Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/62c49f59-b1a7-3fbc-94cf-246143f8fbdb.roa
File:                     62c49f59-b1a7-3fbc-94cf-246143f8fbdb.roa (raw, json)
Hash identifier:          dn/QsAwZMSAxh8iiGBtEj/pcOrdY8KbwntAaD8eN9ek=
Subject key identifier:   63:67:03:A1:23:4A:9C:D8:12:8A:5B:23:66:9D:22:14:F2:F0:7D:DA
Certificate issuer:       /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
Certificate serial:       010D0C9F4328584869606CB1EEB739DFD22DA9E0
Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/62c49f59-b1a7-3fbc-94cf-246143f8fbdb.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     54309
IP address blocks:        23.160.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:6c:b1:ee:b7:39:df:d2:2d:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=d06e78c6-4d34-4771-8dc9-7954003a7b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:6f:76:dd:a9:b8:77:57:a5:58:5b:10:d8:
                    22:6e:89:b9:3b:dc:da:24:3e:a2:7a:8a:c0:3e:cf:
                    7e:5f:84:64:3c:c8:13:85:fa:8e:17:bc:3b:af:a6:
                    a5:ef:08:ad:91:e2:3b:38:81:3b:89:77:f9:a0:5f:
                    7a:b7:bb:fc:20:a6:5d:b5:c3:7d:d8:17:e2:13:d0:
                    c2:c7:74:3c:4d:1e:c6:c7:38:f4:e0:82:02:ac:01:
                    ab:a9:59:03:0f:36:6b:73:b4:a2:1c:24:a8:71:27:
                    8e:2a:8a:7b:e0:ae:9d:94:09:27:c8:33:a9:e8:a3:
                    00:06:0c:3c:ba:7b:a5:b4:e2:74:72:5c:fa:a3:39:
                    99:b4:28:c8:f4:03:22:10:ae:17:63:67:48:04:5e:
                    23:60:9a:f7:cc:24:9d:ae:d0:25:59:15:7e:7e:12:
                    81:02:91:b6:10:6c:a3:6d:7b:a6:49:ea:dd:5f:11:
                    70:56:15:12:94:be:1f:69:4f:a9:87:90:f2:57:34:
                    48:c8:5e:c0:f3:0c:a5:68:61:a6:ae:d1:a8:5e:64:
                    08:18:3f:6f:90:bf:26:a2:54:16:31:b5:1a:15:8c:
                    65:51:32:d3:5a:02:97:7f:9b:09:b6:7a:a7:99:9f:
                    1d:2a:8c:92:99:89:bf:bf:e4:65:50:78:06:eb:c8:
                    53:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:67:03:A1:23:4A:9C:D8:12:8A:5B:23:66:9D:22:14:F2:F0:7D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/62c49f59-b1a7-3fbc-94cf-246143f8fbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl

            X509v3 Authority Key Identifier:
                keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e5:2b:5c:a4:5e:f2:eb:25:6c:b5:0c:62:d6:23:e9:01:8c:
         7b:48:28:6e:ba:63:99:38:36:fb:ca:9f:42:0d:c6:83:65:35:
         d3:fc:29:5e:3d:6e:ef:ab:b8:12:92:75:e2:89:7c:bd:f8:ed:
         00:30:7c:30:21:7d:a6:6e:98:e7:2a:72:47:a1:be:4a:2c:b5:
         40:95:33:03:58:d1:30:a3:30:bf:c1:20:b7:d9:eb:85:74:65:
         07:ed:29:6c:6b:90:86:6e:35:21:45:b0:03:ae:50:aa:38:d5:
         be:f7:c3:4d:80:19:ab:ee:c3:b5:24:fe:73:81:e5:3c:54:68:
         4a:b2:80:8a:a3:67:c2:4b:ec:17:ca:04:25:74:45:21:27:d4:
         97:ff:0f:22:5a:bc:36:79:ca:dc:77:af:11:0e:e4:22:4c:5e:
         16:56:2b:bc:c4:72:8a:c3:50:ba:8b:db:f3:2f:a7:ae:66:7d:
         bd:6a:1c:44:f0:88:43:66:99:53:85:61:a9:87:10:9a:2f:5f:
         59:f7:88:b3:87:6b:e8:f5:56:1c:40:de:48:15:34:81:9a:7e:
         a6:57:dc:34:bc:42:b5:94:79:56:25:67:7e:30:e0:93:cd:8a:
         24:5f:14:dd:67:f9:02:6f:81:c1:46:4e:fe:1f:f4:c8:41:65:
         a4:95:80:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYGyx7rc539ItqeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm
MDkxMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ZDA2ZTc4YzYtNGQzNC00NzcxLThkYzktNzk1NDAwM2E3YjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOFvdt2puHdXpVhbENgibom5O9zaJD6ieorA
Ps9+X4RkPMgThfqOF7w7r6al7witkeI7OIE7iXf5oF96t7v8IKZdtcN92BfiE9DC
x3Q8TR7Gxzj04IICrAGrqVkDDzZrc7SiHCSocSeOKop74K6dlAknyDOp6KMABgw8
unultOJ0clz6ozmZtCjI9AMiEK4XY2dIBF4jYJr3zCSdrtAlWRV+fhKBApG2EGyj
bXumSerdXxFwVhUSlL4faU+ph5DyVzRIyF7A8wylaGGmrtGoXmQIGD9vkL8molQW
MbUaFYxlUTLTWgKXf5sJtnqnmZ8dKoySmYm/v+RlUHgG68hT+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGNnA6EjSpzYEopbI2adIhTy8H3aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5
ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvNjJjNDlmNTktYjFhNy0z
ZmJjLTk0Y2YtMjQ2MTQzZjhmYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm
NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5
ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk
MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6C4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3lK1ykXvLrJWy1DGLWI+kBjHtIKG66Y5k4NvvKn0INxoNlNdP8KV49
bu+ruBKSdeKJfL347QAwfDAhfaZumOcqckehvkostUCVMwNY0TCjML/BILfZ64V0
ZQftKWxrkIZuNSFFsAOuUKo41b73w02AGavuw7Uk/nOB5TxUaEqygIqjZ8JL7BfK
BCV0RSEn1Jf/DyJavDZ5ytx3rxEO5CJMXhZWK7zEcorDULqL2/Mvp65mfb1qHETw
iENmmVOFYamHEJovX1n3iLOHa+j1VhxA3kgVNIGafqZX3DS8QrWUeVYlZ34w4JPN
iiRfFN1n+QJvgcFGTv4f9MhBZaSVgHs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:08 2025 by rpki-client