Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fb87109-d1db-3b85-8eb5-46312467eb2c.roa
File:                     9fb87109-d1db-3b85-8eb5-46312467eb2c.roa (raw, json)
Hash identifier:          Qoedra7T0IgbChljDNxupjD/OyV8B354/bvbiTTqtqY=
Subject key identifier:   0B:4D:DA:64:AB:4F:4B:C7:36:49:51:C7:84:CB:66:1B:08:AD:17:5D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7780957C4DC7C148B3E83000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fb87109-d1db-3b85-8eb5-46312467eb2c.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.205.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:95:7c:4d:c7:c1:48:b3:e8:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=cf5d732b-089a-4687-87d1-5916a2cdbd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:dc:07:45:1d:3f:a4:cb:94:eb:30:a6:41:
                    54:9c:0b:ed:12:20:70:e6:da:80:92:ea:21:53:34:
                    14:2a:70:77:f8:71:7e:c2:0c:a1:17:3f:a4:31:c1:
                    75:5f:f4:b1:2d:44:e3:5c:44:24:74:31:ff:16:89:
                    94:93:2b:e3:4d:d8:10:16:05:f4:ee:3f:55:e1:b1:
                    cc:cf:3b:59:91:d8:03:14:41:0f:9b:9c:34:e4:88:
                    7d:66:74:30:2a:eb:81:cd:e1:35:f6:88:bb:a9:88:
                    c2:da:9b:a1:da:f4:09:2c:6f:08:62:c7:ad:d5:cb:
                    18:d9:33:66:5b:4e:57:28:6d:48:7d:82:ee:5d:e7:
                    d0:46:3b:1d:0e:f2:84:25:66:3c:74:b4:b3:24:5d:
                    a6:6e:3b:20:35:44:69:e1:d3:c1:0a:99:54:0d:28:
                    6b:f3:29:fc:49:67:55:38:0a:25:64:9c:51:6c:ff:
                    aa:05:45:eb:61:e9:73:60:61:55:ba:cf:cd:e8:7b:
                    54:7b:27:a1:a9:6c:95:4c:0e:de:c7:31:ee:5c:2e:
                    4f:94:95:b9:47:e3:cf:16:b3:0d:74:ac:35:6f:b1:
                    83:c2:7f:cb:06:92:e7:41:05:fa:a1:e1:7d:37:1e:
                    ae:8b:a0:00:30:72:e4:52:41:c6:6e:7b:1d:e8:84:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4D:DA:64:AB:4F:4B:C7:36:49:51:C7:84:CB:66:1B:08:AD:17:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fb87109-d1db-3b85-8eb5-46312467eb2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:0c:d4:44:b3:92:f6:c2:51:c0:cb:c1:33:13:dd:ce:86:
         19:d7:41:30:55:eb:3d:20:40:66:9e:85:38:e3:9d:8c:f3:6f:
         7b:6e:41:43:58:9a:d1:0b:31:1e:8c:17:b8:ac:4d:9e:52:44:
         dd:9e:3b:c5:69:c6:15:6a:95:20:f3:84:e7:91:6b:d9:e3:ef:
         32:34:34:7d:74:4c:80:21:0f:ff:b8:7c:2b:b3:ef:86:1c:0f:
         8e:1f:68:98:c9:b0:56:e4:ac:8f:7e:e1:20:82:69:13:20:99:
         7e:7d:b5:cb:56:2b:35:1d:d5:c7:fe:dd:6c:37:43:be:71:f2:
         17:3c:08:c0:6d:96:40:74:10:fe:1c:f6:8f:c2:dc:2d:fe:c5:
         56:f7:3d:e9:01:7f:6a:8f:4c:ac:74:f2:df:8a:fc:f4:c8:51:
         51:45:3d:9a:23:ea:7c:40:4c:20:aa:4d:f6:a9:35:5a:e1:ef:
         e3:ab:ef:2b:f0:97:c4:6b:66:d7:2a:6e:e0:a7:5e:30:7b:f5:
         c0:82:67:50:d6:e2:67:ed:70:d9:1b:74:d5:92:62:95:6d:f7:
         5b:d3:65:a8:ed:e4:2a:1d:2c:fc:87:c3:2d:44:9b:74:3d:1f:
         84:91:6f:a8:0f:a6:15:4b:79:77:7e:ee:35:f1:37:0e:b3:58:
         82:2d:3b:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJV8TcfBSLPoMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk
Y2Y1ZDczMmItMDg5YS00Njg3LTg3ZDEtNTkxNmEyY2RiZDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih7cB0UdP6TLlOswpkFUnAvtEiBw5tqAkuoh
UzQUKnB3+HF+wgyhFz+kMcF1X/SxLUTjXEQkdDH/FomUkyvjTdgQFgX07j9V4bHM
zztZkdgDFEEPm5w05Ih9ZnQwKuuBzeE19oi7qYjC2puh2vQJLG8IYset1csY2TNm
W05XKG1IfYLuXefQRjsdDvKEJWY8dLSzJF2mbjsgNURp4dPBCplUDShr8yn8SWdV
OAolZJxRbP+qBUXrYelzYGFVus/N6HtUeyehqWyVTA7exzHuXC5PlJW5R+PPFrMN
dKw1b7GDwn/LBpLnQQX6oeF9Nx6ui6AAMHLkUkHGbnsd6ITkAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtN2mSrT0vHNklRx4TLZhsIrRddMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZiODcxMDktZDFkYi0z
Yjg1LThlYjUtNDYzMTI0NjdlYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF813MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcODNREs5L2wlHAy8EzE93OhhnXQTBV6z0gQGaehTjjnYzzb3tuQUNY
mtELMR6MF7isTZ5SRN2eO8VpxhVqlSDzhOeRa9nj7zI0NH10TIAhD/+4fCuz74Yc
D44faJjJsFbkrI9+4SCCaRMgmX59tctWKzUd1cf+3Ww3Q75x8hc8CMBtlkB0EP4c
9o/C3C3+xVb3PekBf2qPTKx08t+K/PTIUVFFPZoj6nxATCCqTfapNVrh7+Or7yvw
l8RrZtcqbuCnXjB79cCCZ1DW4mftcNkbdNWSYpVt91vTZajt5CodLPyHwy1Em3Q9
H4SRb6gPphVLeXd+7jXxNw6zWIItO4s=
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:41:55 2025 by rpki-client