Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa
File:                     8ec81666-b29e-37f5-93fa-ec08312dd538.roa (raw, json)
Hash identifier:          /L96CwxJkunkT8Icm0iGrWPrLRPDUuO2dV0pJYOMEZE=
Subject key identifier:   FD:5C:1E:C9:9C:CC:3C:02:21:50:A1:EB:F7:2D:AC:07:CF:9B:12:22
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584917DC2558EC1AE6F00143F700
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     21866
IP address blocks:        23.239.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:25:58:ec:1a:e6:f0:01:43:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=612b655b-5a9b-4002-8db3-ed779660d143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:5d:e4:a4:49:30:b9:9d:33:b9:43:9a:88:
                    fc:f2:d1:1d:26:f1:ef:7c:40:3d:76:05:9a:e9:6b:
                    11:f5:ed:3c:9c:2c:d5:93:e1:ea:47:cf:0b:87:62:
                    6c:95:55:9b:51:a1:d1:36:15:70:cc:a8:af:74:2d:
                    fd:1d:13:0b:0f:33:45:06:bc:a9:66:40:7c:e4:a7:
                    84:e1:54:08:44:96:35:88:a5:f0:7c:4e:86:e4:81:
                    8b:5c:4a:b8:c6:d7:44:e1:74:5d:8d:9d:6a:7d:50:
                    d2:03:34:d3:76:a5:19:c0:9a:c3:87:ac:01:b2:32:
                    a9:2d:73:ab:e5:8d:60:02:4b:a3:5b:aa:d6:5d:06:
                    d9:26:19:76:c6:1c:a8:c1:f8:60:23:98:44:61:ac:
                    23:82:be:12:3d:b9:c2:69:69:ca:82:c5:5a:ec:50:
                    02:51:f2:f2:be:8e:1c:80:e2:51:c3:84:69:59:7c:
                    45:a4:bd:9a:5b:59:eb:66:64:96:0f:0f:72:a9:15:
                    5f:ae:e3:91:f9:09:ac:5f:74:91:40:db:f1:44:b7:
                    ef:82:40:ad:2d:62:f7:02:84:a1:c4:2f:38:48:56:
                    af:37:4a:00:37:e1:8b:d4:4e:7f:d8:80:69:07:44:
                    ea:1d:8e:a4:4e:27:e9:16:76:97:09:bf:0b:59:42:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5C:1E:C9:9C:CC:3C:02:21:50:A1:EB:F7:2D:AC:07:CF:9B:12:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:02:35:2e:44:db:24:a4:33:b0:a6:70:48:9a:ea:07:11:
         d6:32:26:2d:b4:60:d5:66:ae:96:99:15:d9:e5:60:b5:c1:55:
         cd:18:e6:a5:90:d0:3c:89:49:a7:ed:f5:b3:6d:72:8c:ee:8f:
         ea:aa:75:ad:e1:2e:69:6e:0b:3e:85:5e:0c:6e:f2:78:8d:e4:
         97:38:e8:2f:94:4a:9f:cd:38:b4:cd:e9:3f:cc:8b:1b:28:63:
         2b:e4:db:3b:d6:7f:b9:d5:ba:3c:79:34:f6:e3:ce:b4:ab:3f:
         e1:be:de:05:3a:54:a6:92:4e:44:00:56:c6:c3:bd:9c:47:da:
         2e:09:61:a0:65:de:e7:ce:ec:05:58:19:1b:5a:c1:e5:6d:f1:
         dc:95:eb:f6:30:da:f1:5d:95:15:a1:ca:fe:1a:3c:5e:ad:f6:
         b5:78:a6:55:f9:76:77:92:32:3a:ba:fc:9b:a1:2d:6c:ee:97:
         a8:9e:14:42:be:82:ef:75:7e:60:eb:3c:0b:d3:c2:a5:5d:86:
         c5:a8:ac:2d:1f:92:07:60:b5:f2:ef:d7:f8:fa:1f:10:75:b2:
         2d:c2:24:08:cb:99:6f:49:07:6c:38:e7:8b:76:e1:68:c0:2b:
         33:4f:b3:ea:b7:31:57:d4:76:ea:61:9b:4f:bc:9c:34:53:8f:
         45:59:cd:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CVY7Brm8AFD9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NjEyYjY1NWItNWE5Yi00MDAyLThkYjMtZWQ3Nzk2NjBkMTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHFd5KRJMLmdM7lDmoj88tEdJvHvfEA9dgWa
6WsR9e08nCzVk+HqR88Lh2JslVWbUaHRNhVwzKivdC39HRMLDzNFBrypZkB85KeE
4VQIRJY1iKXwfE6G5IGLXEq4xtdE4XRdjZ1qfVDSAzTTdqUZwJrDh6wBsjKpLXOr
5Y1gAkujW6rWXQbZJhl2xhyowfhgI5hEYawjgr4SPbnCaWnKgsVa7FACUfLyvo4c
gOJRw4RpWXxFpL2aW1nrZmSWDw9yqRVfruOR+QmsX3SRQNvxRLfvgkCtLWL3AoSh
xC84SFavN0oAN+GL1E5/2IBpB0TqHY6kTifpFnaXCb8LWULLdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1cHsmczDwCIVCh6/ctrAfPmxIiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOGVjODE2NjYtYjI5ZS0z
N2Y1LTkzZmEtZWMwODMxMmRkNTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+/gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6sAjUuRNskpDOwpnBImuoHEdYyJi20YNVmrpaZFdnlYLXBVc0Y5qWQ
0DyJSaft9bNtcozuj+qqda3hLmluCz6FXgxu8niN5Jc46C+USp/NOLTN6T/Mixso
Yyvk2zvWf7nVujx5NPbjzrSrP+G+3gU6VKaSTkQAVsbDvZxH2i4JYaBl3ufO7AVY
GRtaweVt8dyV6/Yw2vFdlRWhyv4aPF6t9rV4plX5dneSMjq6/JuhLWzul6ieFEK+
gu91fmDrPAvTwqVdhsWorC0fkgdgtfLv1/j6HxB1si3CJAjLmW9JB2w454t24WjA
KzNPs+q3MVfUduphm0+8nDRTj0VZzZ0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:18 2025 by rpki-client