Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1a719295-aec9-3735-9952-520d20827ef7.roa
File:                     1a719295-aec9-3735-9952-520d20827ef7.roa (raw, json)
Hash identifier:          Dgqxo0h7msb2WOqo7nK/a7hvX5EXAeTqOCmmYzZIVVI=
Subject key identifier:   B8:56:57:AE:C2:6A:CC:15:76:59:DD:48:0D:A0:6C:16:7B:A5:3D:6B
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584820CA92469A8560EE14BC3EC0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1a719295-aec9-3735-9952-520d20827ef7.roa
Signing time:             Sat 07 Dec 2024 14:00:51 +0000
ROA not before:           Sat 07 Dec 2024 14:00:51 +0000
ROA not after:            Fri 07 Mar 2025 14:00:51 +0000
asID:                     7862
IP address blocks:        146.23.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:20:ca:92:46:9a:85:60:ee:14:bc:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Dec  7 14:00:51 2024 GMT
            Not After : Mar  7 14:00:51 2025 GMT
        Subject: CN=8b30f930-cd93-4731-86f7-ecd6a6fd8ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:d5:83:9b:b0:a6:53:ce:f6:34:26:06:d3:
                    54:18:d7:c9:09:da:9d:15:31:d4:cc:d4:cd:ce:67:
                    81:47:19:8b:e9:c1:8d:a1:51:e7:15:b4:f5:c2:62:
                    21:86:25:19:83:b8:81:5f:15:93:93:21:14:bc:50:
                    cb:6a:4a:3f:7b:ef:18:ee:5f:3a:32:13:42:eb:b7:
                    07:fa:8c:16:13:2d:fb:ba:0b:e6:28:85:65:31:dc:
                    de:04:ce:5c:95:dd:51:e9:1d:77:c0:b1:62:94:91:
                    bc:3f:e1:5e:a3:eb:de:13:64:1d:f1:ad:27:7c:14:
                    39:28:f6:09:23:01:ee:3f:85:13:b5:a9:93:20:28:
                    ee:7d:b9:60:fa:1e:14:c3:b6:86:d6:97:c5:de:60:
                    73:ab:26:c9:9a:f6:bb:d2:b1:14:26:fd:6e:5a:4f:
                    36:7e:9b:5d:c6:9a:d1:01:a4:9d:7b:14:0b:f6:91:
                    07:63:9b:c3:f6:dc:61:1b:2c:f7:9c:74:6f:2c:27:
                    1a:80:28:04:77:2d:88:87:6e:1e:63:5b:38:17:45:
                    74:4a:ad:c0:88:94:31:7c:d3:9f:fb:e3:e4:3a:ca:
                    e3:75:4c:fe:37:dd:7f:9c:cc:d9:f0:25:29:8e:64:
                    b7:bf:47:c6:7a:89:86:6f:b4:82:89:05:1c:b8:e8:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:56:57:AE:C2:6A:CC:15:76:59:DD:48:0D:A0:6C:16:7B:A5:3D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1a719295-aec9-3735-9952-520d20827ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:06:72:df:d5:39:71:92:9b:01:54:f2:db:50:4c:aa:2c:69:
         99:cf:18:e0:a3:a5:3a:6b:7b:ed:b5:43:87:92:9c:9e:6a:2d:
         de:e1:17:c3:1c:5d:f4:42:9b:03:72:f5:fd:d7:5f:0f:70:56:
         29:f1:07:91:f3:8a:7b:40:1b:f1:d8:09:a4:e7:47:70:d8:43:
         72:cb:fa:f0:dd:7d:b9:86:80:d3:60:ad:ab:e1:d8:f1:de:45:
         00:ac:27:5a:ec:0e:e9:66:87:cd:70:05:41:fb:04:81:c5:ac:
         ec:94:ff:d6:99:05:d1:f8:61:9d:18:24:7f:c3:c9:0a:0a:6b:
         0f:dd:38:f5:d0:0c:8e:08:f4:5d:2d:ad:18:e6:fc:7a:98:ed:
         36:b7:65:7c:75:d3:39:c4:c3:01:de:ea:dd:e6:25:d1:a5:71:
         3b:1b:ab:c4:b2:b7:70:e2:66:b4:83:06:31:cb:8a:07:09:3f:
         60:46:aa:bb:17:a0:58:f6:d9:59:3a:cb:47:62:73:88:a2:0f:
         3f:4a:79:75:50:c9:65:cb:91:cc:aa:41:76:ca:28:74:ed:57:
         19:f5:66:b2:ff:5f:a7:38:2f:96:7d:f7:d6:e4:27:40:72:ae:
         69:c2:1d:ea:ff:72:88:eb:f3:cd:fa:b3:ee:52:11:25:64:19:
         f5:0b:5a:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEggypJGmoVg7hS8PsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTI0MTIwNzE0MDA1MVoXDTI1MDMwNzE0MDA1MVowLzEtMCsGA1UEAxMk
OGIzMGY5MzAtY2Q5My00NzMxLTg2ZjctZWNkNmE2ZmQ4YWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbXVg5uwplPO9jQmBtNUGNfJCdqdFTHUzNTN
zmeBRxmL6cGNoVHnFbT1wmIhhiUZg7iBXxWTkyEUvFDLako/e+8Y7l86MhNC67cH
+owWEy37ugvmKIVlMdzeBM5cld1R6R13wLFilJG8P+Feo+veE2Qd8a0nfBQ5KPYJ
IwHuP4UTtamTICjufblg+h4Uw7aG1pfF3mBzqybJmva70rEUJv1uWk82fptdxprR
AaSdexQL9pEHY5vD9txhGyz3nHRvLCcagCgEdy2Ih24eY1s4F0V0Sq3AiJQxfNOf
++PkOsrjdUz+N91/nMzZ8CUpjmS3v0fGeomGb7SCiQUcuOha+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLhWV67CaswVdlndSA2gbBZ7pT1rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvMWE3MTkyOTUtYWVjOS0z
NzM1LTk5NTItNTIwZDIwODI3ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhc4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMsGct/VOXGSmwFU8ttQTKosaZnPGOCjpTpre+21Q4eSnJ5qLd7hF8Mc
XfRCmwNy9f3XXw9wVinxB5HzintAG/HYCaTnR3DYQ3LL+vDdfbmGgNNgravh2PHe
RQCsJ1rsDulmh81wBUH7BIHFrOyU/9aZBdH4YZ0YJH/DyQoKaw/dOPXQDI4I9F0t
rRjm/HqY7Ta3ZXx10znEwwHe6t3mJdGlcTsbq8Syt3DiZrSDBjHLigcJP2BGqrsX
oFj22Vk6y0dic4iiDz9KeXVQyWXLkcyqQXbKKHTtVxn1ZrL/X6c4L5Z999bkJ0By
rmnCHer/cojr8836s+5SESVkGfULWjM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:54 2025 by rpki-client