Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
File:                     09591a19-c6e3-3973-9499-51ef6efc847d.roa (raw, json)
Hash identifier:          u1tvaU1okW/0aoJe07BEU1Tt+leBkvDnlocRF+y0Ccc=
Subject key identifier:   88:8A:EC:33:66:6D:78:9E:B0:FF:98:10:C5:DD:E9:F6:3A:6A:F7:59
Certificate issuer:       /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Certificate serial:       010D0C9F43285848F65BE197CC2887227673F280
Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     0
IP address blocks:        206.41.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e1:97:cc:28:87:22:76:73:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=98e5d46c-4405-4c19-a268-b3039e02382f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d2:5a:b3:53:01:43:42:ea:97:4e:dd:81:bd:
                    29:85:12:11:4a:e2:ef:c7:2a:19:b7:ea:54:36:c5:
                    d4:cf:24:bd:b4:43:61:86:a4:2a:6e:57:70:a7:bd:
                    92:ba:0a:67:e9:e2:53:42:03:9b:37:33:f2:8d:d3:
                    bf:c9:d9:9b:c0:ee:b2:e3:76:e3:6a:66:f3:c9:91:
                    40:7f:81:d4:c5:19:d8:e6:b5:04:b1:a5:72:18:30:
                    a0:32:fd:9d:7e:cc:2e:b4:51:47:e7:4a:98:3e:6e:
                    32:9d:de:50:3b:b5:e5:fa:2c:85:e2:a5:c3:41:b8:
                    58:91:8d:a1:84:f2:82:3a:0d:f1:ea:8c:64:52:a9:
                    bf:68:3f:c7:ca:41:93:93:fb:51:d6:a7:4e:aa:d8:
                    c1:13:c3:6f:b0:c9:b5:60:05:f5:4a:e7:6a:2a:ab:
                    3a:4c:af:67:c9:36:32:50:5d:32:34:5d:79:ba:ac:
                    c9:10:22:5b:bf:25:3c:1b:ac:d8:b1:2e:2e:79:68:
                    51:42:62:43:69:92:75:a9:b2:94:6c:37:f5:e3:a3:
                    3c:48:52:b2:eb:bc:56:8f:f5:80:9d:75:21:5d:30:
                    87:84:8e:41:6e:17:16:59:3b:36:07:01:de:69:43:
                    bb:49:fd:03:72:8f:bb:d3:2d:48:4f:d1:a9:17:27:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8A:EC:33:66:6D:78:9E:B0:FF:98:10:C5:DD:E9:F6:3A:6A:F7:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl

            X509v3 Authority Key Identifier:
                keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:97:a3:4a:23:7f:5e:63:20:85:cc:52:2c:b7:96:95:0b:22:
         ba:07:eb:d0:50:23:d9:e0:c9:78:39:b2:a1:70:67:f6:00:92:
         51:04:2c:53:69:7f:a2:09:7f:cd:ff:d7:f3:5d:93:ef:bf:23:
         f9:c1:bb:07:03:6e:85:6c:ed:e7:bd:c6:26:60:c6:06:0f:b3:
         96:d4:98:51:de:81:43:63:96:4f:07:14:59:90:53:de:b5:47:
         a3:68:1a:5f:df:f7:bc:b4:61:7f:d7:26:e2:89:ee:3b:d3:d2:
         f4:42:5a:f4:bd:d3:28:10:3e:41:e7:0f:64:c2:ce:cb:4f:ad:
         2a:cd:09:d2:ab:5d:b3:33:23:f3:58:ac:29:8e:33:4e:95:dd:
         41:37:33:47:98:f0:4e:a5:70:c3:bc:63:9d:2e:5d:04:0b:7c:
         26:01:f1:39:b6:c4:5b:d1:ad:e7:e5:0e:3b:9b:ec:57:40:6f:
         65:54:8b:96:ea:32:83:db:5f:c6:24:2a:52:65:79:aa:27:03:
         c6:4a:63:81:f1:54:16:b6:17:ce:6c:f3:bc:46:9f:8b:b5:e8:
         6d:72:c1:47:be:2c:82:4b:84:25:45:90:4b:d9:a4:82:46:64:
         84:53:25:24:0d:75:f9:00:89:79:72:ad:25:ba:38:1b:60:f7:
         e7:95:97:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+GXzCiHInZz8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg5YjQ0YjAtYTE1MS00OWYyLWI0YTYtZDkxN2UzYzk1
ZTgzMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
OThlNWQ0NmMtNDQwNS00YzE5LWEyNjgtYjMwMzllMDIzODJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9Jas1MBQ0Lql07dgb0phRIRSuLvxyoZt+pU
NsXUzyS9tENhhqQqbldwp72Sugpn6eJTQgObNzPyjdO/ydmbwO6y43bjambzyZFA
f4HUxRnY5rUEsaVyGDCgMv2dfswutFFH50qYPm4ynd5QO7Xl+iyF4qXDQbhYkY2h
hPKCOg3x6oxkUqm/aD/HykGTk/tR1qdOqtjBE8NvsMm1YAX1SudqKqs6TK9nyTYy
UF0yNF15uqzJECJbvyU8G6zYsS4ueWhRQmJDaZJ1qbKUbDf146M8SFKy67xWj/WA
nXUhXTCHhI5BbhcWWTs2BwHeaUO7Sf0Dco+70y1IT9GpFydbTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIiK7DNmbXiesP+YEMXd6fY6avdZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODli
NDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3ZTNjOTVlODMvMDk1OTFhMTktYzZlMy0z
OTczLTk0OTktNTFlZjZlZmM4NDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTg5YjQ0YjAtYTE1MS00OWYyLWI0
YTYtZDkxN2UzYzk1ZTgzL2U4OWI0NGIwLWExNTEtNDlmMi1iNGE2LWQ5MTdlM2M5
NWU4My5jcmwwHwYDVR0jBBgwFoAUZd44RuaJlKIRj1Iv9uTdJEimBGAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODliNDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3
ZTNjOTVlODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAziltMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICXo0ojf15jIIXMUiy3lpULIroH69BQI9ngyXg5sqFwZ/YAklEELFNp
f6IJf83/1/Ndk++/I/nBuwcDboVs7ee9xiZgxgYPs5bUmFHegUNjlk8HFFmQU961
R6NoGl/f97y0YX/XJuKJ7jvT0vRCWvS90ygQPkHnD2TCzstPrSrNCdKrXbMzI/NY
rCmOM06V3UE3M0eY8E6lcMO8Y50uXQQLfCYB8Tm2xFvRreflDjub7FdAb2VUi5bq
MoPbX8YkKlJleaonA8ZKY4HxVBa2F85s87xGn4u16G1ywUe+LIJLhCVFkEvZpIJG
ZIRTJSQNdfkAiXlyrSW6OBtg9+eVl4o=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:22 2025 by rpki-client