Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
File:                     603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa (raw, json)
Hash identifier:          SLUyHtBa9rmXR6JneEh1WuT029Se5ZHaj1569UpDjrQ=
Subject key identifier:   3E:F6:FF:D1:38:F3:85:47:9D:7E:80:45:8F:24:90:5B:7B:03:0A:56
Certificate issuer:       /CN=4164770e-1f48-4239-921d-775b5152fa2e
Certificate serial:       010D0C9F43285848DBD6707AE23B74CB730DB780
Authority key identifier: 83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     20055
IP address blocks:        23.131.120.0/24 maxlen: 24
                          2606:acc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:70:7a:e2:3b:74:cb:73:0d:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4164770e-1f48-4239-921d-775b5152fa2e
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=e817ae52-59e8-435f-93ef-08aad9e06785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:a4:e5:41:81:cd:47:cc:73:3a:cd:8b:fa:
                    a1:2d:cf:c2:cc:49:0e:56:ea:f9:3f:9d:25:37:77:
                    46:b6:89:74:d1:c9:cb:f1:e3:96:dc:18:40:35:2e:
                    a0:6f:c1:31:50:a0:f0:2c:b9:64:32:8c:23:bf:a1:
                    02:8b:c4:75:26:0d:a0:77:95:2c:65:22:6b:d4:c3:
                    e2:a7:fc:7d:3a:65:85:57:44:cd:e2:86:8d:e6:32:
                    f8:7c:e4:05:f5:a0:2b:93:1b:38:6b:d9:01:12:aa:
                    48:52:92:52:78:48:3d:69:1e:fe:ab:6c:86:f9:da:
                    32:94:f1:dc:e8:b4:fc:59:f7:a4:98:50:14:ec:de:
                    6a:e1:d3:10:b3:d6:cd:51:87:36:78:0e:67:5a:5d:
                    de:d4:32:2b:5e:10:ff:17:78:be:88:24:b7:cb:27:
                    a6:04:6b:c3:26:26:c8:f4:f5:31:fe:2b:61:48:36:
                    6c:99:07:51:f3:9c:31:28:0b:7b:7c:8b:15:68:16:
                    62:a5:2c:65:da:0a:24:b2:8f:a0:3e:ab:9e:40:1e:
                    7e:57:73:c0:b2:63:f6:c0:a4:d6:f6:da:a3:e7:ba:
                    9d:38:75:75:7d:e6:87:00:83:34:ff:22:be:dd:6e:
                    77:1e:cc:31:ae:8a:6f:cf:6d:a0:fe:3d:7c:24:a5:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F6:FF:D1:38:F3:85:47:9D:7E:80:45:8F:24:90:5B:7B:03:0A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl

            X509v3 Authority Key Identifier:
                keyid:83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.120.0/24
                IPv6:
                  2606:acc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a6:d6:97:45:37:c2:e2:62:5f:11:96:45:e6:fe:12:91:fc:
         3b:5c:ab:14:c2:f9:91:b7:81:d1:b7:a0:62:21:fe:22:15:6c:
         85:70:c7:3d:33:78:0a:bb:a8:97:a1:19:10:2c:34:4f:17:9a:
         43:28:04:55:1c:92:5b:6a:5f:b7:48:5f:05:43:aa:10:39:98:
         ca:64:2f:0e:24:6a:55:a0:6c:0c:22:8f:c6:9a:c2:92:6e:aa:
         68:63:81:12:15:46:17:f2:41:68:9c:44:19:46:f3:2e:65:ce:
         a7:f3:11:6d:b6:8e:4b:bc:7a:aa:a7:f5:99:ea:be:5d:64:10:
         f7:68:6c:12:ce:82:78:ba:9f:7c:ea:b4:7b:16:76:e3:a8:a0:
         46:b2:ff:8c:45:dc:19:73:be:9a:38:b4:da:d6:16:1f:3c:d9:
         9a:bf:21:89:cf:7e:08:a2:88:60:6b:31:0a:ed:59:9b:14:06:
         31:96:f4:c4:67:f5:85:a7:31:00:69:8f:d5:6b:a1:78:4e:f3:
         36:21:7f:15:0a:fb:66:82:26:c0:70:d5:0a:97:32:18:2d:ea:
         f7:59:12:78:30:ee:e0:60:db:6e:46:8a:08:12:ff:54:44:49:
         d9:7b:3c:12:fd:eb:ea:a0:a0:d3:47:7f:72:47:cf:6b:ad:51:
         0f:33:d0:28
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEjb1nB64jt0y3MNt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE2NDc3MGUtMWY0OC00MjM5LTkyMWQtNzc1YjUxNTJm
YTJlMB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk
ZTgxN2FlNTItNTllOC00MzVmLTkzZWYtMDhhYWQ5ZTA2Nzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXWk5UGBzUfMczrNi/qhLc/CzEkOVur5P50l
N3dGtol00cnL8eOW3BhANS6gb8ExUKDwLLlkMowjv6ECi8R1Jg2gd5UsZSJr1MPi
p/x9OmWFV0TN4oaN5jL4fOQF9aArkxs4a9kBEqpIUpJSeEg9aR7+q2yG+doylPHc
6LT8WfekmFAU7N5q4dMQs9bNUYc2eA5nWl3e1DIrXhD/F3i+iCS3yyemBGvDJibI
9PUx/ithSDZsmQdR85wxKAt7fIsVaBZipSxl2gokso+gPqueQB5+V3PAsmP2wKTW
9tqj57qdOHV1feaHAIM0/yK+3W53Hswxropvz22g/j18JKWohQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFD72/9E484VHnX6ARY8kkFt7AwpWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MTY0
NzcwZS0xZjQ4LTQyMzktOTIxZC03NzViNTE1MmZhMmUvNjAzYWFjNzEtNmY0Zi0z
ZWJmLWJjNmQtNmFhMjQ5YzJmNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDE2NDc3MGUtMWY0OC00MjM5LTky
MWQtNzc1YjUxNTJmYTJlLzQxNjQ3NzBlLTFmNDgtNDIzOS05MjFkLTc3NWI1MTUy
ZmEyZS5jcmwwHwYDVR0jBBgwFoAUg8uL64VN8heeNxr2999SBQR2tWowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80MTY0NzcwZS0xZjQ4LTQyMzktOTIxZC03NzVi
NTE1MmZhMmUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4N4MA0E
AgACMAcDBQAmBqzAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAACm1pdFN8LiYl8RlkXm/hKR/DtcqxTC+ZG3
gdG3oGIh/iIVbIVwxz0zeAq7qJehGRAsNE8XmkMoBFUckltqX7dIXwVDqhA5mMpk
Lw4kalWgbAwij8aawpJuqmhjgRIVRhfyQWicRBlG8y5lzqfzEW22jku8eqqn9Znq
vl1kEPdobBLOgni6n3zqtHsWduOooEay/4xF3Blzvpo4tNrWFh882Zq/IYnPfgii
iGBrMQrtWZsUBjGW9MRn9YWnMQBpj9VroXhO8zYhfxUK+2aCJsBw1QqXMhgt6vdZ
Engw7uBg225GiggS/1RESdl7PBL96+qgoNNHf3JHz2utUQ8z0Cg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:21 2025 by rpki-client