Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa
File:                     ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa (raw, json)
Hash identifier:          YfT/0MmxtRpZDMUACB7O/pq0zRNPIvhONzqEYz+bUjQ=
Subject key identifier:   E6:57:99:9C:B8:66:88:4F:11:C7:55:C7:B9:3A:11:93:B8:CA:12:8E
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858492CAE97FDC5AA47579DA8F4B0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     30238
IP address blocks:        23.90.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:97:fd:c5:aa:47:57:9d:a8:f4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=4d69dc1a-f04b-4bed-aace-ddfaf3792356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2a:19:ce:aa:44:f3:eb:99:99:f9:b3:56:a8:
                    76:6e:12:1f:24:1b:1f:33:0e:ce:1e:a1:66:70:26:
                    7f:44:9a:07:ab:04:f7:03:73:34:45:8b:24:42:00:
                    82:55:64:45:6b:75:ce:91:69:cc:80:97:4d:42:8c:
                    2c:a0:65:2f:36:33:58:f4:8f:02:e7:7a:4a:a0:88:
                    9c:39:0c:71:69:31:03:c7:31:91:e5:13:65:67:ed:
                    d7:14:b8:79:18:d4:b8:4b:db:e9:2b:3a:3f:ac:14:
                    36:41:59:4d:51:ba:f2:ee:83:a0:3e:d0:2c:3e:39:
                    6e:ca:c2:37:8d:36:ff:c3:b4:04:99:9b:f2:86:25:
                    87:9e:d8:f3:55:e9:2b:e3:43:ff:0b:66:4b:22:ff:
                    b5:85:2a:a5:e8:27:02:11:19:3c:9d:b9:2e:a2:08:
                    d3:ed:b6:12:54:2a:bc:48:c1:b8:7f:ff:19:92:df:
                    f1:e2:28:40:f5:b5:ab:cb:15:31:a1:74:18:f8:75:
                    a8:15:74:16:14:3d:13:d7:d3:51:a9:0e:03:ea:c6:
                    8d:da:fb:d4:1a:ad:a7:c9:05:6a:43:dc:90:7d:a4:
                    f3:36:b8:e5:94:98:1c:b9:30:78:69:a8:7e:63:ab:
                    ae:ad:f3:cc:dd:84:6f:c6:ba:e6:7c:ac:82:b1:87:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:99:9C:B8:66:88:4F:11:C7:55:C7:B9:3A:11:93:B8:CA:12:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:a6:5e:af:15:ac:a1:8c:1e:b4:92:ea:c5:1d:77:9e:95:
         c5:06:cf:a0:a9:71:b5:8b:a6:93:04:09:05:e7:95:3c:9d:a2:
         1c:e2:90:3f:d2:04:af:e5:2e:dc:d0:17:56:87:4e:8d:fb:ef:
         1c:cf:aa:13:8c:e2:7d:5c:f0:01:85:c7:a6:cd:18:6e:89:d8:
         0c:e9:48:95:a7:be:1c:29:83:22:9f:1f:83:a4:48:c3:92:3f:
         a2:46:3e:0f:de:c1:0d:bf:44:5f:e4:05:c7:fc:5b:36:70:7c:
         e2:3c:2d:23:ac:3e:9f:39:83:b0:da:e5:74:64:19:b0:fd:d8:
         75:44:c8:53:7b:9d:a5:ec:a4:80:86:e2:a6:c0:7f:5e:2a:b2:
         ec:96:78:2b:d7:2d:bf:56:a7:df:09:d6:ec:95:1a:b3:37:9d:
         30:15:18:15:12:cb:3b:af:fb:ab:6a:d8:f0:3d:18:0b:4e:73:
         56:4b:12:08:ec:26:6d:3b:ec:df:df:77:36:21:a0:47:f2:b5:
         e8:e7:61:75:61:6b:e5:d7:ef:5a:7b:50:1a:2a:50:2d:65:fc:
         83:e4:7e:26:f0:1c:5f:c6:ce:63:28:8a:c4:a3:a1:2a:2f:74:
         43:1c:75:1f:a0:9b:79:26:ec:1b:d9:51:f9:99:b9:28:07:de:
         c3:ec:94:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpf9xapHV52o9LAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NGQ2OWRjMWEtZjA0Yi00YmVkLWFhY2UtZGRmYWYzNzkyMzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjioZzqpE8+uZmfmzVqh2bhIfJBsfMw7OHqFm
cCZ/RJoHqwT3A3M0RYskQgCCVWRFa3XOkWnMgJdNQowsoGUvNjNY9I8C53pKoIic
OQxxaTEDxzGR5RNlZ+3XFLh5GNS4S9vpKzo/rBQ2QVlNUbry7oOgPtAsPjluysI3
jTb/w7QEmZvyhiWHntjzVekr40P/C2ZLIv+1hSql6CcCERk8nbkuogjT7bYSVCq8
SMG4f/8Zkt/x4ihA9bWryxUxoXQY+HWoFXQWFD0T19NRqQ4D6saN2vvUGq2nyQVq
Q9yQfaTzNrjllJgcuTB4aah+Y6uurfPM3YRvxrrmfKyCsYeCEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZXmZy4ZohPEcdVx7k6EZO4yhKOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGRhYTNjYTItMTJjOS0z
N2QxLTljNTQtM2Q5Y2E2Njg4NzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3ipl6vFayhjB60kurFHXeelcUGz6CpcbWLppMECQXnlTydohzikD/S
BK/lLtzQF1aHTo377xzPqhOM4n1c8AGFx6bNGG6J2AzpSJWnvhwpgyKfH4OkSMOS
P6JGPg/ewQ2/RF/kBcf8WzZwfOI8LSOsPp85g7Da5XRkGbD92HVEyFN7naXspICG
4qbAf14qsuyWeCvXLb9Wp98J1uyVGrM3nTAVGBUSyzuv+6tq2PA9GAtOc1ZLEgjs
Jm077N/fdzYhoEfytejnYXVha+XX71p7UBoqUC1l/IPkfibwHF/GzmMoisSjoSov
dEMcdR+gm3km7BvZUfmZuSgH3sPslDw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:15 2025 by rpki-client