Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4871466c-435d-3355-917a-3bf677a3d0ae.roa
File:                     4871466c-435d-3355-917a-3bf677a3d0ae.roa (raw, json)
Hash identifier:          Pl9JNaB9L+QvP7VR6ytx4j0dWh7hECh0gcuyouXt9Yk=
Subject key identifier:   86:00:37:89:85:CE:24:1E:9F:2F:C1:78:71:31:2F:9A:2A:02:31:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6F49EFDB5CF540BAE6B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4871466c-435d-3355-917a-3bf677a3d0ae.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        24.61.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:f4:9e:fd:b5:cf:54:0b:ae:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=116ba912-fb90-4344-b40d-9926a0d3edde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:85:04:5d:62:20:0f:2f:cf:1e:b9:cd:58:fd:
                    b1:69:01:a7:c7:0d:56:bd:dd:ce:95:b1:e7:68:fc:
                    72:ad:95:a8:71:c9:8c:86:c8:70:79:a7:62:48:f2:
                    11:fb:34:b0:e7:de:3f:94:ff:0a:1a:5c:ee:2e:31:
                    1b:40:2e:64:0f:67:6e:c2:4b:90:a1:ae:3f:7f:72:
                    34:99:03:de:f6:c0:08:2d:46:40:a8:46:90:89:12:
                    b7:7b:0d:c5:5f:f0:d9:48:81:d8:0c:e0:ce:ad:69:
                    a9:1e:13:0d:4b:fe:c2:5b:95:e5:0a:d7:17:2a:5e:
                    aa:71:a8:b3:30:8d:d8:cc:73:9d:c4:8f:3a:d0:ee:
                    ef:60:5c:a2:a9:20:53:0d:4a:5e:60:5f:74:26:ea:
                    1a:48:62:7a:81:b7:75:33:43:a6:de:ab:8b:82:53:
                    ed:d5:09:bc:b3:c7:11:dc:da:a5:b1:3d:fd:56:ce:
                    71:99:9f:5c:00:e5:70:b0:49:df:2c:29:86:7b:2d:
                    d4:ea:6c:9a:a4:22:63:02:11:4f:2c:d7:4e:c3:da:
                    e1:90:c1:0e:48:73:4f:f7:82:8f:e8:d9:41:89:58:
                    b0:42:42:1c:16:2a:17:d3:11:e0:9a:43:8e:af:4d:
                    fe:1e:a5:9f:33:41:0a:7f:f7:9f:ea:8a:6e:35:9f:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:00:37:89:85:CE:24:1E:9F:2F:C1:78:71:31:2F:9A:2A:02:31:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4871466c-435d-3355-917a-3bf677a3d0ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.61.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:d3:5b:f5:03:a2:ba:89:03:5f:a5:9d:ab:0d:a1:35:30:
         1f:e8:12:76:66:f4:41:81:22:b0:ad:c1:3c:8e:83:b6:fe:25:
         57:68:74:6b:a0:60:df:93:cd:ae:bd:38:12:f7:b9:83:06:86:
         88:d3:d8:e8:4f:c4:53:a4:8a:fb:44:43:6a:4c:de:96:7e:80:
         46:c0:d6:87:0c:fd:05:e4:7e:b6:b5:b7:b1:62:fd:58:38:df:
         6e:7a:b2:ef:bc:a1:fb:f7:a6:73:6c:43:c5:bf:9f:5e:e3:8f:
         fc:07:80:f9:8c:67:6c:6a:79:70:48:6b:e4:13:cc:63:91:4a:
         56:ed:3b:12:aa:aa:c3:53:32:8a:db:15:3e:28:6e:43:19:40:
         5b:47:85:81:84:50:c2:62:4a:4e:5f:ae:03:71:bd:cf:d3:57:
         ea:c4:94:06:ad:31:26:8a:b5:ad:2f:d8:b8:c9:26:7b:b7:f1:
         d2:a9:e8:08:43:b2:4c:76:9d:0e:43:71:93:a9:ee:d4:68:cb:
         e8:a2:c4:47:3f:a5:5c:6b:cf:42:70:63:94:66:20:57:a7:6d:
         f4:63:2e:f7:f1:2d:aa:0d:5e:19:10:1b:fc:a1:9c:f9:a8:56:
         73:e0:0a:5b:49:f3:e6:d9:c5:3b:15:1d:33:88:a8:e0:de:7a:
         e3:f8:32:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09vSe/bXPVAuuawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MTE2YmE5MTItZmI5MC00MzQ0LWI0MGQtOTkyNmEwZDNlZGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4UEXWIgDy/PHrnNWP2xaQGnxw1Wvd3OlbHn
aPxyrZWoccmMhshweadiSPIR+zSw594/lP8KGlzuLjEbQC5kD2duwkuQoa4/f3I0
mQPe9sAILUZAqEaQiRK3ew3FX/DZSIHYDODOrWmpHhMNS/7CW5XlCtcXKl6qcaiz
MI3YzHOdxI860O7vYFyiqSBTDUpeYF90JuoaSGJ6gbd1M0Om3quLglPt1Qm8s8cR
3NqlsT39Vs5xmZ9cAOVwsEnfLCmGey3U6myapCJjAhFPLNdOw9rhkMEOSHNP94KP
6NlBiViwQkIcFioX0xHgmkOOr03+HqWfM0EKf/ef6opuNZ+LHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYAN4mFziQeny/BeHExL5oqAjH8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg3MTQ2NmMtNDM1ZC0z
MzU1LTkxN2EtM2JmNjc3YTNkMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGD3kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLW01v1A6K6iQNfpZ2rDaE1MB/oEnZm9EGBIrCtwTyOg7b+JVdodGug
YN+Tza69OBL3uYMGhojT2OhPxFOkivtEQ2pM3pZ+gEbA1ocM/QXkfra1t7Fi/Vg4
3256su+8ofv3pnNsQ8W/n17jj/wHgPmMZ2xqeXBIa+QTzGORSlbtOxKqqsNTMorb
FT4obkMZQFtHhYGEUMJiSk5frgNxvc/TV+rElAatMSaKta0v2LjJJnu38dKp6AhD
skx2nQ5DcZOp7tRoy+iixEc/pVxrz0JwY5RmIFenbfRjLvfxLaoNXhkQG/yhnPmo
VnPgCltJ8+bZxTsVHTOIqODeeuP4Moo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:48 2025 by rpki-client