Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30755e12-0990-3e9e-8feb-5edd8366c603.roa
File:                     30755e12-0990-3e9e-8feb-5edd8366c603.roa (raw, json)
Hash identifier:          rZ8fxyKM6aFgs2mWkJ1/U4dSKSX5DedJ/Js09zfZiz0=
Subject key identifier:   2A:6D:34:F4:3B:CD:B2:61:DE:67:E8:0C:39:53:8A:FD:AE:37:EE:F4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488F108503050DCD374B93C140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30755e12-0990-3e9e-8feb-5edd8366c603.roa
Signing time:             Thu 16 Jan 2025 02:00:39 +0000
ROA not before:           Thu 16 Jan 2025 02:00:39 +0000
ROA not after:            Wed 16 Apr 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.62.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8f:10:85:03:05:0d:cd:37:4b:93:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 16 02:00:39 2025 GMT
            Not After : Apr 16 01:00:39 2025 GMT
        Subject: CN=b778abb6-fce0-415b-af29-b63afe2a195b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:57:24:9f:36:b7:b6:8f:ce:86:ae:f8:d6:72:
                    80:fd:e3:bf:c2:2d:30:cd:d8:23:02:1d:63:95:09:
                    d3:86:3a:f9:08:73:f8:cb:a1:f1:e7:46:15:2b:c8:
                    da:9c:ee:2e:02:1f:43:d6:09:25:d9:f3:f4:a1:3e:
                    b1:0f:fe:13:a4:1a:a3:7f:28:99:a8:1e:4e:bd:b5:
                    e6:52:77:a1:4d:d8:e1:4e:f9:8e:b7:cc:71:c9:a7:
                    23:43:28:a8:90:f0:84:20:c3:3f:6c:ef:37:76:a5:
                    0f:bb:30:b4:a1:22:59:7f:f4:05:4d:bc:db:74:d3:
                    78:89:89:cd:0d:d3:06:aa:4a:f3:61:45:50:12:3a:
                    3a:f1:ad:85:b9:62:af:37:29:71:0d:22:6f:80:37:
                    6a:9c:c8:8d:83:b7:d8:dd:fc:f1:82:1f:75:d8:01:
                    3c:6b:c9:c0:ec:14:fb:19:69:a8:98:54:7d:6e:03:
                    de:46:9e:93:ea:55:40:a0:fb:a1:1e:4c:6f:3c:d4:
                    be:b9:5a:ff:98:1d:69:7f:cd:69:d3:28:6f:59:9e:
                    91:ff:49:6b:60:cd:a0:44:55:b7:65:7a:f6:ec:70:
                    a9:29:34:90:74:dc:a4:df:02:0a:3c:89:a3:cb:6a:
                    a8:70:b2:a3:0f:54:b0:ab:b3:45:15:03:53:c0:cd:
                    53:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6D:34:F4:3B:CD:B2:61:DE:67:E8:0C:39:53:8A:FD:AE:37:EE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30755e12-0990-3e9e-8feb-5edd8366c603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:63:fb:5a:a7:d9:ee:45:35:da:97:4c:d6:9f:1f:94:e3:b5:
         e1:57:1f:a5:b2:1b:70:a9:d1:04:0a:6c:da:20:f8:71:cd:74:
         22:a6:76:54:f6:49:72:90:cb:ac:ca:8a:67:01:6c:44:5e:03:
         ac:23:f1:5e:97:76:bd:9d:eb:40:7a:fb:65:62:5c:6d:66:bc:
         73:d8:cd:c9:12:e4:71:49:a3:64:b1:19:fc:27:74:c3:cf:2e:
         41:04:fe:02:0e:f0:7c:c7:4c:43:ab:f9:7a:82:d1:78:bd:a1:
         d7:95:6d:14:74:4d:22:34:dc:50:fd:49:59:94:30:14:b4:96:
         17:6b:f3:f3:c2:ed:71:3e:29:c6:4b:3a:ce:a1:91:a1:ff:70:
         cc:34:69:2e:21:be:8a:80:72:23:d7:06:29:b8:30:b3:8f:63:
         8f:69:92:65:53:4b:06:ad:14:8d:d2:6d:6d:0d:0a:23:9e:a8:
         9b:ea:62:60:93:ea:20:d4:c2:26:03:88:54:79:95:cf:02:3a:
         03:f9:ac:20:12:54:21:89:43:d2:60:01:65:78:34:3a:e4:e7:
         06:69:fb:d4:5f:21:38:72:cb:a5:f0:71:4b:8a:9b:3d:68:c3:
         d5:68:55:83:49:b9:ee:1d:92:8a:ad:bc:99:db:0a:25:43:54:
         7b:1d:76:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEIUDBQ3NN0uTwUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk
Yjc3OGFiYjYtZmNlMC00MTViLWFmMjktYjYzYWZlMmExOTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lcknza3to/Ohq741nKA/eO/wi0wzdgjAh1j
lQnThjr5CHP4y6Hx50YVK8janO4uAh9D1gkl2fP0oT6xD/4TpBqjfyiZqB5OvbXm
UnehTdjhTvmOt8xxyacjQyiokPCEIMM/bO83dqUPuzC0oSJZf/QFTbzbdNN4iYnN
DdMGqkrzYUVQEjo68a2FuWKvNylxDSJvgDdqnMiNg7fY3fzxgh912AE8a8nA7BT7
GWmomFR9bgPeRp6T6lVAoPuhHkxvPNS+uVr/mB1pf81p0yhvWZ6R/0lrYM2gRFW3
ZXr27HCpKTSQdNyk3wIKPImjy2qocLKjD1Swq7NFFQNTwM1TaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCptNPQ7zbJh3mfoDDlTiv2uN+70MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzA3NTVlMTItMDk5MC0z
ZTllLThmZWItNWVkZDgzNjZjNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFz4GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlj+1qn2e5FNdqXTNafH5TjteFXH6WyG3Cp0QQKbNog+HHNdCKmdlT2
SXKQy6zKimcBbEReA6wj8V6Xdr2d60B6+2ViXG1mvHPYzckS5HFJo2SxGfwndMPP
LkEE/gIO8HzHTEOr+XqC0Xi9odeVbRR0TSI03FD9SVmUMBS0lhdr8/PC7XE+KcZL
Os6hkaH/cMw0aS4hvoqAciPXBim4MLOPY49pkmVTSwatFI3SbW0NCiOeqJvqYmCT
6iDUwiYDiFR5lc8COgP5rCASVCGJQ9JgAWV4NDrk5wZp+9RfIThyy6XwcUuKmz1o
w9VoVYNJue4dkoqtvJnbCiVDVHsddlI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:39 2025 by rpki-client