Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/6e3e97d0-eea0-3541-b2e3-e61df6230705.roa
File:                     6e3e97d0-eea0-3541-b2e3-e61df6230705.roa (raw, json)
Hash identifier:          KC1wuKW5Ew/fuG28W8ltF4QeyEZCdbqa8K4EIflRQMQ=
Subject key identifier:   47:8C:D5:8D:78:64:43:C6:28:6D:EA:C3:F6:27:4E:F4:DC:A4:44:DB
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F432858481F65232024FDD7ECEB0C0900
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/6e3e97d0-eea0-3541-b2e3-e61df6230705.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     5650
IP address blocks:        23.239.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:23:20:24:fd:d7:ec:eb:0c:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=1f127084-cc7f-44e8-93a2-df9f7ed1ccec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:d1:79:71:b5:78:dd:1d:dc:08:5f:b7:be:
                    33:c5:fa:83:55:30:44:cd:d6:1f:d9:18:a9:7f:88:
                    ff:e1:07:1f:7e:71:76:50:cb:13:ec:b3:57:d3:27:
                    d1:0e:14:2f:ae:39:bd:71:7a:93:4d:36:49:ac:0e:
                    3a:4b:93:63:fa:d1:ee:78:ca:55:b4:42:4d:d1:84:
                    58:35:c4:91:bb:54:49:a7:c0:e7:ab:c4:51:5a:ac:
                    06:06:9c:9a:90:bd:c3:3b:5a:00:ac:66:ef:c9:70:
                    f4:6a:86:29:0f:f2:84:6e:4e:20:36:5c:50:7d:2c:
                    04:c1:82:56:4d:5e:39:7e:13:2f:9c:65:81:48:54:
                    ce:4c:21:73:3e:4c:80:04:54:42:82:84:93:6b:b6:
                    94:d0:d8:72:78:91:c0:83:7c:c2:69:6e:d4:41:89:
                    b9:0b:65:65:ee:d0:46:ab:bf:cc:da:06:b4:e0:01:
                    e3:ca:23:6d:e6:a3:b9:54:8e:1a:5a:72:30:b1:e2:
                    de:5e:20:7d:ec:2a:ec:1d:d6:fb:42:16:f5:eb:9e:
                    0e:cf:48:52:49:a3:54:00:17:2b:ab:e1:61:3d:da:
                    80:d7:5f:4e:23:e1:7b:0c:c8:06:77:a0:eb:b3:dc:
                    c8:cb:94:26:1f:6c:0f:ae:82:1b:05:34:36:93:5d:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8C:D5:8D:78:64:43:C6:28:6D:EA:C3:F6:27:4E:F4:DC:A4:44:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/6e3e97d0-eea0-3541-b2e3-e61df6230705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:fd:29:4b:4c:52:f6:8b:f0:e3:23:47:c5:f5:de:0b:dc:99:
         e7:04:06:f9:e6:20:61:bc:c8:0c:49:d3:ea:75:4b:d2:e7:e3:
         15:ce:7e:e0:45:2c:b4:2c:44:e0:20:13:f4:ee:86:ce:69:b8:
         fd:e3:81:56:1c:3d:6b:e1:d2:75:28:46:7a:fc:f3:fb:c0:3b:
         c8:bf:02:d7:7b:59:95:ed:5f:ed:cd:35:04:6e:7d:d1:f0:70:
         1b:ed:ff:30:4f:eb:54:3b:51:11:bf:42:db:6e:69:4e:aa:df:
         50:64:ae:07:9c:f1:f7:78:44:21:ae:75:07:45:e8:6d:10:e0:
         e6:40:6a:f4:11:2a:64:5c:c3:34:52:3c:16:35:50:7e:b5:86:
         27:23:cf:78:e9:60:07:71:56:ef:7b:f2:cb:1e:c6:ff:a9:d9:
         66:c2:f3:da:d9:35:6e:20:5a:be:ff:85:30:14:35:26:e7:29:
         d0:0c:e6:34:99:be:a6:c3:e5:98:f5:7b:b5:27:da:25:6d:b1:
         6d:fc:1b:a2:c3:90:81:f0:81:4d:1e:c9:52:f2:94:5c:41:41:
         35:be:c7:9c:2a:65:6c:3a:fd:15:e7:5a:ee:52:a7:79:40:55:
         93:dd:af:bc:b1:db:da:63:a0:a8:e7:39:68:c4:a1:9d:8f:cb:
         c9:69:28:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZSMgJP3X7OsMCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0
Mjg3MB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
MWYxMjcwODQtY2M3Zi00NGU4LTkzYTItZGY5ZjdlZDFjY2VjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9XReXG1eN0d3Ahft74zxfqDVTBEzdYf2Rip
f4j/4QcffnF2UMsT7LNX0yfRDhQvrjm9cXqTTTZJrA46S5Nj+tHueMpVtEJN0YRY
NcSRu1RJp8Dnq8RRWqwGBpyakL3DO1oArGbvyXD0aoYpD/KEbk4gNlxQfSwEwYJW
TV45fhMvnGWBSFTOTCFzPkyABFRCgoSTa7aU0NhyeJHAg3zCaW7UQYm5C2Vl7tBG
q7/M2ga04AHjyiNt5qO5VI4aWnIwseLeXiB97CrsHdb7Qhb1654Oz0hSSaNUABcr
q+FhPdqA119OI+F7DMgGd6Drs9zIy5QmH2wProIbBTQ2k10/KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeM1Y14ZEPGKG3qw/YnTvTcpETbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4
NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvNmUzZTk3ZDAtZWVhMC0z
NTQxLWIyZTMtZTYxZGY2MjMwNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx
NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw
NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk
YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF++gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABj9KUtMUvaL8OMjR8X13gvcmecEBvnmIGG8yAxJ0+p1S9Ln4xXOfuBF
LLQsROAgE/Tuhs5puP3jgVYcPWvh0nUoRnr88/vAO8i/Atd7WZXtX+3NNQRufdHw
cBvt/zBP61Q7URG/QttuaU6q31Bkrgec8fd4RCGudQdF6G0Q4OZAavQRKmRcwzRS
PBY1UH61hicjz3jpYAdxVu978ssexv+p2WbC89rZNW4gWr7/hTAUNSbnKdAM5jSZ
vqbD5Zj1e7Un2iVtsW38G6LDkIHwgU0eyVLylFxBQTW+x5wqZWw6/RXnWu5Sp3lA
VZPdr7yx29pjoKjnOWjEoZ2Py8lpKKg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:52 2025 by rpki-client