Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/23daa862-ec9b-360b-83d6-ba0998ff26cf.roa
File:                     23daa862-ec9b-360b-83d6-ba0998ff26cf.roa (raw, json)
Hash identifier:          xAahrLNVAJHWWfLFeK6Ol4f6CEKUm8TcNXuLkHMuB1g=
Subject key identifier:   C5:9C:A0:7B:DE:B4:CD:21:D8:DD:A2:23:79:3C:7E:2A:23:98:BD:79
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285849002156CCD5C8ABAFFF79D180
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/23daa862-ec9b-360b-83d6-ba0998ff26cf.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     20473
IP address blocks:        216.24.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:56:cc:d5:c8:ab:af:ff:79:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=dae5c5bb-0661-4f26-a52f-19320d3079f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:61:04:51:02:d7:8b:53:39:eb:2a:19:cf:
                    2d:be:40:5d:78:03:27:46:e5:10:2c:b8:d5:c8:e6:
                    0b:de:f6:3b:32:92:4f:3b:10:c2:f6:99:70:b0:8e:
                    a2:07:64:ec:6b:75:d1:90:46:0b:24:c5:ac:c4:2b:
                    d7:fb:78:51:f3:96:72:80:bb:44:e2:94:8c:6e:49:
                    f1:7f:7a:55:0e:16:bb:8a:ab:86:b6:87:df:b3:de:
                    d8:97:0f:2a:6f:e5:aa:e9:e2:da:bf:47:4b:66:8c:
                    59:e0:a5:91:7b:3d:95:b7:7d:ee:3a:f7:0d:fc:cb:
                    bb:fc:01:80:ba:35:93:c4:23:c9:86:65:79:da:db:
                    0e:b6:7c:0b:78:2b:d8:cb:08:b2:55:56:1f:09:81:
                    d5:ef:bc:9c:7c:c8:30:5a:66:43:75:79:03:19:7c:
                    d4:fe:00:70:7f:5e:55:2d:8a:40:1f:df:89:00:6f:
                    c9:e3:70:e8:a3:ae:67:e0:72:e9:60:b9:a7:52:09:
                    26:04:55:46:37:85:9e:87:3b:0b:71:fb:22:09:b3:
                    d3:3c:fd:6e:fb:17:8b:bc:e7:95:04:1b:19:c4:e4:
                    8a:aa:79:f5:3b:13:c0:d8:57:19:d8:fd:ec:c9:8a:
                    32:ad:98:bb:3b:24:d5:fd:3a:20:b5:33:e2:2e:3a:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9C:A0:7B:DE:B4:CD:21:D8:DD:A2:23:79:3C:7E:2A:23:98:BD:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/23daa862-ec9b-360b-83d6-ba0998ff26cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:fc:9c:eb:71:1c:0d:d2:00:40:8d:16:20:ea:e9:04:fd:7c:
         27:1f:98:fe:d0:61:52:ae:54:19:50:a5:5a:fb:c9:d0:97:af:
         c5:86:00:e4:88:e6:af:11:f6:f8:1e:a7:c4:69:21:91:5f:eb:
         50:94:8a:85:f9:51:5e:71:ff:04:4f:a4:0c:42:be:74:0c:2b:
         26:22:a3:82:62:9f:93:a3:83:f3:1c:57:a8:21:35:d8:26:f3:
         ad:e8:1e:87:db:7b:34:cf:d9:66:32:5a:6a:4a:16:be:37:b5:
         bc:82:62:64:92:5a:7c:ab:30:eb:f0:59:6e:86:7f:d4:5b:2d:
         61:51:88:67:70:16:56:ca:c5:f6:c3:b7:ed:97:a4:da:3f:db:
         66:36:96:90:24:c7:9b:4a:1f:00:e6:54:2a:73:b5:9d:21:99:
         ef:48:0a:48:e2:7e:82:af:68:00:d1:32:6e:38:b6:ca:03:41:
         93:e2:fc:ba:e1:fe:97:32:73:c1:e0:34:c7:61:ba:1c:b4:4e:
         76:d0:3c:19:58:92:16:a6:20:9d:89:89:15:df:d6:01:30:4a:
         bd:67:04:34:dc:ca:7a:95:de:a0:43:92:6d:30:f8:1a:1c:ae:
         88:7e:f0:4d:7d:41:07:81:d7:ec:7f:08:96:04:b1:d0:1d:1e:
         d0:b9:46:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVbM1cirr/950YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZGFlNWM1YmItMDY2MS00ZjI2LWE1MmYtMTkzMjBkMzA3OWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvixhBFEC14tTOesqGc8tvkBdeAMnRuUQLLjV
yOYL3vY7MpJPOxDC9plwsI6iB2Tsa3XRkEYLJMWsxCvX+3hR85ZygLtE4pSMbknx
f3pVDha7iquGtoffs97Ylw8qb+Wq6eLav0dLZoxZ4KWRez2Vt33uOvcN/Mu7/AGA
ujWTxCPJhmV52tsOtnwLeCvYywiyVVYfCYHV77ycfMgwWmZDdXkDGXzU/gBwf15V
LYpAH9+JAG/J43Doo65n4HLpYLmnUgkmBFVGN4WehzsLcfsiCbPTPP1u+xeLvOeV
BBsZxOSKqnn1OxPA2FcZ2P3syYoyrZi7OyTV/TogtTPiLjqqYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWcoHvetM0h2N2iI3k8fiojmL15MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMjNkYWE4NjItZWM5Yi0z
NjBiLTgzZDYtYmEwOTk4ZmYyNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADn8nOtxHA3SAECNFiDq6QT9fCcfmP7QYVKuVBlQpVr7ydCXr8WGAOSI
5q8R9vgep8RpIZFf61CUioX5UV5x/wRPpAxCvnQMKyYio4Jin5Ojg/McV6ghNdgm
863oHofbezTP2WYyWmpKFr43tbyCYmSSWnyrMOvwWW6Gf9RbLWFRiGdwFlbKxfbD
t+2XpNo/22Y2lpAkx5tKHwDmVCpztZ0hme9ICkjifoKvaADRMm44tsoDQZPi/Lrh
/pcyc8HgNMdhuhy0TnbQPBlYkhamIJ2JiRXf1gEwSr1nBDTcynqV3qBDkm0w+Boc
roh+8E19QQeB1+x/CJYEsdAdHtC5RsU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:19:43 2025 by rpki-client