0:
                    0d:ea:97:78:cd:48:19:65:d0:1a:78:73:03:59:6b:
                    1d:88:93:a8:2a:52:47:91:68:78:5d:0b:a2:46:96:
                    ce:ea:56:f8:aa:8a:4a:29:62:76:8f:4f:87:f0:f1:
                    fb:c6:64:21:78:ac:09:ef:ca:21:b3:3d:0e:8e:89:
                    a7:d5:c6:26:2d:b0:85:25:20:d0:a2:99:41:87:a9:
                    d6:4b:94:47:91:2f:c6:57:4e:1f:11:c1:fb:aa:39:
                    22:1d:d7:0e:a4:36:1e:8e:af:a4:87:c5:0a:76:52:
                    f7:f8:fb:ac:94:71:c8:4b:4c:25:a8:bd:2d:e0:6b:
                    08:cb:69:8e:99:0e:44:6a:de:2d:f1:c4:7a:04:8d:
                    51:ae:f4:f3:df:5f:66:a8:7e:8f:a0:28:01:bb:b0:
                    77:38:9d:a6:02:30:5f:ce:83:b0:93:6f:e5:0c:bb:
                    09:3a:4e:56:0e:5b:21:01:cd:d0:47:8a:f5:9e:a4:
                    45:a8:67:4b:50:dd:81:b1:19:87:7c:eb:7a:ad:03:
                    b6:c7:4f:76:ce:4a:05:f8:31:3c:78:8d:80:97:ff:
                    01:1d:fd:bf:b8:24:17:0c:9e:7c:af:0b:08:a3:44:
                    6b:6d:0b:28:18:d7:0a:be:6c:27:2a:a1:56:5e:04:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CA:77:A8:B8:3A:46:48:AE:75:28:AF:D9:83:B7:4C:A9:09:0C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/53c48d25-63ee-31d8-92e0-3f33e0cc62a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.16.0/23
                  76.77.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:10:59:03:06:97:d8:64:d4:4d:81:bd:5d:a6:80:cc:63:88:
         cb:52:4c:f6:a8:fc:2a:3d:1c:1e:35:67:ea:a6:b6:5a:3c:32:
         77:ca:94:c5:09:81:ae:10:71:96:ea:b5:ff:25:4d:48:c0:58:
         14:79:fc:ec:c0:26:8b:02:0d:0a:c3:0b:1b:e4:2f:4b:eb:33:
         13:de:6b:16:7d:22:87:78:23:7b:41:ab:ff:bf:05:43:9f:31:
         e4:da:4e:13:65:9d:5f:c8:97:e7:62:51:29:b9:af:57:d2:f7:
         0b:8d:65:ec:2d:81:f4:52:69:e8:c4:72:82:b6:e2:92:0e:cd:
         8b:ed:c6:9b:47:52:ff:be:a6:15:8b:85:87:fa:ec:72:43:49:
         66:7c:88:9a:23:20:9a:ef:ed:b0:fb:b7:0f:ee:93:52:4d:98:
         b0:09:01:04:4b:22:e1:b1:b4:91:e0:f4:0b:56:30:c0:27:8c:
         aa:c7:5e:f3:50:8f:7a:92:47:b0:3a:f1:ca:e0:29:1e:22:9d:
         7a:81:7d:9d:92:b5:61:c8:e0:7a:c0:39:b7:15:63:20:c7:5f:
         59:ff:d1:25:99:1b:2b:bc:a8:44:e4:29:1e:12:cb:63:e8:68:
         6f:28:8d:5d:05:5b:05:8a:83:34:9c:5b:46:57:e5:5f:f2:fb:
         4b:1d:76:e0
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElqGalogMnTVcu8bQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw
MTE0MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
YTM1MTViYjQtYmJiMS00ODlmLTgxM2UtN2M4NmJiNWEyNWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY03zsvvKvJ/dhyFYKAN6pd4zUgZZdAaeHMD
WWsdiJOoKlJHkWh4XQuiRpbO6lb4qopKKWJ2j0+H8PH7xmQheKwJ78ohsz0Ojomn
1cYmLbCFJSDQoplBh6nWS5RHkS/GV04fEcH7qjkiHdcOpDYejq+kh8UKdlL3+Pus
lHHIS0wlqL0t4GsIy2mOmQ5Eat4t8cR6BI1RrvTz319mqH6PoCgBu7B3OJ2mAjBf
zoOwk2/lDLsJOk5WDlshAc3QR4r1nqRFqGdLUN2BsRmHfOt6rQO2x092zkoF+DE8
eI2Al/8BHf2/uCQXDJ58rwsIo0RrbQsoGNcKvmwnKqFWXgTiNQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMLKd6i4OkZIrnUor9mDt0ypCQxbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1
OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvNTNjNDhkMjUtNjNlZS0z
MWQ4LTkyZTAtM2YzM2UwY2M2MmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk
MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk
MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4
N2E3ZDAxMTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTE0QAwQA
TE0VMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALwQWQMGl9hk1E2BvV2mgMxjiMtSTPao/Co9HB41Z+qmtlo8
MnfKlMUJga4QcZbqtf8lTUjAWBR5/OzAJosCDQrDCxvkL0vrMxPeaxZ9Iod4I3tB
q/+/BUOfMeTaThNlnV/Il+diUSm5r1fS9wuNZewtgfRSaejEcoK24pIOzYvtxptH
Uv++phWLhYf67HJDSWZ8iJojIJrv7bD7tw/uk1JNmLAJAQRLIuGxtJHg9AtWMMAn
jKrHXvNQj3qSR7A68crgKR4inXqBfZ2StWHI4HrAObcVYyDHX1n/0SWZGyu8qETk
KR4Sy2PoaG8ojV0FWwWKgzScW0ZX5V/y+0sdduA=
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:09 2025 by rpki-client