Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/188915cb-79c3-3ca3-89d2-581c69426afb.roa
File:                     188915cb-79c3-3ca3-89d2-581c69426afb.roa (raw, json)
Hash identifier:          EiMm8I+EbzAknvchTxvyWVPtJEmfqcE5b+W/zalFh9s=
Subject key identifier:   41:9D:5E:D0:4A:A6:E5:D5:79:96:02:71:A5:28:CF:68:0D:C9:11:30
Certificate issuer:       /CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
Certificate serial:       010D0C9F43285848CC7B9DBC7BD932957459E240
Authority key identifier: 93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/188915cb-79c3-3ca3-89d2-581c69426afb.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     197547
IP address blocks:        23.158.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:9d:bc:7b:d9:32:95:74:59:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=de8c86a2-d79e-4ac2-842c-b8975ef8483c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:be:19:80:75:c7:69:32:5a:28:ae:57:20:bf:
                    26:c8:08:21:39:00:25:76:be:2f:98:d0:9b:9d:ae:
                    a7:f7:d0:64:a4:57:80:53:bd:35:f2:8c:27:1a:4f:
                    de:a5:57:17:dd:59:79:03:d9:b7:0c:01:78:c1:8c:
                    43:93:8a:e4:28:4e:4b:42:37:9e:95:71:78:d7:24:
                    b4:ae:78:7a:4e:c6:b3:96:a0:50:c4:e1:c3:49:f1:
                    da:2e:33:da:53:c9:52:51:ae:47:48:fb:36:c4:e7:
                    39:6a:14:33:b3:2c:e4:40:a9:32:1b:9c:81:9d:d3:
                    ef:41:c7:2a:e5:5e:00:5e:a1:34:6e:8d:a8:01:9f:
                    28:73:8b:9a:43:52:7c:5e:ac:88:76:a7:04:6e:64:
                    ff:12:ce:7c:97:9d:92:07:7f:d8:3b:f3:14:9d:5a:
                    66:82:5e:9b:25:f1:ac:e7:c9:9a:99:82:cb:c7:a9:
                    76:80:e5:bb:91:24:48:ec:f5:b1:3a:e9:c4:4e:15:
                    dc:cf:af:79:0a:13:e5:5e:17:6b:50:ea:1e:e1:17:
                    16:69:d2:9d:ef:0a:c7:35:39:3b:9a:a0:b7:eb:dc:
                    dd:48:6f:8e:01:bd:25:b1:cc:95:69:ac:89:f1:18:
                    17:77:be:db:00:86:58:58:08:96:6e:0a:58:07:94:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9D:5E:D0:4A:A6:E5:D5:79:96:02:71:A5:28:CF:68:0D:C9:11:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/188915cb-79c3-3ca3-89d2-581c69426afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl

            X509v3 Authority Key Identifier:
                keyid:93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:69:b0:67:ae:05:ec:86:00:c5:93:ae:e6:29:da:7b:5b:8c:
         1f:fc:c1:39:e0:4b:25:0e:a1:f6:ee:b6:d5:e2:8f:45:37:3b:
         39:1a:dc:61:b7:a6:1c:2e:1b:2f:e6:bf:5e:59:03:f1:74:cc:
         a2:63:32:e7:30:ef:43:11:1b:2b:a1:e0:55:13:9b:c2:a8:3e:
         e9:7b:2b:9a:69:b7:7a:b5:62:0b:1f:19:f8:d0:72:b6:d6:d6:
         5d:97:5d:79:f9:2a:01:52:71:a1:24:a9:29:63:0c:bf:9a:f5:
         ca:58:32:ae:46:96:42:52:71:c4:94:c4:41:60:01:66:00:5f:
         98:c6:5d:6e:58:1e:72:4e:28:c4:34:76:84:31:f0:7b:a3:6e:
         98:4f:d5:fb:6a:cd:11:4c:fb:7b:77:2f:2f:69:4e:b9:82:47:
         6c:1b:2a:82:6a:40:e3:bc:33:d7:2f:1b:17:6e:df:d9:f8:50:
         1c:10:39:86:93:e7:5f:7e:f5:e4:71:e0:1b:76:89:2e:81:42:
         d0:f0:8e:56:28:09:03:04:a7:6f:f5:1b:6f:60:e2:05:45:39:
         d4:40:c1:fa:31:2f:61:48:4a:6f:75:1e:ec:9e:2d:67:89:87:
         89:75:e2:83:a7:e6:99:74:79:3e:b8:8c:86:ce:dd:9c:c0:af:
         fd:3f:bf:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe528e9kylXRZ4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM0ZmQ5ODYtMWFmNy00Mzg5LWJmOTEtZDRiOTJlZGM5
YWM5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
ZGU4Yzg2YTItZDc5ZS00YWMyLTg0MmMtYjg5NzVlZjg0ODNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL4ZgHXHaTJaKK5XIL8myAghOQAldr4vmNCb
na6n99BkpFeAU7018ownGk/epVcX3Vl5A9m3DAF4wYxDk4rkKE5LQjeelXF41yS0
rnh6TsazlqBQxOHDSfHaLjPaU8lSUa5HSPs2xOc5ahQzsyzkQKkyG5yBndPvQccq
5V4AXqE0bo2oAZ8oc4uaQ1J8XqyIdqcEbmT/Es58l52SB3/YO/MUnVpmgl6bJfGs
58mamYLLx6l2gOW7kSRI7PWxOunEThXcz695ChPlXhdrUOoe4RcWadKd7wrHNTk7
mqC369zdSG+OAb0lscyVaayJ8RgXd77bAIZYWAiWbgpYB5QKqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGdXtBKpuXVeZYCcaUoz2gNyREwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82YzRm
ZDk4Ni0xYWY3LTQzODktYmY5MS1kNGI5MmVkYzlhYzkvMTg4OTE1Y2ItNzljMy0z
Y2EzLTg5ZDItNTgxYzY5NDI2YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNmM0ZmQ5ODYtMWFmNy00Mzg5LWJm
OTEtZDRiOTJlZGM5YWM5LzZjNGZkOTg2LTFhZjctNDM4OS1iZjkxLWQ0YjkyZWRj
OWFjOS5jcmwwHwYDVR0jBBgwFoAUk97V0B5ktd6g/I05HEet+rJKUaAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82YzRmZDk4Ni0xYWY3LTQzODktYmY5MS1kNGI5
MmVkYzlhYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF55oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdpsGeuBeyGAMWTruYp2ntbjB/8wTngSyUOofbuttXij0U3Ozka3GG3
phwuGy/mv15ZA/F0zKJjMucw70MRGyuh4FUTm8KoPul7K5ppt3q1YgsfGfjQcrbW
1l2XXXn5KgFScaEkqSljDL+a9cpYMq5GlkJSccSUxEFgAWYAX5jGXW5YHnJOKMQ0
doQx8HujbphP1ftqzRFM+3t3Ly9pTrmCR2wbKoJqQOO8M9cvGxdu39n4UBwQOYaT
519+9eRx4Bt2iS6BQtDwjlYoCQMEp2/1G29g4gVFOdRAwfoxL2FISm91HuyeLWeJ
h4l14oOn5pl0eT64jIbO3ZzAr/0/v1A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:46 2025 by rpki-client