Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa
File:                     09a572b8-7960-3b89-a1a8-7f9e35951515.roa (raw, json)
Hash identifier:          lFYcTP7C+e69TGY9t0qICD0BUOokngFJ+J6KelZUBds=
Subject key identifier:   F2:B2:17:BF:D8:6D:FC:A2:4B:E0:CB:CD:F4:DE:2B:07:4A:33:31:C9
Certificate issuer:       /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Certificate serial:       010D0C9F43285848E9CBDFCBDA8756862058DF40
Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     11831
IP address blocks:        23.111.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:df:cb:da:87:56:86:20:58:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=eef6a2a2-5679-43d5-9396-7ecd1926bc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:f2:5a:f8:d2:84:26:f7:58:97:a2:4c:8a:
                    15:d5:a7:8c:93:2f:95:f4:58:52:71:2a:e2:f7:ee:
                    d5:fb:ee:86:76:d5:78:d7:94:ba:43:bb:53:bc:0f:
                    1d:4f:b1:d1:25:77:a0:d2:06:06:aa:51:c4:c6:39:
                    6a:c0:92:c2:28:37:71:72:8e:b0:6d:38:e7:70:c1:
                    90:69:a2:d2:21:d0:23:5f:4e:7b:06:07:b2:38:34:
                    6c:49:20:bc:dd:8b:00:e3:72:d3:84:35:ac:19:d9:
                    24:13:83:e6:88:12:95:88:15:9f:64:21:b3:94:9d:
                    81:16:b4:33:8c:ee:10:e9:8f:d4:66:3d:eb:92:a6:
                    b8:aa:7c:f0:42:dc:20:7d:35:ab:c5:2c:22:7d:6d:
                    b5:f7:5a:2c:a4:29:77:3e:8b:03:0c:5b:47:77:a6:
                    68:e4:08:95:15:66:e0:25:46:6e:2b:1c:67:70:9c:
                    aa:a7:6b:07:48:f5:76:24:0a:7a:ee:b9:b6:3e:69:
                    54:83:34:cb:45:1b:ba:52:11:e4:9f:22:5e:5a:2e:
                    e0:75:ab:e7:66:60:4d:07:c6:1c:04:c0:85:e5:11:
                    63:51:0d:a0:ac:37:31:02:4c:c4:12:a1:7f:5e:06:
                    38:35:cd:cc:f7:c6:16:17:53:1e:ea:4f:4f:64:df:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B2:17:BF:D8:6D:FC:A2:4B:E0:CB:CD:F4:DE:2B:07:4A:33:31:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl

            X509v3 Authority Key Identifier:
                keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.111.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f9:40:3d:95:fb:0d:c5:8e:94:41:22:69:d0:63:91:74:30:
         f6:4a:82:82:87:37:1c:bb:e8:3d:1a:02:86:de:c8:63:e8:f1:
         80:48:fa:97:40:c1:bc:a9:15:fe:14:18:6d:4c:d2:2e:1f:52:
         60:57:97:83:d4:eb:19:40:d2:28:74:88:2b:7c:3d:d4:b5:27:
         5e:9d:d4:ba:48:9c:ab:00:85:e3:7b:d8:1b:c2:d8:c6:57:c3:
         58:59:f8:e8:a2:c4:4f:0a:9c:56:65:5b:f1:11:bc:7e:12:90:
         a6:8f:22:ce:1a:53:9b:5e:a4:15:0d:9f:15:f0:b4:29:20:1e:
         19:f9:e1:10:74:f3:1f:a2:96:06:55:8b:50:15:bf:60:ca:a8:
         e6:c2:95:15:3f:d5:22:fc:f4:4e:2e:f3:1f:73:5a:95:c3:58:
         e1:fa:f6:00:0f:5b:9b:5f:ac:87:94:b3:cf:c8:34:6f:3b:98:
         a2:51:41:94:5e:67:57:dc:39:d7:7c:f7:75:98:cc:96:41:7a:
         c5:ac:c9:d7:13:01:3e:d8:de:89:5d:11:d0:4b:28:57:e0:67:
         ac:0d:78:c8:06:cb:dd:3f:dd:73:e3:3f:4c:74:f3:80:ab:99:
         f6:f0:f3:e4:09:39:40:1e:03:b5:8e:61:3e:17:6a:8d:ad:ab:
         5d:af:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:28:33 2025 by rpki-client