Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/2bb338a6-0cc8-30a0-bbb4-97d19e6b3ce8.roa
File:                     2bb338a6-0cc8-30a0-bbb4-97d19e6b3ce8.roa (raw, json)
Hash identifier:          dvaN27iHHXVqkyY2597Nh4twT+fs3/SjdC4vqdvue4c=
Subject key identifier:   56:1F:E1:FC:B4:33:92:D8:30:6C:52:C7:50:B4:36:11:DB:28:8D:92
Certificate issuer:       /CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
Certificate serial:       010D0C9F43285848E86662E9E04558CD8AFAA880
Authority key identifier: 41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/2bb338a6-0cc8-30a0-bbb4-97d19e6b3ce8.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     400647
IP address blocks:        23.183.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:62:e9:e0:45:58:cd:8a:fa:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=b92a16f4-75ba-4079-91eb-55c637a69014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:cf:f2:02:fa:6c:e8:ee:fe:49:ce:98:62:
                    72:16:35:4f:41:11:a7:67:dd:8d:49:8d:74:5f:94:
                    c1:05:b1:36:52:5f:4d:2b:da:6b:bd:fb:d6:42:41:
                    5d:3c:73:c5:fc:f1:d1:55:e3:46:a2:0f:bc:5a:11:
                    3f:8c:69:10:32:cf:55:d7:9a:13:1c:d2:07:78:18:
                    09:d7:f7:ee:f1:09:83:d9:89:8f:94:dc:94:62:2f:
                    e6:08:95:4d:e4:7e:85:ab:e0:93:e8:6d:2a:be:eb:
                    b7:8b:33:31:04:55:b1:f3:20:8c:ae:49:a1:80:c3:
                    7d:e6:c9:d8:a2:42:62:cc:c0:21:fa:b0:04:d7:ff:
                    8f:f4:e1:0b:b4:6e:e4:ee:d5:29:1c:c9:c5:ef:c3:
                    dc:c1:a0:12:eb:7f:c6:43:f3:14:79:b6:03:48:9b:
                    76:c2:90:ce:02:99:30:a7:61:61:89:77:c8:aa:c0:
                    f5:96:13:3b:3c:97:6c:78:f3:b3:3a:eb:e1:e0:95:
                    fc:2f:7c:4f:49:f8:d4:93:61:a4:53:0a:2b:02:0f:
                    96:6f:27:e9:1e:34:dd:02:3a:81:9b:a1:05:07:55:
                    ad:5e:2f:0e:7d:31:44:32:6a:05:ba:b0:99:da:e0:
                    12:2a:16:9c:3b:b1:97:b6:5c:8d:55:fb:bc:3b:5c:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1F:E1:FC:B4:33:92:D8:30:6C:52:C7:50:B4:36:11:DB:28:8D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/2bb338a6-0cc8-30a0-bbb4-97d19e6b3ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl

            X509v3 Authority Key Identifier:
                keyid:41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:d4:80:a5:d6:0f:e0:6b:b3:fe:d3:39:f5:2b:53:78:db:
         31:6a:22:06:1b:08:51:a0:ff:85:f1:b1:cc:b3:01:b1:69:7b:
         22:2e:c2:04:93:48:ad:89:7d:40:84:cc:2e:77:16:75:a2:61:
         96:9f:16:de:3a:ce:da:52:b7:bd:00:cd:67:81:1d:2b:59:69:
         be:db:ad:51:02:a1:37:38:c8:9e:3d:a1:94:b4:a4:c3:ec:54:
         69:d4:16:1c:2f:ca:41:b3:8a:2a:db:d2:eb:f7:3d:0d:b0:88:
         ad:32:d9:4c:f0:71:dd:d8:fa:2e:be:dd:eb:aa:ca:f6:ba:51:
         54:55:bf:c2:9f:04:7e:77:bc:81:bf:00:07:fc:3f:af:51:db:
         c6:4f:78:c2:ca:34:2b:45:83:ce:cd:34:28:f4:c3:02:25:c1:
         ae:2b:0d:e2:c3:bf:da:0d:c0:ff:98:d4:2e:3c:ea:87:49:f4:
         9a:da:03:04:46:b2:d5:c0:a3:b3:68:15:69:04:bf:4e:21:de:
         57:69:85:7b:34:05:15:0a:c0:2b:f1:47:52:12:1b:8a:8d:68:
         d7:16:ae:d8:af:16:29:d5:12:a2:47:8a:6a:bb:8f:e9:09:fd:
         7b:7c:c1:da:bf:0e:d9:20:e7:7b:71:4f:0d:d0:15:ae:22:78:
         13:bc:41:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmLp4EVYzYr6qIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDM2Yjk4OTItMmJjMS00MmU3LTlmMGItZmMxNjk4NjJi
ZjhiMB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk
YjkyYTE2ZjQtNzViYS00MDc5LTkxZWItNTVjNjM3YTY5MDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdbP8gL6bOju/knOmGJyFjVPQRGnZ92NSY10
X5TBBbE2Ul9NK9prvfvWQkFdPHPF/PHRVeNGog+8WhE/jGkQMs9V15oTHNIHeBgJ
1/fu8QmD2YmPlNyUYi/mCJVN5H6Fq+CT6G0qvuu3izMxBFWx8yCMrkmhgMN95snY
okJizMAh+rAE1/+P9OELtG7k7tUpHMnF78PcwaAS63/GQ/MUebYDSJt2wpDOApkw
p2FhiXfIqsD1lhM7PJdsePOzOuvh4JX8L3xPSfjUk2GkUworAg+WbyfpHjTdAjqB
m6EFB1WtXi8OfTFEMmoFurCZ2uASKhacO7GXtlyNVfu8O1wCeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYf4fy0M5LYMGxSx1C0NhHbKI2SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzZi
OTg5Mi0yYmMxLTQyZTctOWYwYi1mYzE2OTg2MmJmOGIvMmJiMzM4YTYtMGNjOC0z
MGEwLWJiYjQtOTdkMTllNmIzY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDM2Yjk4OTItMmJjMS00MmU3LTlm
MGItZmMxNjk4NjJiZjhiLzQzNmI5ODkyLTJiYzEtNDJlNy05ZjBiLWZjMTY5ODYy
YmY4Yi5jcmwwHwYDVR0jBBgwFoAUQQlimLmp0MExGA4SOsQQj/dr8GwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80MzZiOTg5Mi0yYmMxLTQyZTctOWYwYi1mYzE2
OTg2MmJmOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7cIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE951ICl1g/ga7P+0zn1K1N42zFqIgYbCFGg/4XxscyzAbFpeyIuwgST
SK2JfUCEzC53FnWiYZafFt46ztpSt70AzWeBHStZab7brVECoTc4yJ49oZS0pMPs
VGnUFhwvykGziirb0uv3PQ2wiK0y2Uzwcd3Y+i6+3euqyva6UVRVv8KfBH53vIG/
AAf8P69R28ZPeMLKNCtFg87NNCj0wwIlwa4rDeLDv9oNwP+Y1C486odJ9JraAwRG
stXAo7NoFWkEv04h3ldphXs0BRUKwCvxR1ISG4qNaNcWrtivFinVEqJHimq7j+kJ
/Xt8wdq/Dtkg53txTw3QFa4ieBO8QYg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:10:31 2025 by rpki-client