Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2297066e-99ae-3b26-a5a5-07acd57460e4.roa
File:                     2297066e-99ae-3b26-a5a5-07acd57460e4.roa (raw, json)
Hash identifier:          dsS5F7L2qkZbbSmqKptmNLZTRsdvHPBG9+RQmOA5C7E=
Subject key identifier:   C0:14:C9:60:0E:C6:9B:D6:50:19:76:1C:79:A3:79:7A:E8:C8:1F:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DBFB73AF933EBDA0D3700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2297066e-99ae-3b26-a5a5-07acd57460e4.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        68.86.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:bf:b7:3a:f9:33:eb:da:0d:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=802c3a84-a4f6-4d26-ba94-788c20d2242b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:71:82:8c:0c:d5:bd:d2:c4:29:c6:1b:d4:47:
                    5a:70:1d:71:89:b6:91:6b:c3:bd:f8:d9:ed:b2:54:
                    8e:50:09:64:cb:2e:63:91:2d:40:ea:e9:24:99:4a:
                    4d:43:15:4b:cd:5f:b1:40:28:81:a9:e9:9c:a4:3c:
                    b7:3d:ee:3c:a7:35:66:89:4b:94:31:ca:b0:cf:f7:
                    42:fe:de:e8:e7:24:58:47:90:b3:8f:39:a7:7d:e9:
                    fa:64:9b:b9:f2:4a:be:3a:dd:5b:84:d1:92:ae:c2:
                    be:ec:2f:5d:42:12:28:fc:a2:f1:89:77:46:00:50:
                    cc:ad:9d:01:99:15:88:c3:b8:e4:0a:60:ca:fb:67:
                    03:00:b3:9c:a7:44:55:3c:52:b9:85:63:d6:f8:da:
                    8c:11:65:7c:c1:33:4a:b3:b9:94:6d:55:df:31:37:
                    c3:48:57:dd:39:c5:8a:10:1c:47:db:b4:47:b7:63:
                    0a:d0:89:f3:48:aa:73:f1:b7:9c:f7:30:ce:77:76:
                    7b:49:d8:aa:85:b4:f1:bd:3a:ea:1a:b7:85:cd:6c:
                    c5:9b:54:5e:63:ed:05:9a:ff:42:55:72:87:20:73:
                    4e:1f:49:51:43:cf:b4:d9:7e:54:1e:b6:39:f5:95:
                    e9:d6:18:41:ea:49:23:ec:7d:60:ca:d0:32:bf:b2:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:C9:60:0E:C6:9B:D6:50:19:76:1C:79:A3:79:7A:E8:C8:1F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2297066e-99ae-3b26-a5a5-07acd57460e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:22:26:91:9a:fe:cd:20:c3:a8:71:c8:5d:78:ea:e6:c5:
         13:bc:b5:6c:d2:a6:01:b9:09:94:d3:80:0f:e0:f5:9a:71:53:
         33:8b:14:88:44:15:9f:f8:e8:50:24:99:74:ac:4c:c5:81:a3:
         78:75:46:13:ae:85:54:b2:d1:c4:b3:b7:69:8e:ef:b4:3b:bb:
         6c:6c:8c:28:5b:97:ae:a1:15:1f:88:4f:7c:88:10:2a:47:a2:
         b9:4f:92:f1:dc:51:d9:ed:7b:7c:e0:18:48:8a:d7:ea:c9:58:
         c9:3d:87:45:c6:f8:a3:4c:7f:1f:77:d2:2b:01:6f:ae:42:51:
         09:ad:33:80:c4:ab:29:7b:3d:f4:6c:c9:a6:cd:99:85:61:bb:
         2b:20:e1:3f:e8:65:5e:bb:92:de:b8:69:6d:a4:e3:99:7c:01:
         5e:ce:2d:9f:62:28:1c:ec:8a:57:37:0f:35:53:c3:80:49:98:
         cb:1d:bd:76:f8:69:58:25:37:25:38:a6:23:eb:27:9f:15:26:
         74:b8:85:61:33:fe:96:55:d2:66:a0:c8:b1:0c:16:8c:8e:13:
         f1:0d:4e:4c:e0:f0:32:29:50:17:1e:6c:45:55:f1:fc:00:f2:
         5c:b9:ba:51:ff:bc:a0:be:10:ea:02:08:83:80:2f:3b:08:5e:
         a9:8c:1e:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebb+3Ovkz69oNNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ODAyYzNhODQtYTRmNi00ZDI2LWJhOTQtNzg4YzIwZDIyNDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnGCjAzVvdLEKcYb1EdacB1xibaRa8O9+Nnt
slSOUAlkyy5jkS1A6ukkmUpNQxVLzV+xQCiBqemcpDy3Pe48pzVmiUuUMcqwz/dC
/t7o5yRYR5Czjzmnfen6ZJu58kq+Ot1bhNGSrsK+7C9dQhIo/KLxiXdGAFDMrZ0B
mRWIw7jkCmDK+2cDALOcp0RVPFK5hWPW+NqMEWV8wTNKs7mUbVXfMTfDSFfdOcWK
EBxH27RHt2MK0InzSKpz8bec9zDOd3Z7SdiqhbTxvTrqGreFzWzFm1ReY+0Fmv9C
VXKHIHNOH0lRQ8+02X5UHrY59ZXp1hhB6kkj7H1gytAyv7IOyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAUyWAOxpvWUBl2HHmjeXroyB/1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjI5NzA2NmUtOTlhZS0z
YjI2LWE1YTUtMDdhY2Q1NzQ2MGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADL8IiaRmv7NIMOocchdeOrmxRO8tWzSpgG5CZTTgA/g9ZpxUzOLFIhE
FZ/46FAkmXSsTMWBo3h1RhOuhVSy0cSzt2mO77Q7u2xsjChbl66hFR+IT3yIECpH
orlPkvHcUdnte3zgGEiK1+rJWMk9h0XG+KNMfx930isBb65CUQmtM4DEqyl7PfRs
yabNmYVhuysg4T/oZV67kt64aW2k45l8AV7OLZ9iKBzsilc3DzVTw4BJmMsdvXb4
aVglNyU4piPrJ58VJnS4hWEz/pZV0magyLEMFoyOE/ENTkzg8DIpUBcebEVV8fwA
8ly5ulH/vKC+EOoCCIOALzsIXqmMHps=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:18:07 2025 by rpki-client