Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1167f860-f4a5-3329-9563-b3f8f508fef5.roa
File:                     1167f860-f4a5-3329-9563-b3f8f508fef5.roa (raw, json)
Hash identifier:          cU61NE1auASP5RP/Th3c3/bqnzCN2q23WJSEGyzR5cY=
Subject key identifier:   D8:77:BF:9D:BB:26:A4:7E:32:7D:B2:7A:25:D1:22:3A:39:6E:ED:7D
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584910E17E96A1933C4F6E7A85A0
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1167f860-f4a5-3329-9563-b3f8f508fef5.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        209.178.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:7e:96:a1:93:3c:4f:6e:7a:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=0709f6f2-3e8c-4110-9a6f-709bb494175a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:70:57:1d:14:01:21:42:d5:02:56:9d:05:
                    18:4d:e3:fd:25:6d:42:a2:5b:4c:a0:cd:74:28:1d:
                    30:40:e9:4f:cd:94:bb:80:c6:6d:ae:e0:05:15:44:
                    03:cc:fc:dd:f7:13:2c:37:58:c8:d6:d4:00:0d:f3:
                    f1:8d:69:68:eb:3f:c4:ad:9a:e4:76:ae:71:ec:ba:
                    08:7c:02:49:6d:68:ac:fb:97:47:44:0a:b6:df:90:
                    1b:9d:c7:ef:db:05:0e:17:a8:1c:2a:17:67:bd:f0:
                    aa:d5:2f:69:04:0a:c3:42:59:b2:0d:ee:98:aa:6b:
                    e8:73:48:a2:ae:95:0d:e6:79:24:bd:05:fe:87:98:
                    7a:28:02:7d:ae:0d:44:30:e7:6b:c1:22:34:36:01:
                    37:05:e7:77:7f:e7:70:bd:2c:86:e2:76:37:fb:a9:
                    cf:ca:98:fe:eb:3e:35:7c:13:9f:b6:9e:da:c6:6e:
                    b4:27:ea:52:88:b8:8d:47:39:80:14:39:dd:6b:96:
                    43:3e:4a:c8:95:33:00:aa:d8:0f:29:5e:d6:65:1f:
                    00:61:16:37:10:69:e8:0c:ab:08:67:42:01:ac:7b:
                    07:ac:62:58:df:1d:27:58:6a:11:e4:a6:b3:cb:b8:
                    91:a5:1f:c0:15:c5:46:92:53:82:53:f9:f3:ee:b5:
                    37:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:77:BF:9D:BB:26:A4:7E:32:7D:B2:7A:25:D1:22:3A:39:6E:ED:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1167f860-f4a5-3329-9563-b3f8f508fef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:76:bc:61:67:a0:1b:b1:6d:6e:32:a7:41:40:f1:de:b2:49:
         9e:2e:9a:9e:25:41:c5:46:40:99:a1:f9:60:26:e1:12:31:a8:
         12:66:d6:b4:9a:58:68:ce:a3:6d:5c:fe:27:12:60:f6:90:96:
         40:d3:03:81:fe:01:dc:ed:a4:e1:b1:11:b5:b9:25:f4:1b:5e:
         35:25:35:db:4f:de:60:69:bd:dd:97:35:81:eb:34:0e:a9:50:
         bd:d1:39:56:c9:95:34:ed:f1:1d:7c:9b:4a:34:11:07:46:ed:
         26:38:f8:63:d3:35:e3:e5:a7:db:47:a7:f8:a0:b6:a4:c3:dc:
         e9:64:dd:cf:e3:62:ec:4a:6d:46:84:f4:e0:8d:62:48:8e:c0:
         36:5f:2b:7f:6c:b5:6a:5f:fe:07:b4:d4:5a:65:8c:e9:49:3a:
         43:64:b7:83:40:73:1d:5d:d7:51:4e:35:c9:11:44:2b:c1:ee:
         01:a0:4b:3c:66:6b:5a:a1:72:71:43:8c:67:73:59:8d:42:fd:
         91:26:f1:85:51:f6:3c:c3:b6:4b:54:95:ed:a3:5b:ff:38:62:
         28:21:73:bf:14:88:c1:0f:d9:9e:d7:e5:ee:e9:45:d6:95:47:
         f7:31:26:4e:1b:ba:87:c8:02:d7:da:f5:d1:c5:50:3a:16:7b:
         f8:a0:9d:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4X6WoZM8T256haAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1
ZjNkMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk
MDcwOWY2ZjItM2U4Yy00MTEwLTlhNmYtNzA5YmI0OTQxNzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMtwVx0UASFC1QJWnQUYTeP9JW1ColtMoM10
KB0wQOlPzZS7gMZtruAFFUQDzPzd9xMsN1jI1tQADfPxjWlo6z/ErZrkdq5x7LoI
fAJJbWis+5dHRAq235Abncfv2wUOF6gcKhdnvfCq1S9pBArDQlmyDe6Yqmvoc0ii
rpUN5nkkvQX+h5h6KAJ9rg1EMOdrwSI0NgE3Bed3f+dwvSyG4nY3+6nPypj+6z41
fBOftp7axm60J+pSiLiNRzmAFDnda5ZDPkrIlTMAqtgPKV7WZR8AYRY3EGnoDKsI
Z0IBrHsHrGJY3x0nWGoR5Kazy7iRpR/AFcVGklOCU/nz7rU37QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNh3v527JqR+Mn2yeiXRIjo5bu19MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky
NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvMTE2N2Y4NjAtZjRhNS0z
MzI5LTk1NjMtYjNmOGY1MDhmZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0
NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3
NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm
NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0bL0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABt2vGFnoBuxbW4yp0FA8d6ySZ4ump4lQcVGQJmh+WAm4RIxqBJm1rSa
WGjOo21c/icSYPaQlkDTA4H+AdztpOGxEbW5JfQbXjUlNdtP3mBpvd2XNYHrNA6p
UL3ROVbJlTTt8R18m0o0EQdG7SY4+GPTNePlp9tHp/igtqTD3Olk3c/jYuxKbUaE
9OCNYkiOwDZfK39stWpf/ge01FpljOlJOkNkt4NAcx1d11FONckRRCvB7gGgSzxm
a1qhcnFDjGdzWY1C/ZEm8YVR9jzDtktUle2jW/84Yighc78UiMEP2Z7X5e7pRdaV
R/cxJk4buofIAtfa9dHFUDoWe/ignRk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:40:18 2025 by rpki-client