Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa
File:                     bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa (raw, json)
Hash identifier:          zHTbVzNU8sugy6yoVYXuhtLOK33ionKA8LZhDz9W/Mw=
Subject key identifier:   A6:8C:0C:BA:5A:87:BF:D3:CC:7C:50:9E:7E:77:6A:64:D8:1A:79:BA
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584B170168A901E5CBCD6874EE80
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     399624
IP address blocks:        23.129.68.0/24 maxlen: 24
                          2602:f7a7::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:17:01:68:a9:01:e5:cb:cd:68:74:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=eb4c7905-0dd6-49cd-9932-52cb4786a758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:83:b2:d5:e0:b9:a1:43:3c:e9:af:5e:16:
                    bd:67:45:ab:55:39:e3:30:7d:f1:f4:ee:5e:99:a4:
                    2b:a9:08:91:88:94:a3:e5:3a:6c:65:e1:54:82:f3:
                    8c:26:7b:6c:ed:9a:1d:09:a2:78:13:a6:64:6f:96:
                    fb:5f:77:3f:10:61:b4:e1:ac:12:05:50:46:d1:29:
                    af:9a:9a:25:17:59:e4:d4:8e:35:f9:fc:e2:97:1a:
                    2e:5b:6d:d8:4c:e6:28:2a:a5:fa:fe:e7:4f:2c:e8:
                    e9:c7:31:36:18:f1:64:12:c0:48:96:80:0a:c7:41:
                    3b:24:af:ee:94:b8:93:1a:a5:b8:b5:ea:6a:c4:eb:
                    d1:fd:e9:db:d1:6c:f2:fa:24:b4:9e:6d:e2:dc:80:
                    58:90:22:a9:18:71:d9:f6:be:bc:e2:51:c2:78:5d:
                    38:23:a3:c3:da:99:0d:5d:e5:d9:e1:a1:e0:27:be:
                    bd:44:5d:b3:31:83:e7:64:9c:c2:2e:c6:85:77:23:
                    7e:68:80:e3:13:d1:a6:a0:f0:1c:ba:be:fe:8e:36:
                    a0:93:88:c7:89:d3:2f:36:6f:29:ce:a1:f4:db:f3:
                    96:28:b4:4a:93:ac:ae:96:9b:f1:c8:c6:02:86:35:
                    31:73:c0:0b:a4:4c:48:bb:9b:d8:dc:65:e5:ad:fa:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8C:0C:BA:5A:87:BF:D3:CC:7C:50:9E:7E:77:6A:64:D8:1A:79:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.68.0/24
                IPv6:
                  2602:f7a7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:04:0c:0a:cf:38:43:3e:07:f8:b8:2b:13:95:33:3d:c5:49:
         80:f7:80:78:cd:eb:ea:c1:27:b1:04:58:ee:53:c5:1c:8c:05:
         1b:a0:a8:7d:8d:c1:17:ad:fa:91:a9:db:72:fc:65:73:c7:a7:
         e7:ea:cf:37:4e:3a:a4:e9:75:cf:87:9d:2d:ba:4e:5b:0a:b9:
         d4:37:b1:90:eb:76:65:8b:b7:42:16:86:55:d9:66:f2:dd:fc:
         1e:e2:3d:eb:e2:5f:d5:94:f2:ac:82:c2:f7:2f:e7:e1:b6:76:
         ce:bf:e3:3d:9f:19:75:b4:67:07:6b:51:10:4b:b9:69:d7:21:
         3e:f0:a3:f6:99:71:40:f1:f8:93:0f:a6:5a:51:cd:3e:26:aa:
         61:73:00:5b:de:a9:8b:34:3a:5b:46:d6:29:93:6a:51:54:86:
         bf:1e:e4:d6:64:5c:4b:f8:bc:14:45:af:64:2f:25:54:fa:6a:
         03:f3:ce:a4:3b:24:33:52:bc:f8:e6:19:95:e9:5d:84:8a:1e:
         ac:af:75:c2:bb:7e:f0:1e:c8:e9:43:74:af:55:fb:15:87:3d:
         8f:60:e4:3d:3d:c0:28:25:cf:ab:06:7e:68:98:c8:86:92:25:
         21:b9:f2:6d:68:2c:66:d9:07:42:f4:32:e3:73:6b:e1:58:d4:
         ed:21:21:64
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsXAWipAeXLzWh07oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0
NmNjMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
ZWI0Yzc5MDUtMGRkNi00OWNkLTk5MzItNTJjYjQ3ODZhNzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyCDstXguaFDPOmvXha9Z0WrVTnjMH3x9O5e
maQrqQiRiJSj5TpsZeFUgvOMJnts7ZodCaJ4E6Zkb5b7X3c/EGG04awSBVBG0Smv
mpolF1nk1I41+fzilxouW23YTOYoKqX6/udPLOjpxzE2GPFkEsBIloAKx0E7JK/u
lLiTGqW4tepqxOvR/enb0Wzy+iS0nm3i3IBYkCKpGHHZ9r684lHCeF04I6PD2pkN
XeXZ4aHgJ769RF2zMYPnZJzCLsaFdyN+aIDjE9GmoPAcur7+jjagk4jHidMvNm8p
zqH02/OWKLRKk6yulpvxyMYChjUxc8ALpExIu5vY3GXlrfq/zQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKaMDLpah7/TzHxQnn53amTYGnm6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIy
YzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvYmQ5ZmE1MTAtNGNiMS0z
NmFjLWI2ZWYtZDQ3NDhjMDk0ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWUyMmM1OWUtMjkwNC00ZWE2LWIw
NDQtMGE5ZmFjMzk0NmNjLzVlMjJjNTllLTI5MDQtNGVhNi1iMDQ0LTBhOWZhYzM5
NDZjYy5jcmwwHwYDVR0jBBgwFoAUVAq19A7rP/3q8yJu5kT27+vMkGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlm
YWMzOTQ2Y2MuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4FEMA4E
AgACMAgDBgAmAvenADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEBAwKzzhDPgf4uCsTlTM9xUmA94B4zevq
wSexBFjuU8UcjAUboKh9jcEXrfqRqdty/GVzx6fn6s83Tjqk6XXPh50tuk5bCrnU
N7GQ63Zli7dCFoZV2Wby3fwe4j3r4l/VlPKsgsL3L+fhtnbOv+M9nxl1tGcHa1EQ
S7lp1yE+8KP2mXFA8fiTD6ZaUc0+JqphcwBb3qmLNDpbRtYpk2pRVIa/HuTWZFxL
+LwURa9kLyVU+moD886kOyQzUrz45hmV6V2Eih6sr3XCu37wHsjpQ3SvVfsVhz2P
YOQ9PcAoJc+rBn5omMiGkiUhufJtaCxm2QdC9DLjc2vhWNTtISFk
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:53:18 2025 by rpki-client