Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa
File:                     3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa (raw, json)
Hash identifier:          EODmpeQyt+OIDnvKA5fQ+orMf0lAjrz1/zouzAOx5x8=
Subject key identifier:   2D:49:75:27:6B:00:2B:D5:3A:1E:5C:F2:4F:BD:E9:5A:87:D9:2F:1E
Certificate issuer:       /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
Certificate serial:       010D0C9F432858495C243F775ECD635F49C21A00
Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     53610
IP address blocks:        23.159.24.0/24 maxlen: 24
                          2602:fa53::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3f:77:5e:cd:63:5f:49:c2:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=6bd3d974-2d81-4deb-88b1-39882ac6327f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:92:d3:ee:d6:e4:20:6d:38:04:ca:64:48:
                    fe:2b:a4:4f:61:72:5b:aa:b9:ef:d3:bc:16:b2:d6:
                    e8:d6:50:44:c1:76:ec:b1:36:ad:7d:65:a5:2b:b6:
                    f0:96:94:cc:c9:52:91:04:ef:0d:62:e1:ad:af:b5:
                    8b:11:40:fd:e9:20:e2:da:6d:82:83:d4:91:81:79:
                    d0:40:d0:14:f4:9f:b5:36:3b:82:5e:3f:7a:26:ab:
                    7f:c6:7d:c5:d2:78:31:db:a1:a0:33:00:c3:da:77:
                    9d:a6:8c:f3:c1:62:20:03:3e:ee:26:2c:76:b3:58:
                    38:04:f8:0a:09:e1:3d:e1:01:d0:3f:b0:8d:3b:37:
                    c1:71:a5:26:5a:09:4f:65:63:63:98:e6:ed:aa:2a:
                    99:b8:b2:8e:0d:ac:0e:a7:bb:8b:36:55:dd:80:12:
                    a3:b5:91:4e:18:c7:fe:9d:1c:9d:9b:f8:a6:db:b9:
                    54:10:47:ec:f0:f7:80:9a:4a:62:3f:6a:46:8e:5e:
                    1e:cb:97:98:97:86:e9:d6:9b:51:71:a9:27:58:76:
                    bc:69:c2:64:5d:5b:cb:05:59:78:82:12:0e:81:bd:
                    a2:f5:b6:0f:3c:e2:8d:11:28:2a:45:55:96:7f:12:
                    0d:8d:a4:12:c7:d3:fa:5b:6b:3a:33:56:da:e0:ca:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:49:75:27:6B:00:2B:D5:3A:1E:5C:F2:4F:BD:E9:5A:87:D9:2F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl

            X509v3 Authority Key Identifier:
                keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.24.0/24
                IPv6:
                  2602:fa53::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c6:44:94:74:6a:2a:98:bd:de:8a:75:c8:7e:f2:72:b5:1a:
         c1:72:cc:31:a5:3e:34:33:3c:1a:c6:79:6d:6d:ff:e2:9e:3f:
         36:e8:ad:c9:9a:47:11:94:c7:d9:85:bc:67:23:bb:87:56:f9:
         e5:1c:9b:c7:33:34:70:6d:91:9c:1a:53:6e:aa:87:76:f8:67:
         13:3d:a0:2b:ee:70:ac:bc:37:69:1f:bf:6c:be:76:a6:dc:b1:
         2d:3d:b4:ab:f2:e1:3d:b4:ee:70:31:d8:9e:de:42:9f:55:9e:
         31:90:c2:ec:5b:ea:00:13:17:dc:11:9a:7b:74:2a:44:f6:eb:
         c2:6c:28:b7:78:0e:8b:02:11:74:ee:d6:15:a2:61:1e:f3:ca:
         d6:57:22:9c:7b:2f:79:77:49:23:94:3c:c8:61:e7:49:2f:a4:
         5d:05:00:45:38:29:db:23:25:bd:d3:49:02:3e:e7:da:ca:d9:
         72:8c:e4:49:19:31:9b:08:bf:37:70:86:29:87:c6:a8:ed:84:
         5c:39:1a:d4:a9:da:47:0e:c0:42:d4:f7:76:a0:18:bc:d8:60:
         c8:30:a5:60:88:c6:87:d3:20:3c:37:34:71:05:50:05:49:54:
         5b:1b:01:01:67:0e:8f:4f:36:5a:17:62:c1:78:21:0c:f8:2d:
         b3:cc:85:57
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElcJD93Xs1jX0nCGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY1OWUwNTAtM2UyOS00MjkzLWJkZjQtY2ZiNWZlMTU0
Yzk4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
NmJkM2Q5NzQtMmQ4MS00ZGViLTg4YjEtMzk4ODJhYzYzMjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l6S0+7W5CBtOATKZEj+K6RPYXJbqrnv07wW
stbo1lBEwXbssTatfWWlK7bwlpTMyVKRBO8NYuGtr7WLEUD96SDi2m2Cg9SRgXnQ
QNAU9J+1NjuCXj96Jqt/xn3F0ngx26GgMwDD2nedpozzwWIgAz7uJix2s1g4BPgK
CeE94QHQP7CNOzfBcaUmWglPZWNjmObtqiqZuLKODawOp7uLNlXdgBKjtZFOGMf+
nRydm/im27lUEEfs8PeAmkpiP2pGjl4ey5eYl4bp1ptRcaknWHa8acJkXVvLBVl4
ghIOgb2i9bYPPOKNESgqRVWWfxINjaQSx9P6W2s6M1ba4Mq+BwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFC1JdSdrACvVOh5c8k+96VqH2S8eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5
ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1ZmUxNTRjOTgvM2E5ZGIxYTAtNjcyMS0z
ZDhkLTg1ZDQtNjQ3N2M5YmU2ZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWY1OWUwNTAtM2UyOS00MjkzLWJk
ZjQtY2ZiNWZlMTU0Yzk4L2VmNTllMDUwLTNlMjktNDI5My1iZGY0LWNmYjVmZTE1
NGM5OC5jcmwwHwYDVR0jBBgwFoAU8Ma+OtC0tMwv/U99IeNuMpHeqvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1
ZmUxNTRjOTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF58YMA4E
AgACMAgDBgAmAvpTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcxkSUdGoqmL3einXIfvJytRrBcswxpT40
Mzwaxnltbf/inj826K3JmkcRlMfZhbxnI7uHVvnlHJvHMzRwbZGcGlNuqod2+GcT
PaAr7nCsvDdpH79svnam3LEtPbSr8uE9tO5wMdie3kKfVZ4xkMLsW+oAExfcEZp7
dCpE9uvCbCi3eA6LAhF07tYVomEe88rWVyKcey95d0kjlDzIYedJL6RdBQBFOCnb
IyW900kCPufaytlyjORJGTGbCL83cIYph8ao7YRcORrUqdpHDsBC1Pd2oBi82GDI
MKVgiMaH0yA8NzRxBVAFSVRbGwEBZw6PTzZaF2LBeCEM+C2zzIVX
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:47 2025 by rpki-client