Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/2f558dd9-8789-3733-964c-a93301be22d6.roa
File:                     2f558dd9-8789-3733-964c-a93301be22d6.roa (raw, json)
Hash identifier:          7RykHN04mqTE++YqAFMrLS6Q6qTK9aup2qHVB6jrE3E=
Subject key identifier:   C6:CF:F7:53:98:D0:84:13:82:4D:AD:DE:11:AB:12:56:47:EF:B2:87
Certificate issuer:       /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
Certificate serial:       010D0C9F4328584A5E60626BA8F88257BA828D00
Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/2f558dd9-8789-3733-964c-a93301be22d6.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        23.169.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:62:6b:a8:f8:82:57:ba:82:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=e2559d23-6f27-4bef-8a89-a64374ad1239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:84:b7:a0:94:40:ac:de:d1:a9:6a:d7:5e:
                    a4:ee:59:f3:49:e6:67:ed:d1:34:dd:fa:ac:db:29:
                    1c:42:13:ec:58:35:63:2f:80:d8:cb:b1:3d:02:df:
                    70:d9:0e:7e:90:ee:2f:a2:18:7f:76:e5:7f:47:3e:
                    91:b6:c2:b9:2a:79:56:e6:b0:99:98:ed:21:c2:77:
                    ac:47:98:cd:9c:5f:76:32:d4:bd:e5:ff:6d:14:fc:
                    ee:00:32:82:e2:45:97:b0:37:ed:4d:f9:5e:df:5a:
                    fb:6a:41:c6:20:a3:70:4c:fc:72:46:c5:21:43:df:
                    02:ea:61:d8:19:c6:64:63:3b:a1:9f:f8:34:1d:5b:
                    cb:89:ff:45:3b:95:7b:49:b1:91:b4:0e:9a:4a:55:
                    6b:bb:19:f2:cd:6c:9b:16:d3:48:69:f3:6d:5c:17:
                    87:ea:10:1c:86:80:e5:b5:27:76:2a:5b:6b:ee:b1:
                    fc:0b:fa:fb:67:4e:27:88:b2:43:51:3a:d7:d4:b4:
                    07:ac:65:99:42:90:43:63:fe:c7:ae:a8:20:7b:44:
                    a9:89:ac:7c:96:39:32:b6:3e:43:8d:b1:e2:24:84:
                    12:aa:1f:45:08:4c:ea:d9:ed:0e:03:5c:30:b8:60:
                    3a:e3:30:ea:f9:05:a1:62:a2:22:0d:90:bb:3e:f8:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CF:F7:53:98:D0:84:13:82:4D:AD:DE:11:AB:12:56:47:EF:B2:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/2f558dd9-8789-3733-964c-a93301be22d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl

            X509v3 Authority Key Identifier:
                keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c8:d1:85:46:fd:a2:c3:bc:10:7e:6d:ad:30:aa:0b:bd:8f:
         2f:3d:91:dc:84:d6:7c:60:97:2f:2e:56:94:ef:ee:34:a9:10:
         9f:49:e9:60:04:f1:69:98:fb:6b:97:5f:8c:d2:81:9c:3a:cc:
         8f:2e:a0:9f:e8:bb:53:a1:83:6e:ab:13:9b:bd:99:fe:73:03:
         df:35:f9:c3:be:de:b6:f7:3a:8c:c7:87:cc:cb:5b:d3:92:bb:
         57:01:3f:f9:ee:d0:c0:47:45:9b:9a:67:3c:f4:5e:de:e9:c6:
         1b:53:30:df:e8:85:3d:d4:39:06:80:4e:98:10:74:36:1c:05:
         0b:ac:8a:a7:ed:92:37:c8:68:85:66:2d:ea:7e:b8:ae:ae:8a:
         24:d9:62:ac:b3:84:d1:f4:7a:ff:0f:bf:22:75:a3:77:f2:e2:
         4c:a6:1c:15:0c:b5:1a:ff:e6:3a:71:c8:f6:06:70:4d:79:09:
         13:97:7e:5e:bb:ab:33:66:06:3c:90:8e:82:15:4f:2d:be:61:
         c5:14:03:51:cb:6a:4e:ef:f6:33:9d:9c:e8:73:c4:58:9a:18:
         91:05:50:ba:92:03:f0:6a:e1:98:e6:fd:43:89:9d:56:db:ac:
         de:cb:bd:3d:50:c6:52:35:45:4c:64:3d:4b:e4:ae:32:fc:e9:
         01:26:75:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGJrqPiCV7qCjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjkxOGE2MGItMmYxNi00ZGI5LThkNDctZGRkZmFmYjVm
ZGFiMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk
ZTI1NTlkMjMtNmYyNy00YmVmLThhODktYTY0Mzc0YWQxMjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspKEt6CUQKze0alq116k7lnzSeZn7dE03fqs
2ykcQhPsWDVjL4DYy7E9At9w2Q5+kO4vohh/duV/Rz6RtsK5KnlW5rCZmO0hwnes
R5jNnF92MtS95f9tFPzuADKC4kWXsDftTfle31r7akHGIKNwTPxyRsUhQ98C6mHY
GcZkYzuhn/g0HVvLif9FO5V7SbGRtA6aSlVruxnyzWybFtNIafNtXBeH6hAchoDl
tSd2Kltr7rH8C/r7Z04niLJDUTrX1LQHrGWZQpBDY/7Hrqgge0Spiax8ljkytj5D
jbHiJIQSqh9FCEzq2e0OA1wwuGA64zDq+QWhYqIiDZC7Pvi9WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbP91OY0IQTgk2t3hGrElZH77KHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OTE4
YTYwYi0yZjE2LTRkYjktOGQ0Ny1kZGRmYWZiNWZkYWIvMmY1NThkZDktODc4OS0z
NzMzLTk2NGMtYTkzMzAxYmUyMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjkxOGE2MGItMmYxNi00ZGI5LThk
NDctZGRkZmFmYjVmZGFiLzY5MThhNjBiLTJmMTYtNGRiOS04ZDQ3LWRkZGZhZmI1
ZmRhYi5jcmwwHwYDVR0jBBgwFoAUl8NQrsFalDaWyPb4G3kBnULiTaMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82OTE4YTYwYi0yZjE2LTRkYjktOGQ0Ny1kZGRm
YWZiNWZkYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6lZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPI0YVG/aLDvBB+ba0wqgu9jy89kdyE1nxgly8uVpTv7jSpEJ9J6WAE
8WmY+2uXX4zSgZw6zI8uoJ/ou1Ohg26rE5u9mf5zA981+cO+3rb3OozHh8zLW9OS
u1cBP/nu0MBHRZuaZzz0Xt7pxhtTMN/ohT3UOQaATpgQdDYcBQusiqftkjfIaIVm
Lep+uK6uiiTZYqyzhNH0ev8PvyJ1o3fy4kymHBUMtRr/5jpxyPYGcE15CROXfl67
qzNmBjyQjoIVTy2+YcUUA1HLak7v9jOdnOhzxFiaGJEFULqSA/Bq4Zjm/UOJnVbb
rN7LvT1QxlI1RUxkPUvkrjL86QEmdc0=
-----END CERTIFICATE-----
Generated at Thu Jul 10 02:52:04 2025 by rpki-client