Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/e30553ba-3faf-369a-9db3-959314f10320.roa
File:                     e30553ba-3faf-369a-9db3-959314f10320.roa (raw, json)
Hash identifier:          sgd56JSOE8td+msTZ0rvU4UvPJyNox5Xta6WuJW+mwY=
Subject key identifier:   49:AC:7E:B1:DB:EB:BA:F4:70:18:D8:03:F5:A2:78:6B:DF:40:DD:D5
Certificate issuer:       /CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48
Certificate serial:       010D0C9F4328584973DEDCD6CA0409E68C5B0600
Authority key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/e30553ba-3faf-369a-9db3-959314f10320.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     401612
IP address blocks:        23.179.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:dc:d6:ca:04:09:e6:8c:5b:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=9f70446b-b818-427d-89c4-5471419a0d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:44:31:ff:1f:e3:c0:ab:68:2d:22:3a:87:
                    5a:5c:56:26:8c:ff:9a:fd:bc:dc:91:c2:35:2b:02:
                    ff:55:3b:1f:b5:2a:93:75:4b:ae:e3:ea:74:07:67:
                    ff:05:e3:05:72:37:9c:38:ec:bb:77:33:1a:71:ed:
                    ec:9d:03:24:a9:9f:0d:cb:cd:7a:96:a9:92:8c:67:
                    69:bc:e6:11:d5:b8:02:c0:4c:e1:54:68:b1:b1:db:
                    88:7f:77:d6:0b:c5:cc:e1:47:f1:45:68:1f:31:91:
                    d9:ba:54:35:01:49:5a:77:41:bf:28:f1:27:bf:cb:
                    2d:d5:62:86:cb:2b:52:2c:8e:9e:b3:a7:1f:16:53:
                    45:24:04:b4:66:09:bd:5a:eb:b1:ed:8e:58:bf:cf:
                    af:27:83:be:2a:a2:4c:c5:3c:b2:07:8d:74:26:c7:
                    60:23:48:7d:7a:98:05:3d:9b:ea:2d:2c:01:7a:7d:
                    fb:3c:46:38:30:be:90:ee:64:d7:e5:47:be:7a:c7:
                    80:39:4b:9d:68:ad:89:84:e6:7f:4a:da:dc:43:fa:
                    ac:ec:3a:88:fa:80:c4:e5:9d:30:4c:49:0e:13:15:
                    01:03:38:e8:d7:5e:59:69:15:1a:12:7f:51:2d:9b:
                    3c:f7:0b:eb:6d:e9:fa:9e:ea:97:1b:22:fc:cf:4b:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AC:7E:B1:DB:EB:BA:F4:70:18:D8:03:F5:A2:78:6B:DF:40:DD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/e30553ba-3faf-369a-9db3-959314f10320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl

            X509v3 Authority Key Identifier:
                keyid:23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cb:74:1e:6d:93:ef:b8:55:48:94:3f:a4:43:18:e1:a0:94:
         e3:98:7a:b8:14:38:61:3b:5b:c5:47:94:4c:f6:20:ba:9e:d8:
         81:6b:59:2e:6c:98:f8:9b:3e:fe:52:92:ea:b3:02:a0:26:46:
         28:07:91:73:a6:c3:05:54:e6:5c:f9:d9:7d:4e:70:01:8a:7a:
         c7:36:b0:76:7e:cd:4f:ef:19:56:3e:ff:2a:30:a8:a0:71:5e:
         3e:86:15:18:b8:54:d1:36:9c:57:ae:09:e4:99:a5:26:12:b3:
         c2:d7:6a:43:5f:a8:54:f9:c5:70:aa:b4:e4:bf:39:75:e7:90:
         b9:a0:6a:1f:ee:96:14:8c:7a:c9:0d:0e:d9:d3:79:81:b7:46:
         ff:b0:d6:e5:90:09:1c:c2:5d:eb:6e:f5:71:cc:55:0a:fd:ca:
         14:14:1e:5b:3d:9d:a3:c6:b3:cb:df:35:9d:1e:ea:8b:3d:21:
         3d:80:c8:37:65:cb:81:b7:d3:4a:4e:e8:e2:89:ec:7a:42:1d:
         16:38:46:eb:a2:99:b0:0f:24:e8:e3:ab:77:22:5f:6f:cd:46:
         9f:c3:39:f1:84:f9:9c:fc:56:3e:ec:57:4d:10:14:b8:c6:f9:
         00:42:02:2a:4d:00:c8:20:d3:06:13:f0:6a:5c:17:0c:94:a3:
         39:3b:e8:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3tzWygQJ5oxbBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNiZmIyOWQtNTdhNC00OWM2LWFhODUtNDg5MmMxZjY5
YzQ4MB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
OWY3MDQ0NmItYjgxOC00MjdkLTg5YzQtNTQ3MTQxOWEwZDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+tEMf8f48CraC0iOodaXFYmjP+a/bzckcI1
KwL/VTsftSqTdUuu4+p0B2f/BeMFcjecOOy7dzMace3snQMkqZ8Ny816lqmSjGdp
vOYR1bgCwEzhVGixsduIf3fWC8XM4UfxRWgfMZHZulQ1AUlad0G/KPEnv8st1WKG
yytSLI6es6cfFlNFJAS0Zgm9Wuux7Y5Yv8+vJ4O+KqJMxTyyB410JsdgI0h9epgF
PZvqLSwBen37PEY4ML6Q7mTX5Ue+eseAOUudaK2JhOZ/StrcQ/qs7DqI+oDE5Z0w
TEkOExUBAzjo115ZaRUaEn9RLZs89wvrben6nuqXGyL8z0uLPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmsfrHb67r0cBjYA/WieGvfQN3VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wM2Jm
YjI5ZC01N2E0LTQ5YzYtYWE4NS00ODkyYzFmNjljNDgvZTMwNTUzYmEtM2ZhZi0z
NjlhLTlkYjMtOTU5MzE0ZjEwMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDNiZmIyOWQtNTdhNC00OWM2LWFh
ODUtNDg5MmMxZjY5YzQ4LzAzYmZiMjlkLTU3YTQtNDljNi1hYTg1LTQ4OTJjMWY2
OWM0OC5jcmwwHwYDVR0jBBgwFoAUI24Bv7J6VPsOidxfKDvh1fZXEYkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wM2JmYjI5ZC01N2E0LTQ5YzYtYWE4NS00ODky
YzFmNjljNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7PYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXLdB5tk++4VUiUP6RDGOGglOOYergUOGE7W8VHlEz2ILqe2IFrWS5s
mPibPv5SkuqzAqAmRigHkXOmwwVU5lz52X1OcAGKesc2sHZ+zU/vGVY+/yowqKBx
Xj6GFRi4VNE2nFeuCeSZpSYSs8LXakNfqFT5xXCqtOS/OXXnkLmgah/ulhSMeskN
DtnTeYG3Rv+w1uWQCRzCXetu9XHMVQr9yhQUHls9naPGs8vfNZ0e6os9IT2AyDdl
y4G300pO6OKJ7HpCHRY4RuuimbAPJOjjq3ciX2/NRp/DOfGE+Zz8Vj7sV00QFLjG
+QBCAipNAMgg0wYT8GpcFwyUozk76NE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:23 2025 by rpki-client