Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa
File:                     99f3809d-ec71-387f-b47f-d40d61add1c9.roa (raw, json)
Hash identifier:          XeY5j9kkIebaDI485jsnJzamSU6wDb82o+AWncCepXM=
Subject key identifier:   6A:BE:6F:C4:1D:37:33:57:80:56:F6:8F:49:2E:6F:F8:6E:D1:87:97
Certificate issuer:       /CN=25d202df-6bec-4085-8c1b-d1f141557cfe
Certificate serial:       010D0C9F43285847C1DF56298510851CA71FAD80
Authority key identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     211051
IP address blocks:        23.144.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:56:29:85:10:85:1c:a7:1f:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d202df-6bec-4085-8c1b-d1f141557cfe
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=31f513f6-b3f9-4f99-8096-cb832d1001bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:36:fd:51:6d:98:3f:f7:5f:2b:88:7c:da:
                    82:a1:7e:b5:e6:55:fc:0c:e2:01:2b:b1:52:83:bc:
                    d3:cb:06:ce:81:ca:db:a7:95:47:bf:71:b1:6b:93:
                    0d:0a:86:75:62:1b:10:ab:7b:d8:5f:69:92:a0:57:
                    76:30:41:8e:e6:e3:1e:41:6e:62:9e:9c:fd:cb:2f:
                    cc:0c:e8:2a:48:79:0b:0c:9a:6d:5b:e5:94:8b:e5:
                    29:d3:7d:3c:30:b2:4f:42:a5:56:87:93:a6:59:38:
                    44:f7:81:00:2a:2a:bc:85:18:83:e0:f9:84:94:23:
                    54:89:94:9c:18:ef:9d:f7:db:ee:57:80:a6:ce:4b:
                    ec:63:4a:c6:32:2c:53:85:26:48:a6:28:6e:5a:9d:
                    68:b6:fa:87:27:9e:ff:e1:9b:11:36:01:2e:20:9f:
                    c7:58:f3:7a:c8:f8:56:f0:84:38:31:11:f4:65:d7:
                    d4:89:c6:2d:f6:dd:19:67:9b:a1:00:c4:50:76:1a:
                    c0:18:2d:d8:eb:eb:d0:be:63:7b:96:a2:54:07:68:
                    8c:c5:ac:41:63:b6:2d:b0:5b:91:f3:b3:07:50:b9:
                    dd:8e:6b:7a:6f:c4:82:42:09:d6:51:02:32:61:ed:
                    6c:e9:fc:09:b2:56:47:8a:5c:a4:c7:7f:32:3d:29:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BE:6F:C4:1D:37:33:57:80:56:F6:8F:49:2E:6F:F8:6E:D1:87:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl

            X509v3 Authority Key Identifier:
                keyid:62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b7:9d:db:13:2f:02:8d:b4:94:59:39:ea:b3:42:86:ec:de:
         a0:a5:3e:68:3f:1d:4f:64:81:81:3e:60:09:26:e0:88:bb:b4:
         fa:90:ed:67:04:9e:68:0a:a0:68:df:32:ca:61:93:82:4a:33:
         3d:22:5e:a0:56:58:da:7d:51:6b:86:a8:91:2c:82:ec:67:b5:
         c1:79:22:39:30:44:42:9d:9d:97:07:d6:1d:4d:cc:9e:6c:73:
         55:ab:b6:bd:a1:23:8c:3b:84:4b:8e:bc:b8:04:3d:12:b6:07:
         2d:71:88:88:a5:63:cf:57:e9:54:c4:fe:4d:ff:d9:a1:69:05:
         06:e3:c9:29:51:95:b7:b0:5d:d2:45:0f:c0:6d:93:9e:10:ef:
         c1:23:3c:55:86:7f:d9:16:d8:60:05:c9:70:e3:be:32:ef:ac:
         f9:15:63:ee:25:3d:8a:dc:f7:b3:c1:00:71:dd:4a:71:20:72:
         cd:7d:b9:4c:df:17:ac:fd:40:e7:0f:ee:48:76:b6:3c:2c:19:
         2b:4b:26:cc:cc:6d:b4:18:4b:6c:4a:52:03:36:00:7f:39:83:
         07:6b:6b:4e:1e:2d:be:cf:1f:77:0c:98:19:e1:30:ca:df:1e:
         88:33:44:25:8f:84:09:da:af:7b:8c:f4:f6:a9:66:13:d3:06:
         b4:dc:2e:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB31YphRCFHKcfrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjVkMjAyZGYtNmJlYy00MDg1LThjMWItZDFmMTQxNTU3
Y2ZlMB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk
MzFmNTEzZjYtYjNmOS00Zjk5LTgwOTYtY2I4MzJkMTAwMWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvg2/VFtmD/3XyuIfNqCoX615lX8DOIBK7FS
g7zTywbOgcrbp5VHv3Gxa5MNCoZ1YhsQq3vYX2mSoFd2MEGO5uMeQW5inpz9yy/M
DOgqSHkLDJptW+WUi+Up0308MLJPQqVWh5OmWThE94EAKiq8hRiD4PmElCNUiZSc
GO+d99vuV4CmzkvsY0rGMixThSZIpihuWp1otvqHJ57/4ZsRNgEuIJ/HWPN6yPhW
8IQ4MRH0ZdfUicYt9t0ZZ5uhAMRQdhrAGC3Y6+vQvmN7lqJUB2iMxaxBY7YtsFuR
87MHULndjmt6b8SCQgnWUQIyYe1s6fwJslZHilykx38yPSl7LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGq+b8QdNzNXgFb2j0kub/hu0YeXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNWQy
MDJkZi02YmVjLTQwODUtOGMxYi1kMWYxNDE1NTdjZmUvOTlmMzgwOWQtZWM3MS0z
ODdmLWI0N2YtZDQwZDYxYWRkMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjVkMjAyZGYtNmJlYy00MDg1LThj
MWItZDFmMTQxNTU3Y2ZlLzI1ZDIwMmRmLTZiZWMtNDA4NS04YzFiLWQxZjE0MTU1
N2NmZS5jcmwwHwYDVR0jBBgwFoAUYik2b2+4Uftu+aehcRHrWEcEEckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yNWQyMDJkZi02YmVjLTQwODUtOGMxYi1kMWYx
NDE1NTdjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5DoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJy3ndsTLwKNtJRZOeqzQobs3qClPmg/HU9kgYE+YAkm4Ii7tPqQ7WcE
nmgKoGjfMsphk4JKMz0iXqBWWNp9UWuGqJEsguxntcF5IjkwREKdnZcH1h1NzJ5s
c1Wrtr2hI4w7hEuOvLgEPRK2By1xiIilY89X6VTE/k3/2aFpBQbjySlRlbewXdJF
D8Btk54Q78EjPFWGf9kW2GAFyXDjvjLvrPkVY+4lPYrc97PBAHHdSnEgcs19uUzf
F6z9QOcP7kh2tjwsGStLJszMbbQYS2xKUgM2AH85gwdra04eLb7PH3cMmBnhMMrf
HogzRCWPhAnar3uM9PapZhPTBrTcLqw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:12:32 2024 by rpki-client on console-ams.rpki-client.org