Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/6a800025-c8d6-37bc-a430-2ee212fe73ec.roa
File:                     6a800025-c8d6-37bc-a430-2ee212fe73ec.roa (raw, json)
Hash identifier:          88SMmqopDbCKG0dTkFTnyUzDkFOfsa1Xm2GIE12Q9ow=
Subject key identifier:   51:DA:0D:18:9A:0E:73:37:00:31:9C:4A:86:6C:44:7A:1B:E0:DA:3E
Certificate issuer:       /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial:       010D0C9F4328584B0E4167C9FFE33B316A4C0E80
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/6a800025-c8d6-37bc-a430-2ee212fe73ec.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     398032
IP address blocks:        23.141.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:67:c9:ff:e3:3b:31:6a:4c:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=12cdbbac-ed3c-455b-95ea-6a0236275fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:73:8a:05:ba:6e:3c:23:95:20:77:f7:1f:58:
                    df:94:22:59:d1:4f:f7:b0:b8:17:40:69:17:55:de:
                    9b:ab:1d:f9:b5:65:8f:09:31:29:47:41:05:0d:08:
                    bc:ff:8e:c8:0c:57:50:d4:62:3c:ce:aa:c5:57:37:
                    78:3a:72:ae:64:a4:30:22:4a:6d:c7:72:b6:e9:87:
                    5c:6c:d3:01:45:fc:a2:0a:00:f5:d0:34:53:f1:42:
                    85:d8:6c:31:b3:9d:96:71:23:ad:84:86:be:da:72:
                    88:7a:55:ef:f8:a4:c8:c3:5c:38:74:9c:b9:20:28:
                    bc:73:5e:a0:30:db:62:b4:24:07:cd:8d:22:8b:ce:
                    ab:23:75:87:73:5b:64:68:d2:e0:2a:ff:e3:1e:ab:
                    3f:00:54:b3:11:29:5d:42:0e:55:d6:b3:be:07:2f:
                    48:5c:ef:a5:73:1e:37:7a:d7:3e:36:42:ab:04:a7:
                    dd:b0:00:71:7d:ec:d2:ef:a0:08:c2:c4:74:00:95:
                    db:ae:d6:7a:a8:ef:cc:9d:54:de:de:93:50:dd:6d:
                    32:ca:2c:07:42:f8:ad:b1:f7:96:af:09:9f:b3:f0:
                    a8:dd:1d:8c:82:48:0b:2c:cf:12:d7:4c:c2:c1:ae:
                    d4:78:39:e4:3e:dc:df:ab:8f:c4:17:41:1d:10:f5:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:0D:18:9A:0E:73:37:00:31:9C:4A:86:6C:44:7A:1B:E0:DA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/6a800025-c8d6-37bc-a430-2ee212fe73ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl

            X509v3 Authority Key Identifier:
                keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e4:aa:6f:72:22:8c:30:ab:a3:38:bb:bb:e1:45:a9:c0:5b:
         85:01:7a:8a:2f:52:c6:f9:06:36:1b:9d:ae:ac:6b:dd:5d:54:
         09:a4:8f:d5:c4:4c:09:bc:67:42:e4:6e:aa:ea:9f:3e:81:25:
         09:c9:d1:a8:73:e8:0a:da:b8:bb:57:d2:3b:fe:c5:07:09:0c:
         e4:73:0d:df:a0:3d:d2:a2:3c:43:c9:30:98:22:e6:a8:6a:04:
         aa:6f:68:ba:0c:f0:be:76:39:53:00:99:84:ff:39:07:db:e3:
         9a:c9:f6:16:fd:33:88:c1:c0:87:e0:eb:69:16:4b:bc:8a:f7:
         35:2e:5d:2f:8f:71:e9:e0:d4:3a:b0:bb:56:bf:2b:46:45:7d:
         2f:5d:5e:f3:f3:94:f9:b3:74:1f:57:12:fd:2b:aa:7b:e1:4e:
         90:56:57:3e:50:ce:4f:d3:07:4b:cc:a7:48:ac:4c:ec:d9:c8:
         da:02:b8:b2:b4:f0:46:a4:a8:27:ab:4d:81:52:bc:a9:fe:5a:
         90:11:c0:8f:f2:2e:c5:b0:5d:62:d8:aa:b5:34:2c:49:8e:b2:
         64:88:a9:6e:b3:a1:65:c6:70:34:35:3b:ec:e9:56:43:5a:dc:
         ff:45:33:c9:30:6b:a8:d7:8b:5e:44:90:a6:94:e0:e7:73:be:
         a8:5e:d8:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWfJ/+M7MWpMDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE4YTQwYzgtMjE3NS00ZTU1LTkyNmUtNjUxNmNlMjFl
Yzc0MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MTJjZGJiYWMtZWQzYy00NTViLTk1ZWEtNmEwMjM2Mjc1ZmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHOKBbpuPCOVIHf3H1jflCJZ0U/3sLgXQGkX
Vd6bqx35tWWPCTEpR0EFDQi8/47IDFdQ1GI8zqrFVzd4OnKuZKQwIkptx3K26Ydc
bNMBRfyiCgD10DRT8UKF2Gwxs52WcSOthIa+2nKIelXv+KTIw1w4dJy5ICi8c16g
MNtitCQHzY0ii86rI3WHc1tkaNLgKv/jHqs/AFSzESldQg5V1rO+By9IXO+lcx43
etc+NkKrBKfdsABxfezS76AIwsR0AJXbrtZ6qO/MnVTe3pNQ3W0yyiwHQvitsfeW
rwmfs/Co3R2MgkgLLM8S10zCwa7UeDnkPtzfq4/EF0EdEPXmbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFHaDRiaDnM3ADGcSoZsRHob4No+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MThh
NDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2Y2UyMWVjNzQvNmE4MDAwMjUtYzhkNi0z
N2JjLWE0MzAtMmVlMjEyZmU3M2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjE4YTQwYzgtMjE3NS00ZTU1LTky
NmUtNjUxNmNlMjFlYzc0LzYxOGE0MGM4LTIxNzUtNGU1NS05MjZlLTY1MTZjZTIx
ZWM3NC5jcmwwHwYDVR0jBBgwFoAUYr8kTZ9LKuH4yy1kQwZdByzzTIwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82MThhNDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2
Y2UyMWVjNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF41gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLkqm9yIowwq6M4u7vhRanAW4UBeoovUsb5BjYbna6sa91dVAmkj9XE
TAm8Z0Lkbqrqnz6BJQnJ0ahz6ArauLtX0jv+xQcJDORzDd+gPdKiPEPJMJgi5qhq
BKpvaLoM8L52OVMAmYT/OQfb45rJ9hb9M4jBwIfg62kWS7yK9zUuXS+Pceng1Dqw
u1a/K0ZFfS9dXvPzlPmzdB9XEv0rqnvhTpBWVz5Qzk/TB0vMp0isTOzZyNoCuLK0
8EakqCerTYFSvKn+WpARwI/yLsWwXWLYqrU0LEmOsmSIqW6zoWXGcDQ1O+zpVkNa
3P9FM8kwa6jXi15EkKaU4Odzvqhe2KQ=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:04:29 2025 by rpki-client