Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/53f5720a-4660-348c-9091-256e0a230428.roa
File:                     53f5720a-4660-348c-9091-256e0a230428.roa (raw, json)
Hash identifier:          coPz9Yp6DrqbNf8HCuwPs2yFvbBaIBy69w1eD8s20YU=
Subject key identifier:   49:B4:41:72:AF:D5:B8:30:61:52:EF:AC:8F:10:38:09:1F:F2:E7:34
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858482BF557AFDF749780A770B900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/53f5720a-4660-348c-9091-256e0a230428.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     52391
IP address blocks:        216.122.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:57:af:df:74:97:80:a7:70:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=d2f6510f-2880-4d5d-be6a-1c3d1d77d0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:9e:06:61:94:99:d3:93:f4:6c:86:54:38:
                    70:5f:15:4c:57:e6:14:17:2f:60:b2:5f:d8:81:0f:
                    cf:0c:f2:42:af:64:f5:f5:1b:cc:2d:4b:1c:f7:34:
                    f4:1a:3f:9a:a6:6d:08:21:54:76:54:d5:4f:b8:cf:
                    f7:1d:87:dc:13:bd:12:eb:25:9a:55:83:13:13:e1:
                    9d:cf:26:5e:31:be:38:1a:c9:7d:cd:c2:9c:70:69:
                    f9:9a:e5:b5:06:7e:e7:4b:74:c3:68:54:64:26:76:
                    be:1e:3c:4d:88:24:e1:a6:83:49:ac:74:67:94:61:
                    a2:15:c9:89:73:0e:28:96:f3:c9:cd:05:80:cd:b9:
                    3b:a9:e9:ee:c6:5a:d9:4e:33:28:11:d6:e7:c7:f9:
                    f2:b6:f4:c0:47:40:bf:c9:ed:74:32:50:24:04:f5:
                    4e:41:16:80:4a:41:e8:a3:0f:f9:44:b8:4a:cb:dd:
                    5d:f1:bb:68:4c:93:38:2c:e6:d5:e9:a6:8f:71:64:
                    4c:8f:8d:8c:7e:b7:30:c9:7b:21:bf:49:49:80:75:
                    03:f9:92:e4:14:94:80:62:1f:fa:25:aa:03:62:40:
                    a7:02:b6:3a:1f:7c:49:27:f5:de:4b:5b:b0:b4:f5:
                    0c:be:a2:f3:ac:bb:18:19:bd:92:94:8c:92:bb:87:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B4:41:72:AF:D5:B8:30:61:52:EF:AC:8F:10:38:09:1F:F2:E7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/53f5720a-4660-348c-9091-256e0a230428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:72:fd:d6:5c:33:9c:6f:00:cc:32:8e:39:40:bb:78:e4:80:
         5b:a3:bd:ac:df:36:41:7d:f1:53:07:ca:9f:2b:67:4e:85:84:
         62:4b:ef:73:d2:27:99:00:4f:5d:42:33:96:6e:75:07:70:20:
         ee:53:05:3e:89:99:7d:cb:8e:61:96:d1:32:12:00:a7:ac:3c:
         f7:61:bd:04:4a:f3:2e:f4:7d:28:db:8c:70:12:b7:2a:a0:1b:
         16:ca:70:f0:6c:58:db:4c:e5:9b:04:f8:48:6f:ec:1f:cd:ca:
         09:cb:40:2c:d7:07:d2:2b:1a:db:32:3d:6f:06:c7:84:61:48:
         b4:78:1e:c6:7d:bc:03:f9:43:dc:13:a5:00:d3:ad:55:20:3c:
         86:e7:e9:92:02:ce:9b:21:ac:5b:e4:cf:5d:fc:12:63:e7:39:
         3f:ed:de:a8:3c:02:9b:b7:66:f0:34:a0:44:da:dc:ec:13:c7:
         f6:ff:f9:e5:2f:0a:ca:56:61:cb:63:dc:27:c7:af:b0:71:8d:
         36:5d:27:c4:98:10:ca:59:76:1d:be:57:e0:cf:1c:11:90:3d:
         04:2b:e1:84:c6:5a:a2:0d:5f:bb:bc:95:a1:d9:0e:94:74:33:
         af:44:d9:f9:7d:c2:e9:fd:81:1f:21:39:f8:21:6d:69:15:d8:
         04:75:51:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9Vev33SXgKdwuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDJmNjUxMGYtMjg4MC00ZDVkLWJlNmEtMWMzZDFkNzdkMGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs2eBmGUmdOT9GyGVDhwXxVMV+YUFy9gsl/Y
gQ/PDPJCr2T19RvMLUsc9zT0Gj+apm0IIVR2VNVPuM/3HYfcE70S6yWaVYMTE+Gd
zyZeMb44Gsl9zcKccGn5muW1Bn7nS3TDaFRkJna+HjxNiCThpoNJrHRnlGGiFcmJ
cw4olvPJzQWAzbk7qenuxlrZTjMoEdbnx/nytvTAR0C/ye10MlAkBPVOQRaASkHo
ow/5RLhKy91d8btoTJM4LObV6aaPcWRMj42MfrcwyXshv0lJgHUD+ZLkFJSAYh/6
JaoDYkCnArY6H3xJJ/XeS1uwtPUMvqLzrLsYGb2SlIySu4cxywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEm0QXKv1bgwYVLvrI8QOAkf8uc0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNTNmNTcyMGEtNDY2MC0z
NDhjLTkwOTEtMjU2ZTBhMjMwNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Hq8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIly/dZcM5xvAMwyjjlAu3jkgFujvazfNkF98VMHyp8rZ06FhGJL73PS
J5kAT11CM5ZudQdwIO5TBT6JmX3LjmGW0TISAKesPPdhvQRK8y70fSjbjHAStyqg
GxbKcPBsWNtM5ZsE+Ehv7B/NygnLQCzXB9IrGtsyPW8Gx4RhSLR4HsZ9vAP5Q9wT
pQDTrVUgPIbn6ZICzpshrFvkz138EmPnOT/t3qg8Apu3ZvA0oETa3OwTx/b/+eUv
CspWYctj3CfHr7BxjTZdJ8SYEMpZdh2+V+DPHBGQPQQr4YTGWqINX7u8laHZDpR0
M69E2fl9wun9gR8hOfghbWkV2AR1Ue0=
-----END CERTIFICATE-----
Generated at Sat Feb 15 19:23:02 2025 by rpki-client