Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6bc9518c-92df-3fa7-8157-1b414d300f26.roa
File:                     6bc9518c-92df-3fa7-8157-1b414d300f26.roa (raw, json)
Hash identifier:          yvG00bmV1G4Sb0puOzHC8+Bc6L8fdZprXMgKGI1kCZ8=
Subject key identifier:   E8:75:28:B1:E7:FC:A1:C1:50:D0:59:8E:4D:07:61:8C:6B:A7:D9:8A
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285848E16BD33D9C211B2C1EC14700
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6bc9518c-92df-3fa7-8157-1b414d300f26.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        96.9.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d3:3d:9c:21:1b:2c:1e:c1:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=c1f70cfa-13ba-4d15-b402-39d97b7e1fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:cb:85:27:0f:21:8a:a1:48:49:ee:8b:9f:
                    57:7d:5a:ce:1f:64:71:db:55:a8:94:35:d0:86:79:
                    fa:68:fd:a8:bf:53:72:65:a8:c4:8a:58:be:ac:b4:
                    eb:46:e8:e0:c0:34:59:41:88:47:c4:5e:22:3f:03:
                    51:ad:78:9f:a1:7d:c9:e1:da:73:1e:df:98:4e:7e:
                    4e:ea:50:19:47:e3:f6:7e:b0:9d:0c:eb:3b:0e:e0:
                    2b:57:8d:a9:23:e6:89:4f:79:a4:ff:5b:ad:5f:1a:
                    b2:47:e6:b7:ea:f4:3a:a6:ed:ab:81:72:f0:c1:7f:
                    e1:7c:a0:68:85:85:72:14:3c:38:cf:0f:2b:d6:08:
                    c8:53:b4:c6:24:a8:e6:31:67:50:48:8e:8a:6a:65:
                    de:33:4f:9e:6b:91:bb:6b:c7:73:1b:6e:40:84:ac:
                    8b:27:03:d3:16:32:65:c5:97:13:68:02:6c:4b:54:
                    c2:26:7f:d4:61:1c:e3:59:ad:cd:6f:a1:7f:a4:f9:
                    75:00:12:78:d5:fb:b2:18:2c:16:70:e5:5a:bf:58:
                    38:3f:56:35:17:9a:11:94:21:b6:14:80:7a:c6:7b:
                    d7:15:5e:66:27:70:a9:1e:93:15:eb:00:50:22:3e:
                    02:32:e6:4c:bc:17:57:46:56:11:ee:e9:ff:22:53:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:75:28:B1:E7:FC:A1:C1:50:D0:59:8E:4D:07:61:8C:6B:A7:D9:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6bc9518c-92df-3fa7-8157-1b414d300f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:30:2e:2f:ed:ca:aa:bf:8a:3a:29:96:c2:6f:03:a8:1c:ff:
         c5:6c:5d:bc:71:52:21:41:9b:11:d3:b0:08:ac:1c:bf:18:77:
         af:d5:c6:89:16:ba:91:1f:7b:a4:e9:93:f2:f3:9a:14:0a:91:
         3f:db:28:f7:ca:25:95:67:8c:19:05:90:bb:36:22:41:fd:45:
         20:61:1d:e9:ea:37:c8:09:c3:9b:7f:83:38:7e:0e:7c:ee:92:
         6d:8d:29:26:94:af:f8:08:59:4c:e8:39:a9:2a:20:fd:bb:da:
         2e:da:45:e5:95:f2:17:3c:2f:a7:18:39:b8:d6:56:08:31:08:
         4f:67:bc:ee:a7:c5:58:5a:1e:06:89:91:38:18:16:2d:f9:8b:
         44:57:c7:c1:08:f4:8f:0b:67:83:12:78:17:23:a2:a4:a6:3c:
         aa:b6:31:ac:44:46:54:73:cf:2a:2a:67:76:a3:62:e7:5a:d7:
         67:5f:61:f0:ad:38:03:2c:12:3b:fd:81:60:d9:aa:1f:c2:e3:
         07:27:ce:73:52:ed:78:4f:29:d2:f2:94:99:6e:4d:d1:26:0b:
         b6:29:ba:96:0f:fa:43:ac:26:b7:aa:17:54:10:74:9a:08:17:
         9a:41:45:4f:15:06:8a:77:17:5f:a5:86:60:96:dc:0b:f0:de:
         74:12:36:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9M9nCEbLB7BRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl
ODkzMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzFmNzBjZmEtMTNiYS00ZDE1LWI0MDItMzlkOTdiN2UxZmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOXLhScPIYqhSEnui59XfVrOH2Rx21WolDXQ
hnn6aP2ov1NyZajEili+rLTrRujgwDRZQYhHxF4iPwNRrXifoX3J4dpzHt+YTn5O
6lAZR+P2frCdDOs7DuArV42pI+aJT3mk/1utXxqyR+a36vQ6pu2rgXLwwX/hfKBo
hYVyFDw4zw8r1gjIU7TGJKjmMWdQSI6KamXeM0+ea5G7a8dzG25AhKyLJwPTFjJl
xZcTaAJsS1TCJn/UYRzjWa3Nb6F/pPl1ABJ41fuyGCwWcOVav1g4P1Y1F5oRlCG2
FIB6xnvXFV5mJ3CpHpMV6wBQIj4CMuZMvBdXRlYR7un/IlNheQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOh1KLHn/KHBUNBZjk0HYYxrp9mKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2
MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNmJjOTUxOGMtOTJkZi0z
ZmE3LTgxNTctMWI0MTRkMzAwZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm
ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj
ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz
MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAndMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEwLi/tyqq/ijoplsJvA6gc/8VsXbxxUiFBmxHTsAisHL8Yd6/VxokW
upEfe6Tpk/LzmhQKkT/bKPfKJZVnjBkFkLs2IkH9RSBhHenqN8gJw5t/gzh+Dnzu
km2NKSaUr/gIWUzoOakqIP272i7aReWV8hc8L6cYObjWVggxCE9nvO6nxVhaHgaJ
kTgYFi35i0RXx8EI9I8LZ4MSeBcjoqSmPKq2MaxERlRzzyoqZ3ajYuda12dfYfCt
OAMsEjv9gWDZqh/C4wcnznNS7XhPKdLylJluTdEmC7YpupYP+kOsJreqF1QQdJoI
F5pBRU8VBop3F1+lhmCW3Avw3nQSNuc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:35 2025 by rpki-client