Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff3db407-c233-360f-a4c5-787c11569789.roa
File:                     ff3db407-c233-360f-a4c5-787c11569789.roa (raw, json)
Hash identifier:          Fsn4kvnBv94A5uQnJvOOVNOq/P4YG8FEMFLZwn2cdZk=
Subject key identifier:   67:C5:CA:6A:5A:BC:C6:A2:EF:81:4D:E8:56:7B:25:C4:E6:05:17:75
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584886B07023EC11C1A5FC55CA00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff3db407-c233-360f-a4c5-787c11569789.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     401152
IP address blocks:        23.27.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:70:23:ec:11:c1:a5:fc:55:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=a61cede2-8cd7-4503-a09d-afe0d528f850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:39:2c:84:c3:4d:b1:04:21:ac:c6:90:a7:
                    5c:14:a1:6d:ab:73:6c:05:41:e4:44:4f:c3:74:99:
                    ea:38:73:6a:22:86:d1:22:1e:1e:96:c0:e1:93:e6:
                    78:cb:28:0e:99:9a:03:7a:84:6f:7a:9c:de:e8:44:
                    dd:97:a8:59:76:97:5d:d0:64:58:4e:6c:a2:56:0c:
                    48:76:e1:2c:d3:79:8e:c9:25:5e:77:ae:75:7b:94:
                    ba:8c:9a:13:ec:12:8f:c9:5e:4b:56:b2:38:7d:7b:
                    ef:b4:f8:7b:60:cc:af:0c:81:ed:e2:ec:43:3b:0a:
                    56:68:96:e6:f2:97:f4:e2:07:d2:fa:48:c7:af:d0:
                    66:38:02:ef:c6:53:52:d0:20:c4:c6:22:55:69:38:
                    bd:aa:d1:bb:5d:54:8e:4a:19:9b:03:0d:51:22:b1:
                    f3:f1:a6:05:55:0f:38:08:f8:5e:50:31:ee:ac:b5:
                    7a:26:ed:4c:94:b1:d2:a5:c3:cc:95:b8:8c:b4:a7:
                    3b:02:3f:66:68:b2:df:50:8e:06:f2:2c:cf:bc:a1:
                    39:89:c3:e2:69:21:7e:f4:c0:35:84:a2:2b:34:4a:
                    c3:bc:de:0b:1b:e3:23:37:b2:80:8f:ec:7d:9b:a1:
                    2c:fc:7d:d5:ff:86:d3:07:84:ea:d7:cc:96:e3:68:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C5:CA:6A:5A:BC:C6:A2:EF:81:4D:E8:56:7B:25:C4:E6:05:17:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff3db407-c233-360f-a4c5-787c11569789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:62:3f:35:f7:a1:2f:ec:dd:ee:d5:dc:5d:d0:8c:62:36:a0:
         2e:9d:e4:84:d3:0f:27:99:ad:8f:36:28:dd:35:c6:e3:29:4a:
         5e:bc:d2:94:9a:0f:72:2e:e7:74:3f:27:37:c7:a5:9d:7b:35:
         4b:eb:08:cb:64:d1:cc:3d:cf:2e:97:78:05:77:29:05:ff:a6:
         a1:17:ef:66:64:d7:6c:ca:6a:e9:a6:83:3f:65:e4:0d:0b:68:
         47:14:3c:ba:96:4e:10:30:ee:c2:87:98:3b:98:0f:ba:2d:46:
         99:61:38:bb:dc:02:c6:65:21:66:c3:4f:65:75:66:8d:b5:21:
         f6:0b:03:a6:bb:fd:bd:5e:e9:f4:e9:1b:fd:2c:aa:c7:48:d3:
         fb:dc:62:51:40:20:de:c0:25:03:cb:86:ae:d4:7f:3a:bc:e0:
         28:e0:3d:fa:28:23:80:47:0e:83:25:fc:e8:e0:be:65:ea:7e:
         3d:06:10:ce:cb:e2:d2:7e:4e:04:3b:cf:a9:07:f4:8d:b0:bc:
         10:cd:e0:58:32:3f:a0:2a:51:e7:65:a6:5a:fe:c0:86:4b:cf:
         2c:fe:02:85:19:c5:20:3e:58:c7:2d:fa:9f:3f:65:a1:41:51:
         5f:55:51:cd:32:50:6d:39:43:86:a6:3e:b7:0f:ba:fb:39:33:
         46:44:98:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsHAj7BHBpfxVygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk
YTYxY2VkZTItOGNkNy00NTAzLWEwOWQtYWZlMGQ1MjhmODUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05s5LITDTbEEIazGkKdcFKFtq3NsBUHkRE/D
dJnqOHNqIobRIh4elsDhk+Z4yygOmZoDeoRvepze6ETdl6hZdpdd0GRYTmyiVgxI
duEs03mOySVed651e5S6jJoT7BKPyV5LVrI4fXvvtPh7YMyvDIHt4uxDOwpWaJbm
8pf04gfS+kjHr9BmOALvxlNS0CDExiJVaTi9qtG7XVSOShmbAw1RIrHz8aYFVQ84
CPheUDHurLV6Ju1MlLHSpcPMlbiMtKc7Aj9maLLfUI4G8izPvKE5icPiaSF+9MA1
hKIrNErDvN4LG+MjN7KAj+x9m6Es/H3V/4bTB4Tq18yW42i8OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfFympavMai74FN6FZ7JcTmBRd1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmYzZGI0MDctYzIzMy0z
NjBmLWE0YzUtNzg3YzExNTY5Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpiPzX3oS/s3e7V3F3QjGI2oC6d5ITTDyeZrY82KN01xuMpSl680pSa
D3Iu53Q/JzfHpZ17NUvrCMtk0cw9zy6XeAV3KQX/pqEX72Zk12zKaummgz9l5A0L
aEcUPLqWThAw7sKHmDuYD7otRplhOLvcAsZlIWbDT2V1Zo21IfYLA6a7/b1e6fTp
G/0sqsdI0/vcYlFAIN7AJQPLhq7Ufzq84CjgPfooI4BHDoMl/OjgvmXqfj0GEM7L
4tJ+TgQ7z6kH9I2wvBDN4FgyP6AqUedlplr+wIZLzyz+AoUZxSA+WMct+p8/ZaFB
UV9VUc0yUG05Q4amPrcPuvs5M0ZEmH4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:17:44 2025 by rpki-client