Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a123c985-027d-392b-b1ac-c64e5601c454.roa
File:                     a123c985-027d-392b-b1ac-c64e5601c454.roa (raw, json)
Hash identifier:          waD6kYxgO1MuaLc++9wyl+Jr00lY0/J/V/pG1hO46nM=
Subject key identifier:   9C:23:39:32:E8:76:69:08:B1:C3:18:DB:69:C8:C2:7F:5E:16:BE:60
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858489BA0B32AE7C24F7F8FD1DF80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a123c985-027d-392b-b1ac-c64e5601c454.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     33236
IP address blocks:        69.1.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b3:2a:e7:c2:4f:7f:8f:d1:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=ebff785a-8603-4a93-a6bf-f0eeef735db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:8c:5b:f5:e8:b8:b7:f8:99:d4:23:48:38:
                    30:af:d6:3a:37:78:e2:27:aa:7e:d1:79:fd:95:20:
                    43:ee:0d:19:65:a3:d7:8f:c9:6d:f5:b0:8e:7d:d9:
                    7e:a5:99:f9:d5:c5:1c:13:03:de:20:29:36:b6:29:
                    1a:08:ac:11:32:0b:08:52:6d:17:6d:9e:bc:97:38:
                    a4:15:6a:05:c6:27:89:db:ea:09:c2:64:64:f8:44:
                    88:18:6d:6a:ab:d3:3d:15:75:71:0e:30:ea:8f:99:
                    8f:b3:5a:c3:81:cb:96:44:ca:0d:e9:11:a8:91:39:
                    91:f9:59:39:3b:70:54:38:15:3d:01:01:14:9b:48:
                    54:57:fb:31:02:ee:0d:51:4f:9f:72:09:dc:b6:0d:
                    ab:80:1a:eb:26:36:7e:93:9c:69:22:e7:1d:ca:f6:
                    91:18:65:5f:60:a7:e7:1b:f2:68:b2:20:c5:24:cc:
                    b0:7d:99:10:22:ff:09:de:84:c8:c8:02:6a:41:a2:
                    10:d6:2f:e2:91:8f:03:ca:38:3a:2d:e6:0d:61:3b:
                    16:15:44:bc:b6:98:d5:3e:63:1f:2e:22:ac:cc:0b:
                    c7:2f:27:6e:20:23:98:ea:bf:cd:f9:e3:c9:00:94:
                    33:07:cf:92:46:ca:e9:7c:2e:31:4d:18:aa:d8:7c:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:23:39:32:E8:76:69:08:B1:C3:18:DB:69:C8:C2:7F:5E:16:BE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a123c985-027d-392b-b1ac-c64e5601c454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:63:95:ad:f3:18:ec:2c:fe:fd:cc:ba:3d:c8:57:80:75:0a:
         6d:a6:b7:ae:7d:e9:2c:d5:75:13:6d:a4:1e:44:f6:01:b3:8a:
         42:98:30:95:a9:c5:93:ec:8c:48:fa:fe:e9:56:21:0c:3f:c1:
         5b:0c:92:04:aa:f6:6b:d9:87:fb:6f:8c:e5:ab:93:0c:12:b2:
         fb:b6:a6:e0:e0:6b:df:13:1b:48:a9:48:61:b9:1d:12:90:21:
         20:b7:d5:4b:20:a9:8f:70:42:e8:fe:32:c6:6a:86:7f:b8:7b:
         7f:46:5a:1d:09:79:d0:e9:93:e1:57:90:e8:28:af:24:91:4f:
         94:c4:1a:49:08:1a:07:eb:c7:70:8b:6c:35:fe:60:92:31:f4:
         c6:e7:f8:5e:37:45:67:11:bb:a1:63:92:fe:2f:0e:1b:87:75:
         5a:d9:e6:9d:74:c8:d0:19:f8:13:56:f2:9f:81:bb:cd:cb:9b:
         39:54:18:57:7f:46:d0:6e:d0:9c:74:43:b0:c8:65:14:d4:54:
         70:71:b9:fd:97:c2:28:0c:69:c0:a7:31:5b:a8:6b:d7:73:e1:
         6c:2d:ab:d6:51:94:c4:ef:aa:61:b6:20:98:69:ae:14:e2:84:
         e6:a3:cb:c8:66:7f:54:4f:5d:55:46:84:bf:3e:5d:9e:8f:7d:
         1e:ba:77:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboLMq58JPf4/R34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZWJmZjc4NWEtODYwMy00YTkzLWE2YmYtZjBlZWVmNzM1ZGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4KMW/XouLf4mdQjSDgwr9Y6N3jiJ6p+0Xn9
lSBD7g0ZZaPXj8lt9bCOfdl+pZn51cUcEwPeICk2tikaCKwRMgsIUm0XbZ68lzik
FWoFxieJ2+oJwmRk+ESIGG1qq9M9FXVxDjDqj5mPs1rDgcuWRMoN6RGokTmR+Vk5
O3BUOBU9AQEUm0hUV/sxAu4NUU+fcgnctg2rgBrrJjZ+k5xpIucdyvaRGGVfYKfn
G/JosiDFJMywfZkQIv8J3oTIyAJqQaIQ1i/ikY8Dyjg6LeYNYTsWFUS8tpjVPmMf
LiKszAvHLyduICOY6r/N+ePJAJQzB8+SRsrpfC4xTRiq2HwH0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJwjOTLodmkIscMY22nIwn9eFr5gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYTEyM2M5ODUtMDI3ZC0z
OTJiLWIxYWMtYzY0ZTU2MDFjNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQFwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxjla3zGOws/v3Muj3IV4B1Cm2mt6596SzVdRNtpB5E9gGzikKYMJWp
xZPsjEj6/ulWIQw/wVsMkgSq9mvZh/tvjOWrkwwSsvu2puDga98TG0ipSGG5HRKQ
ISC31UsgqY9wQuj+MsZqhn+4e39GWh0JedDpk+FXkOgorySRT5TEGkkIGgfrx3CL
bDX+YJIx9Mbn+F43RWcRu6Fjkv4vDhuHdVrZ5p10yNAZ+BNW8p+Bu83LmzlUGFd/
RtBu0Jx0Q7DIZRTUVHBxuf2XwigMacCnMVuoa9dz4Wwtq9ZRlMTvqmG2IJhprhTi
hOajy8hmf1RPXVVGhL8+XZ6PfR66d1w=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:45 2025 by rpki-client