Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa
File:                     4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa (raw, json)
Hash identifier:          6vDHYnN7XEPUvrhQ7SvZYBi0O+mKIjFxFYFn7F6+BBk=
Subject key identifier:   9D:BC:E3:B4:E6:5C:80:E4:3E:31:3F:39:34:40:63:AA:D3:AB:21:21
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584902EC28D220954090D1B12980
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     11269
IP address blocks:        69.17.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:28:d2:20:95:40:90:d1:b1:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=650bb28d-e0f0-4bca-aca8-ab00d1b76c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:65:cd:f4:2b:19:df:f0:5e:11:f4:27:c8:
                    6c:62:c8:33:7e:e7:66:ba:5a:73:72:89:e8:38:04:
                    b2:b1:0f:53:34:b4:6f:e5:f1:b3:d4:4c:9e:1f:10:
                    04:4d:38:19:64:f3:96:13:f6:16:27:b8:e9:83:79:
                    0f:a3:4f:f4:f3:2c:cb:6e:a3:4e:04:c7:94:d5:0c:
                    cd:da:f0:53:99:ed:9a:8a:d6:17:03:1a:0d:1c:db:
                    20:88:e1:79:c3:e6:b7:cc:b7:6a:6b:b0:a1:55:41:
                    a9:9f:81:00:13:6e:4d:6f:00:d9:c9:d5:87:2e:bd:
                    22:69:08:ba:a6:91:e3:4a:8d:5e:7e:12:3c:77:4a:
                    2c:c1:e1:46:13:b0:11:72:d7:6b:63:c9:ed:5c:22:
                    ff:1b:7e:0a:39:82:3e:1a:c8:b0:04:95:a9:b6:9e:
                    82:d2:b1:b4:e3:68:34:7a:48:3f:f5:a2:e5:d3:07:
                    85:83:d3:30:d4:87:2b:ae:02:76:4d:85:bd:73:82:
                    30:e7:fe:46:cf:54:ac:39:f3:0f:0b:be:7b:3e:b2:
                    35:08:c1:dd:0c:c2:4b:57:00:86:b6:02:60:0a:cc:
                    10:7e:67:35:c3:57:21:19:cc:66:59:aa:86:22:a5:
                    b1:91:ff:0a:12:8b:f2:99:a0:f7:80:06:5f:76:31:
                    a9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BC:E3:B4:E6:5C:80:E4:3E:31:3F:39:34:40:63:AA:D3:AB:21:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:67:57:29:96:78:c2:b1:09:e7:76:28:53:5a:c2:7c:26:
         67:b3:b7:eb:63:eb:a1:00:d8:c2:1d:e9:ff:2e:03:cb:35:90:
         42:89:5d:f8:9b:5e:a2:07:7e:c5:cd:64:e7:74:ad:54:3b:86:
         3c:69:10:9e:3f:c4:8e:02:cc:5c:5b:25:3a:39:f7:88:4c:b3:
         97:de:90:67:25:0b:7f:12:1a:75:3d:c8:00:8c:97:57:f6:5b:
         00:9f:45:15:5d:71:c6:99:b0:16:6e:a2:52:85:11:54:fd:3a:
         a7:5a:f4:b9:ec:ca:be:e7:2a:35:c0:ae:7d:ea:f9:e3:ae:36:
         e4:ad:a1:e0:0c:f3:ba:f4:99:2c:44:a6:bc:43:93:3b:90:8a:
         12:07:db:0d:cd:b3:21:25:bb:7b:2d:c3:0d:94:07:cd:b3:69:
         6c:a8:a5:52:fa:9b:3e:c7:f2:3a:db:08:04:72:87:62:29:aa:
         4f:41:65:8f:cd:8d:77:57:bf:e9:60:2d:ba:bb:1f:ce:bd:08:
         8a:e5:72:76:28:cc:d4:4f:5d:df:d7:76:91:d8:0e:b2:8e:b2:
         02:73:f5:16:8a:73:c2:85:a0:74:0d:16:1e:1f:23:26:bd:d1:
         d1:75:1b:a9:a0:4c:11:8e:35:0f:01:8f:57:9b:b2:48:08:12:
         eb:bc:59:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CjSIJVAkNGxKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg2MjRjYmItYmExOS00N2E2LWI1YWMtZDA3NDcxNDk3
MTRjMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NjUwYmIyOGQtZTBmMC00YmNhLWFjYTgtYWIwMGQxYjc2YzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3hlzfQrGd/wXhH0J8hsYsgzfudmulpzcono
OASysQ9TNLRv5fGz1EyeHxAETTgZZPOWE/YWJ7jpg3kPo0/08yzLbqNOBMeU1QzN
2vBTme2aitYXAxoNHNsgiOF5w+a3zLdqa7ChVUGpn4EAE25NbwDZydWHLr0iaQi6
ppHjSo1efhI8d0osweFGE7ARctdrY8ntXCL/G34KOYI+GsiwBJWptp6C0rG042g0
ekg/9aLl0weFg9Mw1IcrrgJ2TYW9c4Iw5/5Gz1SsOfMPC757PrI1CMHdDMJLVwCG
tgJgCswQfmc1w1chGcxmWaqGIqWxkf8KEovymaD3gAZfdjGpwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2847TmXIDkPjE/OTRAY6rTqyEhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYy
NGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0NzE0OTcxNGMvNGIxMDE3ODktODBmMi0z
OTJhLTlmNzYtM2ExYmY0ZjRkYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2MjRjYmItYmExOS00N2E2LWI1
YWMtZDA3NDcxNDk3MTRjL2I4NjI0Y2JiLWJhMTktNDdhNi1iNWFjLWQwNzQ3MTQ5
NzE0Yy5jcmwwHwYDVR0jBBgwFoAUcWpaIe5mK5wQZ/DiOAd4yxKMjKcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYyNGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0
NzE0OTcxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRHeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKqZ1cplnjCsQnndihTWsJ8Jmezt+tj66EA2MId6f8uA8s1kEKJXfib
XqIHfsXNZOd0rVQ7hjxpEJ4/xI4CzFxbJTo594hMs5fekGclC38SGnU9yACMl1f2
WwCfRRVdccaZsBZuolKFEVT9Oqda9Lnsyr7nKjXArn3q+eOuNuStoeAM87r0mSxE
prxDkzuQihIH2w3NsyElu3stww2UB82zaWyopVL6mz7H8jrbCARyh2Ipqk9BZY/N
jXdXv+lgLbq7H869CIrlcnYozNRPXd/XdpHYDrKOsgJz9RaKc8KFoHQNFh4fIya9
0dF1G6mgTBGONQ8Bj1ebskgIEuu8WSI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:00:11 2025 by rpki-client