Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5ef9962-2340-31dc-ad53-439469749616.roa
File:                     b5ef9962-2340-31dc-ad53-439469749616.roa (raw, json)
Hash identifier:          uJd8GC6innAEVcj6qjAkmhBa7CJ0DnvlRWtPNJ+7zTg=
Subject key identifier:   1F:53:06:CC:F3:9A:1A:2D:73:45:A6:BF:D6:A5:ED:38:85:CC:C2:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7737C3A62DDEB16CE1974
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5ef9962-2340-31dc-ad53-439469749616.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        24.127.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:73:7c:3a:62:dd:eb:16:ce:19:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=8c3ceb61-1f97-4e81-8890-1dcfcb0b6c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:53:4c:20:10:2b:a5:a0:1d:82:a4:e0:08:
                    d8:d3:2a:52:cd:91:ab:73:59:a9:4d:5a:8d:1a:f8:
                    70:0f:5a:fa:11:ec:55:86:ac:81:54:3e:d1:e8:da:
                    2c:83:55:a6:8f:ab:4b:7b:02:57:32:4d:97:f5:57:
                    68:8f:ef:c5:bf:a6:8e:59:f7:18:74:f5:c3:16:4b:
                    98:4f:67:a3:f8:1a:e9:26:c0:53:a0:e6:1d:e1:8a:
                    c1:53:86:b6:ed:ed:70:77:c3:e4:78:84:39:7f:25:
                    b1:6b:37:89:7d:87:73:77:94:46:c5:a0:2e:1c:9d:
                    ed:e2:b0:a4:0e:ba:a3:82:de:26:80:f3:e3:10:10:
                    bb:83:53:03:e1:a7:f7:cd:0c:5c:0c:ea:c3:5c:92:
                    d8:70:57:e7:25:97:41:eb:8b:89:b7:2e:b7:d2:36:
                    53:ad:c5:32:f3:d6:eb:bd:c6:e1:f3:7e:22:d7:89:
                    ad:f2:8a:79:14:48:cf:a5:30:a8:63:f0:5a:58:1a:
                    43:8a:e0:f7:15:e3:f2:c2:06:2e:f8:49:14:1a:b7:
                    0e:b1:86:11:16:e3:e7:69:31:c5:2a:8b:1c:e3:bf:
                    9e:4e:bf:39:81:8b:d4:de:1f:3c:d7:01:3d:52:a6:
                    26:34:db:41:62:9f:95:2c:29:3d:d4:1a:0e:73:e2:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:53:06:CC:F3:9A:1A:2D:73:45:A6:BF:D6:A5:ED:38:85:CC:C2:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5ef9962-2340-31dc-ad53-439469749616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:39:95:e1:37:f5:b7:37:7f:bb:bd:ee:bc:4e:96:37:96:d6:
         af:72:b6:b7:3b:07:f0:a4:17:18:4a:de:bb:e3:40:dd:79:8c:
         70:b3:07:d3:b6:a4:e4:d8:12:3d:df:d1:74:66:f0:14:0f:22:
         dd:56:8a:8f:3f:77:14:a0:c3:be:fa:4e:ea:a1:de:57:91:52:
         83:00:b8:08:57:ee:4d:e3:29:78:89:df:00:0c:2b:a1:f7:63:
         2a:bf:4e:44:b9:8d:c5:de:e5:a7:4e:49:4e:18:64:7d:d1:eb:
         45:dd:8d:93:48:e7:60:52:0d:3d:ca:ee:e0:5b:48:8d:ff:af:
         e5:b9:1b:45:b2:ee:8b:92:2a:53:45:78:94:ec:2e:dd:0a:75:
         94:1b:28:f3:5d:f5:68:32:5e:12:72:09:72:0b:c0:07:fb:4b:
         58:5f:45:79:9d:ac:1d:11:43:ea:8f:07:78:af:09:b0:67:77:
         c2:e4:ec:99:55:62:49:81:4f:35:1e:92:c4:b6:ee:24:77:41:
         00:11:3f:7e:b5:ec:bd:a9:35:b0:d5:30:8d:09:2a:12:cd:ef:
         f4:7a:d3:21:1e:8b:3b:0a:93:ad:8c:be:d9:b1:3d:38:d1:b6:
         02:a5:d6:bd:4e:71:13:34:34:f9:1a:e0:5b:c1:b9:db:0e:1c:
         89:ae:51:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj093N8OmLd6xbOGXQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
OGMzY2ViNjEtMWY5Ny00ZTgxLTg4OTAtMWRjZmNiMGI2YzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxpTTCAQK6WgHYKk4AjY0ypSzZGrc1mpTVqN
GvhwD1r6EexVhqyBVD7R6Nosg1Wmj6tLewJXMk2X9Vdoj+/Fv6aOWfcYdPXDFkuY
T2ej+BrpJsBToOYd4YrBU4a27e1wd8PkeIQ5fyWxazeJfYdzd5RGxaAuHJ3t4rCk
Drqjgt4mgPPjEBC7g1MD4af3zQxcDOrDXJLYcFfnJZdB64uJty630jZTrcUy89br
vcbh834i14mt8op5FEjPpTCoY/BaWBpDiuD3FePywgYu+EkUGrcOsYYRFuPnaTHF
Kosc47+eTr85gYvU3h881wE9UqYmNNtBYp+VLCk91BoOc+JmKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB9TBszzmhotc0Wmv9al7TiFzMILMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjVlZjk5NjItMjM0MC0z
MWRjLWFkNTMtNDM5NDY5NzQ5NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGH9eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACw5leE39bc3f7u97rxOljeW1q9ytrc7B/CkFxhK3rvjQN15jHCzB9O2
pOTYEj3f0XRm8BQPIt1Wio8/dxSgw776Tuqh3leRUoMAuAhX7k3jKXiJ3wAMK6H3
Yyq/TkS5jcXe5adOSU4YZH3R60XdjZNI52BSDT3K7uBbSI3/r+W5G0Wy7ouSKlNF
eJTsLt0KdZQbKPNd9WgyXhJyCXILwAf7S1hfRXmdrB0RQ+qPB3ivCbBnd8Lk7JlV
YkmBTzUeksS27iR3QQARP3617L2pNbDVMI0JKhLN7/R60yEeizsKk62MvtmxPTjR
tgKl1r1OcRM0NPka4FvBudsOHImuUcw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:51:08 2025 by rpki-client