Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/93c328c1-228b-3a0a-b182-91c8ae326f50.roa
File:                     93c328c1-228b-3a0a-b182-91c8ae326f50.roa (raw, json)
Hash identifier:          DOId4bO1xtxixUwbpbdDuJfoh0oak7D5SER2oIPxlBw=
Subject key identifier:   D5:2E:B9:3F:30:6B:33:88:EA:EE:9F:24:22:9D:DC:9F:30:BD:BF:B2
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285849287E513230B46E875836F6C0
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/93c328c1-228b-3a0a-b182-91c8ae326f50.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     10507
IP address blocks:        68.24.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:51:32:30:b4:6e:87:58:36:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=3580ee40-a202-4752-8dfb-a44f30d9b19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:d9:13:61:4f:59:9c:23:94:d1:2c:56:48:
                    7c:c9:48:7c:3c:53:71:14:3f:46:1d:cf:43:66:56:
                    d2:41:f2:6d:48:d4:71:bc:16:01:54:99:b9:24:d8:
                    98:27:8c:c5:66:95:51:0d:0f:e4:a1:aa:23:b0:31:
                    7a:68:a3:4f:24:04:83:48:df:d2:8c:eb:8a:c4:83:
                    f3:88:41:2e:57:48:34:b7:b5:10:28:aa:f6:fb:61:
                    1a:8e:4c:33:5c:48:e9:81:4b:7e:1b:e3:5d:68:c6:
                    63:20:71:04:30:6c:1b:4e:11:df:27:fa:cf:18:8f:
                    8c:02:04:04:5f:c6:b4:93:67:a1:ab:fd:6d:3c:d5:
                    ac:b9:da:ce:d4:e6:2e:12:02:d4:13:42:a8:07:2a:
                    fa:a5:c4:82:27:0e:20:4d:96:be:c5:da:4e:69:41:
                    cc:6b:47:a6:54:ac:4a:c9:3e:1e:ff:94:ba:37:cc:
                    76:34:a1:3c:b6:f4:d1:93:0b:10:75:fb:07:12:76:
                    be:92:26:ad:76:91:35:de:f0:d7:a0:02:fe:e9:7f:
                    28:9d:30:85:48:2b:d9:3e:1a:27:d6:5b:42:05:ab:
                    d3:d2:89:70:26:3c:55:70:e5:3b:1b:24:fb:ed:82:
                    1e:11:c2:0e:29:e7:fc:f6:8f:8f:04:64:7d:e5:69:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2E:B9:3F:30:6B:33:88:EA:EE:9F:24:22:9D:DC:9F:30:BD:BF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/93c328c1-228b-3a0a-b182-91c8ae326f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:52:fb:8e:78:35:f2:d5:49:f8:0a:65:17:9e:62:af:d4:ba:
         91:21:86:65:6c:01:e5:0e:15:5c:a4:3e:e6:46:c5:c3:cc:50:
         d6:44:dd:aa:7a:f3:ee:71:77:1b:b7:2a:ad:53:26:7c:d6:eb:
         5f:54:9b:a9:18:c9:56:f6:5c:fc:f0:56:61:26:d6:c9:7a:94:
         b4:bd:c7:f4:31:b3:30:29:79:bd:9d:77:ac:9a:88:48:47:46:
         c5:93:3f:11:1d:c6:6c:5f:67:e1:24:27:2e:23:e8:3c:3a:09:
         cf:82:65:57:1b:ee:21:8b:81:d9:5f:fe:a9:72:80:32:38:1c:
         6e:0e:32:ba:55:00:2a:14:0c:d8:d9:d9:5c:48:fe:7e:5e:3a:
         d4:15:13:ad:6f:fa:6e:29:65:03:7b:4c:6c:4b:0e:4f:da:e1:
         c5:72:31:b3:48:a3:8e:77:4c:00:fb:c0:99:0e:a8:29:42:53:
         ec:16:68:57:6c:1d:af:54:6d:f3:92:31:6f:b6:ea:6c:aa:d7:
         f3:27:06:4c:f1:d0:cf:d3:2e:f2:6b:db:f1:73:f5:da:56:80:
         4a:10:67:f7:a6:79:89:21:69:60:f2:d2:73:63:a3:6a:7d:b0:
         fc:a3:42:c2:e2:fd:27:29:cb:20:a9:e7:da:df:75:82:88:1a:
         36:e6:18:08
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkoflEyMLRuh1g29sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
MzU4MGVlNDAtYTIwMi00NzUyLThkZmItYTQ0ZjMwZDliMTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYXZE2FPWZwjlNEsVkh8yUh8PFNxFD9GHc9D
ZlbSQfJtSNRxvBYBVJm5JNiYJ4zFZpVRDQ/koaojsDF6aKNPJASDSN/SjOuKxIPz
iEEuV0g0t7UQKKr2+2EajkwzXEjpgUt+G+NdaMZjIHEEMGwbThHfJ/rPGI+MAgQE
X8a0k2ehq/1tPNWsudrO1OYuEgLUE0KoByr6pcSCJw4gTZa+xdpOaUHMa0emVKxK
yT4e/5S6N8x2NKE8tvTRkwsQdfsHEna+kiatdpE13vDXoAL+6X8onTCFSCvZPhon
1ltCBavT0olwJjxVcOU7GyT77YIeEcIOKef89o+PBGR95WlC9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNUuuT8wazOI6u6fJCKd3J8wvb+yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvOTNjMzI4YzEtMjI4Yi0z
YTBhLWIxODItOTFjOGFlMzI2ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDRBgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAR1L7jng18tVJ+AplF55ir9S6kSGGZWwB5Q4VXKQ+5kbFw8xQ1kTdqnrz
7nF3G7cqrVMmfNbrX1SbqRjJVvZc/PBWYSbWyXqUtL3H9DGzMCl5vZ13rJqISEdG
xZM/ER3GbF9n4SQnLiPoPDoJz4JlVxvuIYuB2V/+qXKAMjgcbg4yulUAKhQM2NnZ
XEj+fl461BUTrW/6billA3tMbEsOT9rhxXIxs0ijjndMAPvAmQ6oKUJT7BZoV2wd
r1Rt85Ixb7bqbKrX8ycGTPHQz9Mu8mvb8XP12laAShBn96Z5iSFpYPLSc2Ojan2w
/KNCwuL9JynLIKnn2t91gogaNuYYCA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:26 2025 by rpki-client