Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa
File:                     77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa (raw, json)
Hash identifier:          6+4WhPfCGukQoZtojdLwHyJssIJe5L4CudEqN9NtQvc=
Subject key identifier:   35:71:1E:E8:B9:C8:42:04:70:D9:0C:E8:A1:E2:51:47:CE:09:B7:AA
Certificate issuer:       /CN=1c6fc533-f46c-474e-9480-56c3b0fb1938
Certificate serial:       010D0C9F432858493C0931697A118E0F282A3D40
Authority key identifier: 45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        195.85.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:31:69:7a:11:8e:0f:28:2a:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6fc533-f46c-474e-9480-56c3b0fb1938
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=a236d393-8d87-47ee-a625-e280e553f6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:d8:73:30:68:e0:c5:21:ce:6c:b6:03:41:
                    68:97:a0:3d:ad:e1:a8:4c:d6:0b:75:1d:18:cd:ab:
                    91:e9:c0:6d:76:0c:10:ee:b4:a4:84:4d:56:00:65:
                    a4:3f:e7:db:30:60:89:f2:5a:82:0f:39:88:85:d2:
                    3e:a7:4f:95:10:07:a7:6b:60:8b:6b:79:7f:df:43:
                    a2:e4:df:db:2e:26:6a:1e:b7:58:ff:69:5d:37:44:
                    c5:89:f2:d7:e8:eb:31:95:03:2a:a0:a7:aa:a2:49:
                    ae:fe:ce:e7:85:5f:02:37:c0:82:f7:d6:ab:34:6e:
                    d8:1f:f2:4c:38:e8:66:93:4e:57:6b:7b:11:aa:b7:
                    e8:d4:fc:7f:ca:cf:0d:66:84:10:d0:83:4d:de:b8:
                    3b:03:c2:37:7c:56:73:f7:2d:17:9f:23:46:60:01:
                    40:4f:e4:c6:b9:73:4e:d4:be:ac:36:ab:79:eb:6a:
                    a7:1f:e8:2d:17:c5:0f:19:8c:67:f3:bc:11:80:97:
                    1e:30:1b:67:1a:39:ac:8b:e0:1c:25:bf:b3:3f:42:
                    f7:24:4f:d1:b8:4b:35:76:a0:07:95:2d:db:46:43:
                    61:82:48:23:c2:6c:04:05:e3:6f:d2:f4:55:0e:1a:
                    92:fd:bd:14:e6:58:e7:4f:34:40:16:e7:57:1b:e3:
                    5e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:1E:E8:B9:C8:42:04:70:D9:0C:E8:A1:E2:51:47:CE:09:B7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.crl

            X509v3 Authority Key Identifier:
                keyid:45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e7:87:78:ec:01:77:87:1f:6d:6f:7e:46:d5:a5:23:32:ba:
         19:b0:35:ae:db:ec:68:93:43:05:27:dd:bf:77:33:3c:45:00:
         c0:bd:42:95:36:f4:2b:ac:3c:dd:48:a5:19:6f:0b:b8:62:08:
         ab:37:6e:ca:77:5d:75:60:ff:f0:1d:01:48:5f:be:b4:a7:a1:
         af:90:47:06:ae:85:90:f1:a3:28:49:35:a6:db:c4:09:43:a9:
         ca:c1:90:38:6b:65:6d:a8:bf:37:63:e3:a8:26:b2:e2:7b:f9:
         ca:3e:81:21:fb:52:e6:86:3f:79:c1:97:97:1b:c6:1d:3a:27:
         8a:02:80:5e:f6:0e:ea:ff:32:25:b9:27:c7:75:82:3d:da:85:
         15:ad:44:a8:9e:09:1a:b7:42:1e:f4:80:c9:63:b9:35:f1:5c:
         7f:de:cf:0b:38:35:d8:7a:4e:f0:96:96:f1:d5:c8:8b:59:30:
         07:6f:63:70:c5:69:07:ff:89:44:8e:27:65:c5:50:82:78:20:
         a0:a0:8f:59:b5:83:d1:0e:99:20:a7:80:e9:d9:e5:ac:8b:de:
         54:4f:ea:03:30:3c:fb:51:62:a1:d2:71:82:c4:e1:e0:14:8d:
         24:0b:d4:9d:7c:0d:03:04:f4:8e:0f:8d:cf:5a:7e:b2:31:43:
         7f:f3:a0:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTFpehGODygqPUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM2ZmM1MzMtZjQ2Yy00NzRlLTk0ODAtNTZjM2IwZmIx
OTM4MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
YTIzNmQzOTMtOGQ4Ny00N2VlLWE2MjUtZTI4MGU1NTNmNmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxnYczBo4MUhzmy2A0Fol6A9reGoTNYLdR0Y
zauR6cBtdgwQ7rSkhE1WAGWkP+fbMGCJ8lqCDzmIhdI+p0+VEAena2CLa3l/30Oi
5N/bLiZqHrdY/2ldN0TFifLX6OsxlQMqoKeqokmu/s7nhV8CN8CC99arNG7YH/JM
OOhmk05Xa3sRqrfo1Px/ys8NZoQQ0INN3rg7A8I3fFZz9y0XnyNGYAFAT+TGuXNO
1L6sNqt562qnH+gtF8UPGYxn87wRgJceMBtnGjmsi+AcJb+zP0L3JE/RuEs1dqAH
lS3bRkNhgkgjwmwEBeNv0vRVDhqS/b0U5ljnTzRAFudXG+NeuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVxHui5yEIEcNkM6KHiUUfOCbeqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xYzZm
YzUzMy1mNDZjLTQ3NGUtOTQ4MC01NmMzYjBmYjE5MzgvNzdmZmQ0ZDItZmFhOS0z
YzhlLWE1YzAtYzk5Njk5ZjgzM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWM2ZmM1MzMtZjQ2Yy00NzRlLTk0
ODAtNTZjM2IwZmIxOTM4LzFjNmZjNTMzLWY0NmMtNDc0ZS05NDgwLTU2YzNiMGZi
MTkzOC5jcmwwHwYDVR0jBBgwFoAURUjG6PjtGRVJKl4s5b7+XhEuteUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xYzZmYzUzMy1mNDZjLTQ3NGUtOTQ4MC01NmMz
YjBmYjE5MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/nh3jsAXeHH21vfkbVpSMyuhmwNa7b7GiTQwUn3b93MzxFAMC9QpU2
9CusPN1IpRlvC7hiCKs3bsp3XXVg//AdAUhfvrSnoa+QRwauhZDxoyhJNabbxAlD
qcrBkDhrZW2ovzdj46gmsuJ7+co+gSH7UuaGP3nBl5cbxh06J4oCgF72Dur/MiW5
J8d1gj3ahRWtRKieCRq3Qh70gMljuTXxXH/ezws4Ndh6TvCWlvHVyItZMAdvY3DF
aQf/iUSOJ2XFUIJ4IKCgj1m1g9EOmSCngOnZ5ayL3lRP6gMwPPtRYqHScYLE4eAU
jSQL1J18DQME9I4Pjc9afrIxQ3/zoEA=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:27 2025 by rpki-client