Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/dfe59efc-118f-3db4-aec8-bb89561d936c.roa
File:                     dfe59efc-118f-3db4-aec8-bb89561d936c.roa (raw, json)
Hash identifier:          zXv/IUJN2NILrs31b/1md5t/yRhEwOgHl9SAcbFZVZI=
Subject key identifier:   A6:66:61:E8:7E:DC:5F:3B:E2:90:79:BF:79:A1:A3:2D:0E:57:FE:D9
Certificate issuer:       /CN=db3a4466-554c-4a7d-9803-eceac12519bb
Certificate serial:       010D0C9F43285848A9962C282E8556FA2F7FB740
Authority key identifier: DF:C1:84:7A:4C:76:6B:D7:EB:4D:50:5D:47:52:BC:DF:54:A4:70:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/dfe59efc-118f-3db4-aec8-bb89561d936c.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     401065
IP address blocks:        23.179.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/db3a4466-554c-4a7d-9803-eceac12519bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/db3a4466-554c-4a7d-9803-eceac12519bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:2c:28:2e:85:56:fa:2f:7f:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db3a4466-554c-4a7d-9803-eceac12519bb
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=7d4d9978-c6c4-41bd-a158-7b161bfbbb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:2c:90:cc:6b:f5:16:3a:e5:db:8f:e9:d8:
                    9c:40:2c:95:5e:c6:26:2c:50:07:35:7b:d6:f2:92:
                    ab:8a:eb:40:d3:34:81:e6:e1:85:67:ea:a9:dd:79:
                    a2:0c:56:01:26:9f:e6:63:36:e4:85:fd:0d:c6:e2:
                    17:bf:03:c8:68:f5:96:8f:77:6d:f8:ec:f9:9a:33:
                    de:1e:31:38:96:7d:a0:b8:65:92:0e:db:af:91:50:
                    21:37:ca:87:07:22:e3:14:0d:b3:2d:97:ae:54:8f:
                    5e:35:83:26:e3:22:c2:23:3f:f8:12:84:d8:d7:9d:
                    34:4d:0a:3f:c1:89:89:19:20:d1:01:57:56:a6:cd:
                    85:28:50:e1:3b:88:b2:52:24:99:f0:53:ff:30:ed:
                    a5:4d:6b:4d:50:ef:28:2d:33:4b:8d:0e:7f:5e:da:
                    7a:f6:06:2a:bf:f6:26:0a:9f:68:31:9e:54:08:f9:
                    ab:3a:27:49:36:af:c4:25:5e:61:11:a0:3c:65:73:
                    fa:69:a9:41:99:76:9a:b8:3b:0a:7a:c9:20:52:9b:
                    f1:2f:81:b7:3a:b8:c0:7a:99:13:05:f9:b3:41:e7:
                    07:7c:e6:cc:4a:5c:67:33:39:ba:69:c3:e7:d0:2d:
                    bb:00:3f:fe:68:a9:6d:6d:d4:f9:c7:f5:71:b1:58:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:66:61:E8:7E:DC:5F:3B:E2:90:79:BF:79:A1:A3:2D:0E:57:FE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/dfe59efc-118f-3db4-aec8-bb89561d936c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/db3a4466-554c-4a7d-9803-eceac12519bb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:C1:84:7A:4C:76:6B:D7:EB:4D:50:5D:47:52:BC:DF:54:A4:70:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:e0:05:39:6d:89:f4:3c:c4:dd:9f:c0:f6:f1:12:88:db:
         9c:b1:f4:1f:2f:d6:bd:4c:66:e0:38:f9:7a:ef:7a:b2:e1:86:
         3c:c7:3b:6a:b4:b9:78:b7:97:ba:2d:dd:f6:f6:c8:7a:95:14:
         6d:60:0c:73:38:84:72:cc:b0:f9:5c:f6:c4:95:1a:ab:af:a9:
         b4:d9:54:73:08:37:4d:6d:a4:a8:b2:17:03:74:da:29:f8:f4:
         a4:42:d8:b8:ce:ef:62:30:1b:21:70:b7:d4:e9:2a:d2:8c:a8:
         32:2e:79:33:87:de:a1:b0:2b:25:80:85:f4:fb:db:97:04:be:
         18:05:c2:42:05:2a:16:03:a2:f6:71:23:f5:ce:54:e4:0b:a1:
         3a:ba:c9:63:02:40:48:b4:7b:b0:83:d3:8b:57:77:84:81:a1:
         4b:f5:49:66:23:76:24:f3:2b:e5:59:7d:39:2e:f3:a2:fd:57:
         8e:74:45:a3:5b:4e:f2:3f:99:58:1e:e8:4c:75:7c:d1:25:e0:
         55:ba:9d:26:0b:5d:1a:7e:a3:1d:cf:e3:ed:fd:c3:12:eb:5d:
         75:90:5b:7a:ed:ca:e4:cf:7a:88:66:f8:8a:45:4c:87:ba:86:
         3b:de:ee:18:30:20:27:94:d4:4c:27:27:ff:82:8b:33:28:a6:
         7b:16:64:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliwoLoVW+i9/t0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIzYTQ0NjYtNTU0Yy00YTdkLTk4MDMtZWNlYWMxMjUx
OWJiMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
N2Q0ZDk5NzgtYzZjNC00MWJkLWExNTgtN2IxNjFiZmJiYjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTsskMxr9RY65duP6dicQCyVXsYmLFAHNXvW
8pKriutA0zSB5uGFZ+qp3XmiDFYBJp/mYzbkhf0NxuIXvwPIaPWWj3dt+Oz5mjPe
HjE4ln2guGWSDtuvkVAhN8qHByLjFA2zLZeuVI9eNYMm4yLCIz/4EoTY1500TQo/
wYmJGSDRAVdWps2FKFDhO4iyUiSZ8FP/MO2lTWtNUO8oLTNLjQ5/Xtp69gYqv/Ym
Cp9oMZ5UCPmrOidJNq/EJV5hEaA8ZXP6aalBmXaauDsKeskgUpvxL4G3OrjAepkT
BfmzQecHfObMSlxnMzm6acPn0C27AD/+aKltbdT5x/VxsVjCYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZmYeh+3F874pB5v3mhoy0OV/7ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kYjNh
NDQ2Ni01NTRjLTRhN2QtOTgwMy1lY2VhYzEyNTE5YmIvZGZlNTllZmMtMTE4Zi0z
ZGI0LWFlYzgtYmI4OTU2MWQ5MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGIzYTQ0NjYtNTU0Yy00YTdkLTk4
MDMtZWNlYWMxMjUxOWJiL2RiM2E0NDY2LTU1NGMtNGE3ZC05ODAzLWVjZWFjMTI1
MTliYi5jcmwwHwYDVR0jBBgwFoAU38GEekx2a9frTVBdR1K831SkcDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kYjNhNDQ2Ni01NTRjLTRhN2QtOTgwMy1lY2Vh
YzEyNTE5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7MYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4V4AU5bYn0PMTdn8D28RKI25yx9B8v1r1MZuA4+XrverLhhjzHO2q0
uXi3l7ot3fb2yHqVFG1gDHM4hHLMsPlc9sSVGquvqbTZVHMIN01tpKiyFwN02in4
9KRC2LjO72IwGyFwt9TpKtKMqDIueTOH3qGwKyWAhfT725cEvhgFwkIFKhYDovZx
I/XOVOQLoTq6yWMCQEi0e7CD04tXd4SBoUv1SWYjdiTzK+VZfTku86L9V450RaNb
TvI/mVge6Ex1fNEl4FW6nSYLXRp+ox3P4+39wxLrXXWQW3rtyuTPeohm+IpFTIe6
hjve7hgwICeU1EwnJ/+CizMopnsWZG0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:45:06 2025 by rpki-client