Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec17949a-0c63-3933-874d-799351ad72ea.roa
File:                     ec17949a-0c63-3933-874d-799351ad72ea.roa (raw, json)
Hash identifier:          pVqIUUFZ0oLOd10m4l+CNfAPs1QgyQKtg7hRgs1ur/o=
Subject key identifier:   98:B7:6C:40:C7:F2:62:57:33:F8:1C:91:39:84:90:85:F7:AE:61:46
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495D897477B7E8A721F82D4400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec17949a-0c63-3933-874d-799351ad72ea.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.46.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:74:77:b7:e8:a7:21:f8:2d:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=8d91a5a4-86aa-41a1-acdb-79af4c156436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a1:82:4d:86:c6:54:24:ab:a8:c7:00:1a:8c:
                    70:0b:ed:ca:a6:c9:4b:24:d5:81:f2:e5:1c:32:8a:
                    33:78:9f:bb:1f:ee:1c:c1:15:b5:3b:de:2c:b6:40:
                    a6:f9:08:30:e9:38:5b:e7:49:d7:10:15:fc:e9:65:
                    4c:09:2f:cf:b8:7d:9a:3f:f7:96:9c:37:9b:12:c8:
                    4a:14:20:f6:29:cb:9b:47:06:b5:1f:bc:7f:bf:d1:
                    68:27:1a:5a:44:c6:cf:49:6f:c7:1b:af:55:56:af:
                    18:ae:cc:36:20:7e:b8:7c:ab:6d:2b:b9:9c:6b:27:
                    54:de:8e:bf:39:77:74:16:d6:91:a1:41:69:75:61:
                    1b:3d:c8:e7:d2:77:90:30:01:86:2b:0e:47:54:4d:
                    b3:f5:65:4f:80:09:80:6e:3e:a1:37:8d:44:0f:c5:
                    eb:4a:ef:52:c3:4f:fc:6b:4b:c8:c5:5d:fb:05:10:
                    89:ca:d4:29:ac:35:4d:ee:37:81:32:90:64:a5:bf:
                    93:fe:83:08:d3:35:17:94:eb:a8:db:82:b4:73:91:
                    d6:73:69:c2:91:0f:9b:95:ab:cf:e3:ad:3a:c1:58:
                    53:22:0e:66:c7:04:05:91:2d:8e:d0:18:32:3a:13:
                    e1:2c:4c:80:0c:f4:4b:1f:ed:79:5f:3f:94:0a:7c:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B7:6C:40:C7:F2:62:57:33:F8:1C:91:39:84:90:85:F7:AE:61:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec17949a-0c63-3933-874d-799351ad72ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7e:a9:d5:31:cb:bd:c4:d7:17:1d:1b:c2:95:72:e3:5d:53:
         c3:e1:61:df:01:5e:b2:ad:08:32:13:1d:42:94:3e:27:b3:de:
         de:86:2a:7d:e2:09:5b:6b:2f:62:c3:e5:9c:64:6f:70:1a:19:
         8d:e2:eb:b1:98:b8:5e:0b:93:95:c4:8e:e1:93:cf:fb:a7:96:
         dc:30:d7:7a:24:b2:dc:4c:8f:b3:20:36:73:12:e8:52:31:49:
         ca:d7:9f:1d:f6:da:7e:ae:e5:41:7c:2e:a5:9d:92:5f:f7:0c:
         32:c3:6f:75:5a:aa:3a:e2:04:59:cb:ae:cd:1b:3d:02:ee:a7:
         ef:22:14:98:64:70:ce:71:14:98:2a:4c:95:c3:91:c7:95:6d:
         e6:74:f1:9a:55:61:30:27:8d:85:32:c6:ca:91:f0:ff:ea:ce:
         6c:bb:54:b7:47:bc:9a:7e:03:c6:14:0f:f9:21:fe:9e:1f:58:
         9b:1f:cd:54:08:fa:9a:d3:56:16:b1:a5:4e:b8:de:74:f4:50:
         e8:d6:5e:89:b0:65:8f:92:29:bb:ae:7d:d6:48:eb:b0:75:44:
         d0:9b:12:5d:27:1a:18:19:69:23:3f:a0:9a:70:d5:91:c1:b2:
         76:64:90:22:fc:bf:0c:bb:60:1c:4d:7b:67:c6:01:c2:28:e5:
         a4:b7:cb:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiXR3t+inIfgtRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk
OGQ5MWE1YTQtODZhYS00MWExLWFjZGItNzlhZjRjMTU2NDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKGCTYbGVCSrqMcAGoxwC+3KpslLJNWB8uUc
MoozeJ+7H+4cwRW1O94stkCm+Qgw6Thb50nXEBX86WVMCS/PuH2aP/eWnDebEshK
FCD2KcubRwa1H7x/v9FoJxpaRMbPSW/HG69VVq8Yrsw2IH64fKttK7mcaydU3o6/
OXd0FtaRoUFpdWEbPcjn0neQMAGGKw5HVE2z9WVPgAmAbj6hN41ED8XrSu9Sw0/8
a0vIxV37BRCJytQprDVN7jeBMpBkpb+T/oMI0zUXlOuo24K0c5HWc2nCkQ+blavP
4606wVhTIg5mxwQFkS2O0BgyOhPhLEyADPRLH+15Xz+UCnyl9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJi3bEDH8mJXM/gckTmEkIX3rmFGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWMxNzk0OWEtMGM2My0z
OTMzLTg3NGQtNzk5MzUxYWQ3MmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy4PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1+qdUxy73E1xcdG8KVcuNdU8PhYd8BXrKtCDITHUKUPiez3t6GKn3i
CVtrL2LD5Zxkb3AaGY3i67GYuF4Lk5XEjuGTz/unltww13okstxMj7MgNnMS6FIx
ScrXnx322n6u5UF8LqWdkl/3DDLDb3VaqjriBFnLrs0bPQLup+8iFJhkcM5xFJgq
TJXDkceVbeZ08ZpVYTAnjYUyxsqR8P/qzmy7VLdHvJp+A8YUD/kh/p4fWJsfzVQI
+prTVhaxpU643nT0UOjWXomwZY+SKbuufdZI67B1RNCbEl0nGhgZaSM/oJpw1ZHB
snZkkCL8vwy7YBxNe2fGAcIo5aS3yxA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:51 2025 by rpki-client