Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa
File:                     840bdcf2-a766-3d79-86c0-da70ee77a15e.roa (raw, json)
Hash identifier:          F9ztRghTiu1YjTc2MPsBPsoPb+PhsbCytW+PpAVCMx4=
Subject key identifier:   7A:40:8D:B3:F7:D8:CB:14:E6:91:98:C5:05:12:3B:26:92:8B:00:CD
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584A612B15C277A25DDECA485880
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        23.173.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:15:c2:77:a2:5d:de:ca:48:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=10d7bcf7-f828-4353-b442-1aa9bc8a74b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:af:e4:3b:6a:f2:66:3f:c1:a2:7a:cb:b6:
                    8b:25:b7:07:cc:ae:0b:f6:d2:ff:3a:e1:72:ca:e0:
                    1b:5f:27:a1:c4:54:64:94:eb:8a:9d:ac:d1:f4:eb:
                    0b:bb:95:a2:93:79:96:58:0e:06:bd:3c:f6:8b:11:
                    b1:46:71:87:d5:97:9f:a9:36:4b:4b:02:8c:a6:79:
                    bb:7a:70:45:c7:91:60:b1:af:09:6c:54:41:f9:ac:
                    d0:37:18:f0:28:dc:29:0e:25:92:ce:36:71:bd:8d:
                    7f:cb:26:d9:f0:9a:f9:e6:6e:32:39:25:1f:5c:de:
                    b9:f3:82:a0:a2:a0:8f:58:a3:77:66:08:75:06:14:
                    53:08:d9:77:bc:42:21:2d:e6:a0:55:48:03:80:9f:
                    e4:b6:25:b7:ad:8b:11:b6:4f:8a:d2:35:1e:94:c4:
                    d0:da:53:3c:f2:c8:10:f1:05:3a:b4:4d:b7:09:22:
                    34:29:40:a5:1e:fd:b9:08:0e:fe:bf:d7:4a:d1:df:
                    3e:95:84:99:a9:b1:41:61:00:7f:90:e5:ec:59:32:
                    2e:58:9e:e7:85:76:57:c0:9b:3f:24:1c:56:e3:ea:
                    5e:fa:5a:e3:63:17:1e:33:fc:15:ae:ff:00:f9:5b:
                    6d:ad:ed:31:4f:4b:fa:0e:8d:1c:62:08:17:22:0f:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:40:8D:B3:F7:D8:CB:14:E6:91:98:C5:05:12:3B:26:92:8B:00:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:c4:e0:30:9d:4c:e8:1c:c9:db:fd:27:ab:17:55:dd:ce:
         ec:96:d8:b1:77:f5:0e:a5:e5:4c:ef:ad:d6:ef:b1:56:be:c8:
         bc:b7:51:29:f5:8e:f5:5a:81:57:22:25:03:da:0d:32:c9:ee:
         d9:36:3b:b2:b3:bc:a8:b3:54:1d:66:39:25:b6:bd:a9:7d:d1:
         f6:ee:cb:48:67:cd:9c:b4:aa:c8:79:52:46:e1:a7:07:42:fa:
         eb:54:87:32:a1:43:c0:25:0f:0e:2d:96:c4:b2:a6:43:75:7f:
         21:01:c9:19:38:f8:0c:31:68:ef:e0:0d:42:27:21:85:ab:16:
         64:07:17:7d:f2:66:60:a2:5f:67:12:49:dc:e0:a4:99:f0:8b:
         c4:9a:a0:7f:0b:53:cf:0c:94:37:7f:23:18:25:2e:e3:10:d5:
         2f:8e:95:ba:91:03:46:33:e3:85:d8:69:cf:d9:85:b1:59:47:
         7f:9d:92:55:13:ea:14:1a:c6:5a:a0:96:7e:66:83:7a:fd:b5:
         f9:4e:8a:66:80:7f:75:8f:ab:51:35:3c:ce:95:eb:63:e4:3f:
         bb:b8:df:e2:2c:b8:46:25:d9:df:b1:c1:6d:8b:0e:5f:d9:4a:
         c8:7f:ca:93:d9:37:d7:1d:da:88:30:c4:1e:10:56:24:9b:1f:
         94:27:61:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxXCd6Jd3spIWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi
ZGMzMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
MTBkN2JjZjctZjgyOC00MzUzLWI0NDItMWFhOWJjOGE3NGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2iv5Dtq8mY/waJ6y7aLJbcHzK4L9tL/OuFy
yuAbXyehxFRklOuKnazR9OsLu5Wik3mWWA4GvTz2ixGxRnGH1ZefqTZLSwKMpnm7
enBFx5Fgsa8JbFRB+azQNxjwKNwpDiWSzjZxvY1/yybZ8Jr55m4yOSUfXN6584Kg
oqCPWKN3Zgh1BhRTCNl3vEIhLeagVUgDgJ/ktiW3rYsRtk+K0jUelMTQ2lM88sgQ
8QU6tE23CSI0KUClHv25CA7+v9dK0d8+lYSZqbFBYQB/kOXsWTIuWJ7nhXZXwJs/
JBxW4+pe+lrjYxceM/wVrv8A+Vttre0xT0v6Do0cYggXIg+67QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpAjbP32MsU5pGYxQUSOyaSiwDNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi
NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvODQwYmRjZjItYTc2Ni0z
ZDc5LTg2YzAtZGE3MGVlNzdhMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz
ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz
YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi
Yjk5M2JkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF60YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlexOAwnUzoHMnb/SerF1XdzuyW2LF39Q6l5UzvrdbvsVa+yLy3USn1
jvVagVciJQPaDTLJ7tk2O7KzvKizVB1mOSW2val90fbuy0hnzZy0qsh5UkbhpwdC
+utUhzKhQ8AlDw4tlsSypkN1fyEByRk4+AwxaO/gDUInIYWrFmQHF33yZmCiX2cS
SdzgpJnwi8SaoH8LU88MlDd/IxglLuMQ1S+OlbqRA0Yz44XYac/ZhbFZR3+dklUT
6hQaxlqgln5mg3r9tflOimaAf3WPq1E1PM6V62PkP7u43+IsuEYl2d+xwW2LDl/Z
Ssh/ypPZN9cd2ogwxB4QViSbH5QnYc4=
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:20:12 2025 by rpki-client