Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/2a66cd51-1832-32d5-aa85-a263af125a1a.roa
File:                     2a66cd51-1832-32d5-aa85-a263af125a1a.roa (raw, json)
Hash identifier:          aRcRDeKxLdrFMPFMqfaeiVBxwnxhgCdTqA2NmeiYfWo=
Subject key identifier:   F8:B4:7E:49:93:CC:CD:07:3D:DA:60:DF:E7:CC:41:0E:AC:D1:5A:EF
Certificate issuer:       /CN=35241669-57c3-4f1d-8e12-d32455951379
Certificate serial:       010D0C9F43285848A136199C4B3A55D9B0641EE0
Authority key identifier: 8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/2a66cd51-1832-32d5-aa85-a263af125a1a.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     62880
IP address blocks:        23.181.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:19:9c:4b:3a:55:d9:b0:64:1e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35241669-57c3-4f1d-8e12-d32455951379
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=fe8398f0-e6dc-4b5c-8c7c-d277188781a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:05:29:86:80:99:8f:e7:b1:8a:33:5e:b0:
                    96:d1:60:92:17:f5:02:db:78:94:3d:e9:36:86:21:
                    f5:a9:af:db:8f:3f:60:bc:dd:ac:34:8d:a5:c4:c3:
                    00:6c:94:67:34:b5:33:29:28:d6:08:1a:16:b1:c4:
                    dd:e1:60:80:39:0d:0f:c0:7e:6d:ba:8e:84:f6:cb:
                    95:5f:3c:89:41:e6:04:9b:5d:14:d0:32:70:94:a2:
                    f6:89:fd:af:a8:7e:b8:cd:86:be:4b:da:01:ca:78:
                    af:74:ff:c8:ed:58:6d:33:a5:e9:52:4c:b2:f3:1c:
                    17:0d:56:2c:58:30:ce:34:83:bc:7c:c9:6f:26:35:
                    49:2b:f3:46:dd:35:45:f5:1b:fa:ce:9d:67:a5:4d:
                    e2:a6:26:69:88:e2:f9:8c:14:a4:cd:d9:86:53:fc:
                    ca:79:8a:6b:61:1a:c3:04:54:19:d8:34:f7:3a:f2:
                    fc:5d:95:bf:1d:50:83:9f:ee:af:25:bc:78:43:07:
                    79:43:90:7e:f9:c1:d4:75:6f:b9:62:26:73:55:e3:
                    79:3b:41:c5:8c:73:1c:d3:4d:58:ba:3e:a7:24:0f:
                    64:6e:99:b5:bd:65:d5:13:f8:49:18:2a:61:7b:ff:
                    af:61:5e:b9:17:65:56:5f:2e:f6:bd:bb:b1:1f:3b:
                    76:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B4:7E:49:93:CC:CD:07:3D:DA:60:DF:E7:CC:41:0E:AC:D1:5A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/2a66cd51-1832-32d5-aa85-a263af125a1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl

            X509v3 Authority Key Identifier:
                keyid:8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8b:cf:ad:a3:62:77:ae:42:11:ea:20:f7:97:75:ac:e0:da:
         5e:63:29:27:3a:3b:d1:a2:d5:e3:db:25:f2:9b:28:eb:59:ca:
         e8:20:ce:bd:87:ba:8b:0e:50:84:70:25:de:8b:6f:b4:61:2a:
         01:0f:22:4d:ac:94:fe:a3:39:45:7e:6b:05:f2:ee:7e:9d:f1:
         19:99:b4:43:52:3e:bf:96:3e:eb:cd:b3:fc:ca:f5:9b:73:3a:
         f8:a8:af:92:2a:bc:b4:28:16:05:8f:d7:f5:32:1b:6d:35:79:
         2c:19:0d:ff:96:13:8c:d7:28:36:b1:bb:13:be:68:71:1b:05:
         d8:af:1f:62:f5:ee:ee:7c:f3:f8:bd:db:dc:ce:79:2d:ae:f5:
         57:86:4b:d4:0b:06:6e:ef:77:7d:34:2e:14:76:eb:07:96:32:
         d8:1c:ce:a7:b6:81:88:0c:04:12:99:b3:0b:2e:d1:35:4a:0a:
         11:ad:53:9a:05:86:fc:7b:37:07:13:78:e0:2e:9a:4d:7f:ed:
         52:e2:2a:5f:44:2b:e6:ab:c6:af:8f:11:76:1a:10:5d:b7:f2:
         65:64:d9:79:91:e1:24:ee:13:5d:e2:a1:80:a3:30:a5:dc:94:
         54:dd:1b:98:84:6a:f5:8e:c4:bf:2f:cf:11:c6:b0:d3:d4:d5:
         e1:1c:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:03 2025 by rpki-client