Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa
File:                     c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa (raw, json)
Hash identifier:          klP9xAkYLO0huyld9/CH5KHBLGHtzjcl3IgXWTf0hUg=
Subject key identifier:   8B:D0:23:07:F2:2E:0F:ED:C1:E5:A6:AB:1D:3B:B9:51:CE:1C:E9:23
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285848696062438E40ED9094B09900
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        64.69.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:62:43:8e:40:ed:90:94:b0:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=304febe9-057b-433b-9538-6858b0b57c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:26:30:5c:38:7f:03:d0:0f:d6:77:09:8b:6a:
                    7b:5a:df:c1:0e:ec:6c:df:87:1f:e1:b7:f7:53:48:
                    bd:ce:2a:4b:39:b8:70:e3:06:4f:db:71:39:5e:35:
                    3b:12:9b:2d:f6:cf:19:a2:f9:29:d7:a6:84:f6:01:
                    5c:e4:36:e3:8b:90:18:1e:b3:12:cf:8b:43:8a:0a:
                    30:cd:45:15:f8:4b:26:fe:0c:7a:bc:5a:4b:2f:d5:
                    43:5c:4a:96:59:7e:b2:6e:25:8c:97:b4:9c:88:3b:
                    aa:c3:7a:27:9b:e9:6f:bd:96:7d:0c:66:7a:fc:0e:
                    a4:5d:a2:49:6a:21:80:59:11:e5:ac:5b:95:40:cb:
                    b4:49:17:23:82:0e:ea:93:55:30:25:42:e0:ca:25:
                    4b:c9:2f:39:9c:00:a0:8f:b9:4e:7c:df:aa:fd:52:
                    e5:33:13:57:df:16:63:17:4f:6f:e3:1b:16:a4:90:
                    35:0b:f5:03:5e:ec:26:be:64:6e:e1:51:0a:91:18:
                    c8:33:ac:3d:f0:94:4a:85:13:ba:a2:fc:11:a7:48:
                    5d:a4:b8:8a:3e:c9:64:9c:10:c1:49:39:69:00:31:
                    3b:6a:a5:14:03:74:ac:ad:ec:2c:ba:9f:30:72:7f:
                    de:65:49:73:6b:e3:de:24:d6:89:01:63:7b:23:4e:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D0:23:07:F2:2E:0F:ED:C1:E5:A6:AB:1D:3B:B9:51:CE:1C:E9:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:14:58:eb:a3:c4:ec:39:ee:eb:bb:7e:74:45:67:3a:ed:e6:
         7c:e3:7e:4c:a1:5c:92:10:c4:1e:66:72:15:47:cc:1c:c9:a2:
         92:69:ec:46:12:01:3a:c9:31:6b:b2:d3:74:de:b5:2f:f1:12:
         14:0a:80:07:47:2d:43:10:37:eb:1b:2b:67:82:6c:5d:43:23:
         de:34:33:e6:d3:2e:c0:54:78:6f:02:54:8b:d2:56:a8:3f:c1:
         05:20:d0:9b:38:ff:c0:af:04:64:6c:a1:ed:47:f4:aa:b7:6c:
         09:38:5a:af:4b:1c:01:d4:7a:d8:24:eb:99:31:1a:87:92:a6:
         a1:06:17:39:0d:c2:93:93:7c:4d:d0:58:ac:ee:93:54:87:16:
         c7:18:ee:e9:86:a3:ec:43:ef:6b:b7:05:c1:ec:68:9a:36:ba:
         af:19:20:b0:eb:4a:6b:61:07:96:8f:cc:70:b1:73:e6:3e:34:
         93:13:c5:8f:f3:a3:09:ba:b1:2f:b7:db:62:e3:3a:73:a7:fc:
         19:5a:dd:c8:29:12:d1:ed:58:15:14:fd:0c:8f:d1:c0:cf:e0:
         ab:fa:34:3b:29:3e:3a:ce:1f:f5:15:93:c5:18:ae:c4:42:54:
         7d:be:8c:d5:52:0f:0b:e0:9d:dc:e7:62:d6:91:df:b1:e9:27:
         ef:1b:da:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYGJDjkDtkJSwmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
MzA0ZmViZTktMDU3Yi00MzNiLTk1MzgtNjg1OGIwYjU3YzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+CYwXDh/A9AP1ncJi2p7Wt/BDuxs34cf4bf3
U0i9zipLObhw4wZP23E5XjU7Epst9s8Zovkp16aE9gFc5Dbji5AYHrMSz4tDigow
zUUV+Esm/gx6vFpLL9VDXEqWWX6ybiWMl7SciDuqw3onm+lvvZZ9DGZ6/A6kXaJJ
aiGAWRHlrFuVQMu0SRcjgg7qk1UwJULgyiVLyS85nACgj7lOfN+q/VLlMxNX3xZj
F09v4xsWpJA1C/UDXuwmvmRu4VEKkRjIM6w98JRKhRO6ovwRp0hdpLiKPslknBDB
STlpADE7aqUUA3Ssrewsup8wcn/eZUlza+PeJNaJAWN7I04YOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIvQIwfyLg/tweWmqx07uVHOHOkjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYzhkNzg1ZDAtOTQ1My0z
NzFkLWFjNzQtNWU0YmJkYmM5NmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEXfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcUWOujxOw57uu7fnRFZzrt5nzjfkyhXJIQxB5mchVHzBzJopJp7EYS
ATrJMWuy03TetS/xEhQKgAdHLUMQN+sbK2eCbF1DI940M+bTLsBUeG8CVIvSVqg/
wQUg0Js4/8CvBGRsoe1H9Kq3bAk4Wq9LHAHUetgk65kxGoeSpqEGFzkNwpOTfE3Q
WKzuk1SHFscY7umGo+xD72u3BcHsaJo2uq8ZILDrSmthB5aPzHCxc+Y+NJMTxY/z
owm6sS+322LjOnOn/Bla3cgpEtHtWBUU/QyP0cDP4Kv6NDspPjrOH/UVk8UYrsRC
VH2+jNVSDwvgndznYtaR37HpJ+8b2jI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:00 2025 by rpki-client