Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/47d41112-28b2-3fe5-8b0d-5247554c4896.roa
File:                     47d41112-28b2-3fe5-8b0d-5247554c4896.roa (raw, json)
Hash identifier:          0DuTOIKcR6tCb1Zdpp+wJ1jGC8qZbMS2FCv9pjgie4o=
Subject key identifier:   68:7A:DB:DD:16:6E:5E:C8:62:76:7F:59:14:05:4D:FF:4F:86:8C:8A
Certificate issuer:       /CN=75730944-401d-4c41-bc13-ee5c77df37a8
Certificate serial:       010D0C9F432858491ED6E66559128F044560E8C0
Authority key identifier: B7:91:02:37:F0:02:0B:8A:A7:A4:59:0F:78:D2:7A:53:E2:D3:E7:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/47d41112-28b2-3fe5-8b0d-5247554c4896.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     21805
IP address blocks:        23.165.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/75730944-401d-4c41-bc13-ee5c77df37a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/75730944-401d-4c41-bc13-ee5c77df37a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e6:65:59:12:8f:04:45:60:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75730944-401d-4c41-bc13-ee5c77df37a8
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=b7b1e100-c849-4c09-8e13-92f2eea656cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:36:7a:69:90:70:6b:77:ed:12:c7:a0:0f:
                    f3:70:e9:02:1f:55:d7:65:99:d0:88:0a:03:04:b5:
                    a4:23:48:06:30:da:64:e2:a3:6e:51:04:68:47:20:
                    17:33:3b:07:54:06:37:e6:24:d5:a0:56:df:fd:f9:
                    b3:92:68:8a:30:8f:ed:39:0e:3e:d5:d9:f2:58:47:
                    3c:ca:15:92:63:57:17:8f:4f:ff:43:fe:a2:47:b7:
                    c5:93:49:60:db:f1:4f:bc:86:bc:50:e5:51:2f:aa:
                    0c:d7:7f:5a:1d:d7:bf:1f:8d:18:db:e0:ab:e9:5d:
                    5f:bc:f5:fa:bb:ed:af:0d:e2:c1:8c:be:85:f4:1e:
                    66:14:c6:c7:88:ff:40:f3:49:14:23:8a:8b:2e:b8:
                    bf:46:fe:78:aa:fc:0a:08:85:83:fa:8c:59:e3:2c:
                    c2:08:1a:02:df:58:cd:d9:16:36:cc:93:bd:48:3b:
                    d9:e2:95:0d:98:ed:43:d9:1a:20:a2:c5:85:80:34:
                    5e:67:8d:56:ce:e5:53:78:0c:0c:de:1c:00:a0:4b:
                    5d:85:e9:81:f1:a8:aa:30:c4:f1:a0:c6:67:6a:cd:
                    4c:1f:de:9d:6f:ef:b2:7e:2a:9a:37:b4:da:63:b2:
                    48:4c:7c:14:ad:1b:f0:af:c3:ae:49:10:24:19:e7:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7A:DB:DD:16:6E:5E:C8:62:76:7F:59:14:05:4D:FF:4F:86:8C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/47d41112-28b2-3fe5-8b0d-5247554c4896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/75730944-401d-4c41-bc13-ee5c77df37a8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:91:02:37:F0:02:0B:8A:A7:A4:59:0F:78:D2:7A:53:E2:D3:E7:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b9:7d:fd:a3:e4:23:6d:6e:c4:6d:19:41:95:b2:bf:25:f6:
         03:8c:9f:fb:44:2f:4a:be:85:75:01:d2:3d:a9:9d:e0:67:63:
         d5:13:f8:8f:2f:02:b4:0d:55:01:80:9b:85:5c:5d:dc:7c:42:
         a8:b7:86:a9:7b:6b:4f:42:30:e2:57:1b:ed:9a:6a:1a:95:47:
         4d:cf:02:24:92:8b:86:64:93:a3:04:91:ea:69:47:24:8d:88:
         89:5e:8f:1b:33:d6:b6:33:81:c5:40:00:ea:a6:8b:57:90:93:
         ef:c1:94:63:07:38:d2:d5:fc:e3:b9:f0:25:e5:f3:34:61:f9:
         f9:ad:e6:80:41:ab:8a:bc:53:88:ae:24:b7:e5:cf:29:83:a3:
         a8:15:66:53:af:fb:11:20:72:b9:0a:12:1b:64:58:c0:3e:4e:
         8c:f3:1a:c8:17:04:80:c4:c3:22:5c:15:21:3a:28:e2:22:d3:
         20:e4:5d:98:37:c9:90:c0:c5:ad:65:77:78:8f:33:5e:9f:ff:
         ce:6e:ee:08:d5:3c:6d:92:8b:59:15:97:c0:d3:8c:9f:80:07:
         29:b9:1b:c5:26:34:21:45:58:85:1d:26:e7:d0:61:16:38:7c:
         26:b4:e5:20:81:9d:f3:6c:10:6c:09:2c:b4:b5:0a:75:7f:9a:
         d0:7e:4f:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uZlWRKPBEVg6MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzU3MzA5NDQtNDAxZC00YzQxLWJjMTMtZWU1Yzc3ZGYz
N2E4MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
YjdiMWUxMDAtYzg0OS00YzA5LThlMTMtOTJmMmVlYTY1NmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8E2emmQcGt37RLHoA/zcOkCH1XXZZnQiAoD
BLWkI0gGMNpk4qNuUQRoRyAXMzsHVAY35iTVoFbf/fmzkmiKMI/tOQ4+1dnyWEc8
yhWSY1cXj0//Q/6iR7fFk0lg2/FPvIa8UOVRL6oM139aHde/H40Y2+Cr6V1fvPX6
u+2vDeLBjL6F9B5mFMbHiP9A80kUI4qLLri/Rv54qvwKCIWD+oxZ4yzCCBoC31jN
2RY2zJO9SDvZ4pUNmO1D2RogosWFgDReZ41WzuVTeAwM3hwAoEtdhemB8aiqMMTx
oMZnas1MH96db++yfiqaN7TaY7JITHwUrRvwr8OuSRAkGeeO/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGh6290Wbl7IYnZ/WRQFTf9PhoyKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NTcz
MDk0NC00MDFkLTRjNDEtYmMxMy1lZTVjNzdkZjM3YTgvNDdkNDExMTItMjhiMi0z
ZmU1LThiMGQtNTI0NzU1NGM0ODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzU3MzA5NDQtNDAxZC00YzQxLWJj
MTMtZWU1Yzc3ZGYzN2E4Lzc1NzMwOTQ0LTQwMWQtNGM0MS1iYzEzLWVlNWM3N2Rm
MzdhOC5jcmwwHwYDVR0jBBgwFoAUt5ECN/ACC4qnpFkPeNJ6U+LT5/UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NTczMDk0NC00MDFkLTRjNDEtYmMxMy1lZTVj
NzdkZjM3YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6VYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+5ff2j5CNtbsRtGUGVsr8l9gOMn/tEL0q+hXUB0j2pneBnY9UT+I8v
ArQNVQGAm4VcXdx8Qqi3hql7a09CMOJXG+2aahqVR03PAiSSi4Zkk6MEkeppRySN
iIlejxsz1rYzgcVAAOqmi1eQk+/BlGMHONLV/OO58CXl8zRh+fmt5oBBq4q8U4iu
JLflzymDo6gVZlOv+xEgcrkKEhtkWMA+TozzGsgXBIDEwyJcFSE6KOIi0yDkXZg3
yZDAxa1ld3iPM16f/85u7gjVPG2Si1kVl8DTjJ+ABym5G8UmNCFFWIUdJufQYRY4
fCa05SCBnfNsEGwJLLS1CnV/mtB+T04=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:27 2025 by rpki-client