Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa
File:                     d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa (raw, json)
Hash identifier:          PYWzEOeBSqTKeWrjBpH7F+4fC2Le6BP8N68Pn22S8JE=
Subject key identifier:   A3:32:06:1E:93:72:41:F7:02:0F:4A:29:A4:47:7F:7E:6E:68:11:DB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584858A03FCC027596B55C4D9540
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     5650
IP address blocks:        168.93.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:3f:cc:02:75:96:b5:5c:4d:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=adab2abf-4f31-4248-ae6c-26dd3e1596df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:aa:ab:60:5c:4e:72:0e:1f:5d:51:cc:49:
                    11:17:1a:ad:42:25:64:45:75:0d:54:c7:51:2a:a0:
                    3f:ca:c4:61:4f:fd:f9:68:bd:72:24:ab:b3:09:8e:
                    fd:cd:f3:d3:d9:80:13:77:36:0e:45:22:89:09:bd:
                    54:93:04:52:cb:72:ad:b5:6b:6a:c9:9f:bf:60:8f:
                    3a:a5:64:42:42:78:06:52:27:08:38:a3:da:f5:7a:
                    24:f4:b1:c5:85:7c:76:15:6d:2d:e1:61:ab:41:3d:
                    aa:7d:87:cf:f1:7b:0e:6f:3f:07:b4:a2:41:8b:fd:
                    bf:ae:ab:cf:66:97:91:5c:3d:cb:96:29:ad:88:d2:
                    e3:3c:38:76:fc:dd:47:61:c9:9a:6f:eb:46:6b:ad:
                    82:f2:8e:4a:fb:46:48:02:73:62:7a:2f:b2:c5:6f:
                    fc:f0:80:9b:e3:85:99:f9:73:b9:e4:a6:a6:66:35:
                    3c:ad:5d:0e:61:a1:a3:53:d3:49:47:35:aa:7b:8b:
                    e3:0c:bd:3a:bd:52:c9:35:03:d9:f3:f9:8f:ba:2e:
                    dd:72:57:b4:34:f1:d2:cb:81:ee:e4:c2:9c:98:bb:
                    e4:ae:71:17:50:db:ef:3c:ed:e6:08:60:d2:31:4f:
                    16:f5:64:c2:04:ec:c4:7a:dd:b0:20:54:91:ee:b3:
                    1a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:32:06:1E:93:72:41:F7:02:0F:4A:29:A4:47:7F:7E:6E:68:11:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:52:1c:6e:dc:32:ae:fb:37:b4:f0:57:9e:77:3b:82:cb:e4:
         c7:67:9c:1f:77:43:99:48:72:8b:8f:29:11:60:b2:5c:dd:f4:
         4f:fc:05:1a:03:ea:26:04:18:dd:95:0b:83:2c:e6:54:46:f9:
         bc:dd:1f:b3:8f:db:9d:d9:7d:42:0f:0f:b0:a3:01:2a:ae:b5:
         fb:b7:23:10:e9:5e:fe:3a:b1:cc:f4:66:c9:4a:15:34:47:1a:
         5e:a2:db:86:ba:05:5a:3d:c6:22:4d:8a:60:7f:9b:52:91:ee:
         b1:69:e0:da:00:fe:d2:d0:26:4b:b1:29:d5:7e:d6:59:ca:01:
         ef:7a:08:61:e1:04:18:68:0a:37:67:07:1d:34:34:4e:48:15:
         11:2a:9b:93:af:cb:04:51:98:42:49:a9:d3:a4:3e:27:a1:f9:
         55:1a:3a:81:73:8f:a6:d6:a5:8f:b0:a8:67:f6:52:3b:ae:63:
         e1:56:5f:71:80:31:25:17:6e:2a:94:ce:93:c4:2b:80:fa:b4:
         d9:bb:e5:ff:ba:f4:4c:90:11:56:3d:3c:ae:ce:fa:59:5c:7c:
         9c:71:cb:9b:af:1c:a2:e3:07:cd:9c:3e:c5:2e:39:cf:1f:1b:
         9f:4e:2c:c2:c5:57:07:63:20:5a:ee:f9:ba:21:09:08:cc:78:
         44:6e:bb:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoD/MAnWWtVxNlUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
YWRhYjJhYmYtNGYzMS00MjQ4LWFlNmMtMjZkZDNlMTU5NmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12aqq2BcTnIOH11RzEkRFxqtQiVkRXUNVMdR
KqA/ysRhT/35aL1yJKuzCY79zfPT2YATdzYORSKJCb1UkwRSy3KttWtqyZ+/YI86
pWRCQngGUicIOKPa9Xok9LHFhXx2FW0t4WGrQT2qfYfP8XsObz8HtKJBi/2/rqvP
ZpeRXD3LlimtiNLjPDh2/N1HYcmab+tGa62C8o5K+0ZIAnNiei+yxW/88ICb44WZ
+XO55KamZjU8rV0OYaGjU9NJRzWqe4vjDL06vVLJNQPZ8/mPui7dcle0NPHSy4Hu
5MKcmLvkrnEXUNvvPO3mCGDSMU8W9WTCBOzEet2wIFSR7rMaxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMyBh6TckH3Ag9KKaRHf35uaBHbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDliYjI4ZWQtNTg5MC0z
MzViLTg3NTctN2U5N2JiYWFhMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF30MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpSHG7cMq77N7TwV553O4LL5MdnnB93Q5lIcouPKRFgslzd9E/8BRoD
6iYEGN2VC4Ms5lRG+bzdH7OP253ZfUIPD7CjASqutfu3IxDpXv46scz0ZslKFTRH
Gl6i24a6BVo9xiJNimB/m1KR7rFp4NoA/tLQJkuxKdV+1lnKAe96CGHhBBhoCjdn
Bx00NE5IFREqm5OvywRRmEJJqdOkPieh+VUaOoFzj6bWpY+wqGf2UjuuY+FWX3GA
MSUXbiqUzpPEK4D6tNm75f+69EyQEVY9PK7O+llcfJxxy5uvHKLjB82cPsUuOc8f
G59OLMLFVwdjIFru+bohCQjMeERuu5c=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:31:51 2025 by rpki-client