Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
File:                     7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa (raw, json)
Hash identifier:          R4W4WSYJYizM7QsKM9y0ZstYjhhZ/006dYsIaYAjP84=
Subject key identifier:   88:4E:AE:C8:5B:F0:1A:F5:10:39:A2:34:DB:7B:3B:50:9E:B3:98:29
Certificate issuer:       /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Certificate serial:       010D0C9F4328584B0CDC1168787CD8F0C2F23180
Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        23.131.60.0/24 maxlen: 24
                          2602:f763::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:11:68:78:7c:d8:f0:c2:f2:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=91c22933-3c4c-433a-902d-1fb1035a71de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:29:fa:cb:41:fa:9c:e2:a7:c0:85:23:6f:7a:
                    63:c0:a5:34:00:c2:dc:19:2a:83:48:fb:47:e0:9a:
                    6e:8c:5e:47:9c:58:c5:b4:ef:38:b4:86:94:9e:e6:
                    e7:ac:27:6d:eb:aa:9d:ad:e9:74:35:cf:1d:6d:5f:
                    72:14:1f:c0:d0:42:93:88:1d:43:e1:22:9f:59:73:
                    1b:3e:f4:e5:0b:72:08:03:39:68:f2:7b:51:d1:95:
                    b7:39:02:81:eb:2e:e0:02:f7:ca:8c:a6:c5:9a:12:
                    3e:da:9d:b1:79:f8:22:d2:57:da:dd:73:4b:61:7e:
                    cc:11:ef:a0:f9:67:e6:91:16:57:40:fe:5c:58:05:
                    80:96:29:fc:c6:ce:f3:97:ee:b5:8f:92:6c:a7:c1:
                    95:4c:79:f0:f3:0f:7a:74:a0:69:ee:8f:c6:4b:c9:
                    68:0c:2a:b8:42:e0:3a:58:07:62:16:8d:ad:3d:3a:
                    22:5a:2c:d4:e2:ed:21:77:51:54:a4:af:64:9d:f3:
                    98:af:22:65:21:d8:99:eb:12:a2:42:34:e8:7a:1b:
                    66:db:4e:12:54:e0:9b:ca:f1:07:ba:38:ef:18:fc:
                    30:2a:89:e7:3f:4e:1f:76:71:d2:f9:34:1f:22:4e:
                    bc:7f:0a:aa:39:eb:b0:59:c3:9b:b4:35:5e:74:2d:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4E:AE:C8:5B:F0:1A:F5:10:39:A2:34:DB:7B:3B:50:9E:B3:98:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl

            X509v3 Authority Key Identifier:
                keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.60.0/24
                IPv6:
                  2602:f763::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:95:f3:bb:7c:e1:4f:02:fb:be:c2:0b:76:ab:f2:92:ec:2e:
         34:52:55:bd:75:c2:cc:2d:48:cc:93:06:41:aa:c2:dc:88:4b:
         68:7d:f1:41:e4:b8:a2:7f:8a:ac:be:59:96:9e:76:9e:ff:4f:
         62:8a:15:14:7c:a4:3e:87:d7:ab:50:99:d9:35:e7:ba:08:42:
         9a:72:bb:db:51:9b:4e:cc:10:c2:2e:cc:6c:b9:2a:a1:06:4c:
         01:4d:41:2e:33:97:f6:d6:72:d1:ad:ad:41:81:8a:bf:90:6d:
         73:a3:b1:2c:36:8a:ae:e6:e8:96:6c:99:ba:88:e6:ab:52:bf:
         b0:f6:fb:3b:06:0c:74:84:84:2f:dd:c9:d4:2a:2e:c6:d6:76:
         6b:9c:4b:ec:96:59:92:a6:5c:2d:db:e0:4f:e5:a4:06:44:fb:
         27:8b:16:6a:57:65:72:61:6b:02:45:26:61:14:61:f1:46:1b:
         f7:be:e6:91:1f:bf:a5:89:6a:7a:1f:8e:62:77:ba:cd:db:3d:
         d8:40:eb:b2:f9:46:3b:42:f4:4c:bd:1b:82:c1:7c:1d:4e:50:
         08:a8:ef:17:e6:ac:9f:0a:a6:e2:42:07:ff:a6:68:31:18:b7:
         27:24:e9:5c:9b:7d:c6:9b:9f:86:df:e8:54:24:f1:8c:43:0c:
         db:5a:dd:7d
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsM3BFoeHzY8MLyMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMwN2Q4ZWItNmMwZi00MGNmLWI5MDktZDYxYTNmMDI3
OWM5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
OTFjMjI5MzMtM2M0Yy00MzNhLTkwMmQtMWZiMTAzNWE3MWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkin6y0H6nOKnwIUjb3pjwKU0AMLcGSqDSPtH
4JpujF5HnFjFtO84tIaUnubnrCdt66qdrel0Nc8dbV9yFB/A0EKTiB1D4SKfWXMb
PvTlC3IIAzlo8ntR0ZW3OQKB6y7gAvfKjKbFmhI+2p2xefgi0lfa3XNLYX7MEe+g
+WfmkRZXQP5cWAWAlin8xs7zl+61j5Jsp8GVTHnw8w96dKBp7o/GS8loDCq4QuA6
WAdiFo2tPToiWizU4u0hd1FUpK9knfOYryJlIdiZ6xKiQjToehtm204SVOCbyvEH
ujjvGPwwKonnP04fdnHS+TQfIk68fwqqOeuwWcObtDVedC1X+wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFIhOrshb8Br1EDmiNNt7O1Ces5gpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MzA3
ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFhM2YwMjc5YzkvN2UzZDQzNGItNDM3MC0z
YTM5LThiMjYtYzNkNDMzZDJiZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDMwN2Q4ZWItNmMwZi00MGNmLWI5
MDktZDYxYTNmMDI3OWM5LzQzMDdkOGViLTZjMGYtNDBjZi1iOTA5LWQ2MWEzZjAy
NzljOS5jcmwwHwYDVR0jBBgwFoAUETbioO75VmVLacPjT6MwEvXADzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80MzA3ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFh
M2YwMjc5YzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4M8MA8E
AgACMAkDBwAmAvdjAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcZXzu3zhTwL7vsILdqvykuwuNFJVvXXC
zC1IzJMGQarC3IhLaH3xQeS4on+KrL5Zlp52nv9PYooVFHykPofXq1CZ2TXnughC
mnK721GbTswQwi7MbLkqoQZMAU1BLjOX9tZy0a2tQYGKv5Btc6OxLDaKrubolmyZ
uojmq1K/sPb7OwYMdISEL93J1CouxtZ2a5xL7JZZkqZcLdvgT+WkBkT7J4sWaldl
cmFrAkUmYRRh8UYb977mkR+/pYlqeh+OYne6zds92EDrsvlGO0L0TL0bgsF8HU5Q
CKjvF+asnwqm4kIH/6ZoMRi3JyTpXJt9xpufht/oVCTxjEMM21rdfQ==
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:23 2025 by rpki-client