Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/e6fbc970-6240-37e6-a71a-09105bb5456a.roa
File:                     e6fbc970-6240-37e6-a71a-09105bb5456a.roa (raw, json)
Hash identifier:          XHqxIN7667AGEOlLzv4hHRTAwrHSuowOUyLCBPJr8dc=
Subject key identifier:   9F:5C:6C:2E:9F:60:07:88:F9:DB:BE:DA:D5:FF:3F:F6:C4:75:EA:66
Certificate issuer:       /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Certificate serial:       010D0C9F4328584A6C55D97380F1AF788D0A1300
Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/e6fbc970-6240-37e6-a71a-09105bb5456a.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     46733
IP address blocks:        23.165.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d9:73:80:f1:af:78:8d:0a:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=6924a90b-f7ea-4bcd-a148-4927c211d08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:70:81:03:2f:02:64:40:0f:34:ad:b9:c3:8b:
                    ac:4e:c4:fc:52:30:06:94:27:c0:c8:a8:76:d7:de:
                    c1:d6:3e:0b:21:4d:8b:f3:72:60:a1:00:69:84:7e:
                    2d:08:11:fd:5d:cc:c4:ad:10:aa:96:4f:2e:da:02:
                    b2:5e:10:6d:c5:4b:1a:eb:ba:07:a4:f5:4f:58:30:
                    aa:cf:17:f9:be:70:64:f2:f6:9d:d0:4d:f3:ef:24:
                    a1:26:19:58:e9:d0:a9:6a:01:b2:44:2e:64:eb:c1:
                    5c:16:9f:5d:fd:5e:3d:59:25:91:47:59:d8:88:0c:
                    17:36:d0:df:a1:4d:68:e6:e5:b9:81:f9:df:3f:9c:
                    41:57:5b:ac:c9:43:75:46:10:27:17:83:b7:a4:59:
                    5c:97:da:b0:ec:65:10:a2:b3:a6:c2:5f:1c:92:a3:
                    8c:86:e2:d5:ba:88:c3:fc:82:01:8d:1a:77:55:ee:
                    db:94:ce:89:d5:3a:07:98:3e:1e:81:bc:98:53:bf:
                    fe:17:34:7f:e0:34:00:50:6e:45:ff:10:62:7c:65:
                    62:d9:c3:04:51:e2:42:b9:41:f6:6f:fb:06:04:cc:
                    85:00:8e:97:e6:72:5f:67:33:80:f8:a9:9e:ac:46:
                    f5:e4:82:b6:26:8c:42:65:06:70:a3:14:e3:7f:b7:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5C:6C:2E:9F:60:07:88:F9:DB:BE:DA:D5:FF:3F:F6:C4:75:EA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/e6fbc970-6240-37e6-a71a-09105bb5456a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl

            X509v3 Authority Key Identifier:
                keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:74:1e:14:a2:09:fe:79:84:5e:38:8a:7f:7d:18:95:d9:f5:
         fc:e3:9a:25:f7:6b:97:3b:b5:46:13:5e:30:94:be:c4:c5:67:
         22:f3:9e:41:38:f1:00:8c:0f:3e:e0:dc:10:b5:d7:06:4e:43:
         63:85:a8:f4:02:6c:15:11:2c:d6:39:6b:ab:e7:12:c3:2f:30:
         5b:7e:f9:39:10:a3:13:5a:7c:c3:7b:98:0f:dc:ea:59:56:8b:
         cd:ce:b9:3b:bf:57:9f:d3:23:b3:b6:4c:a1:e8:26:fb:5a:19:
         95:21:df:8f:ae:b6:ae:05:ee:3b:d3:b7:3c:37:49:98:d8:89:
         7d:65:41:39:bd:f8:7e:18:ea:df:c1:28:3e:6b:27:b7:42:cf:
         c4:d8:f7:be:87:d5:28:fe:1e:61:d0:2c:39:d1:38:e9:e4:36:
         94:dd:ec:99:9c:9f:a9:51:0d:bf:fa:ab:47:f2:d7:73:6e:23:
         d9:5b:4c:0d:b6:0a:b2:f4:bc:43:c2:6a:62:c1:f9:05:d3:63:
         35:86:59:0c:07:77:84:3c:7a:56:3e:1e:9a:08:8e:e6:89:0e:
         54:47:0d:cb:8d:e6:ca:f6:01:e7:33:19:eb:7a:4d:2b:42:51:
         65:7e:ac:f1:33:ab:d3:30:e3:cb:c5:3c:27:59:49:d1:5f:50:
         e7:53:fe:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdlzgPGveI0KEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy
N2Y5MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
NjkyNGE5MGItZjdlYS00YmNkLWExNDgtNDkyN2MyMTFkMDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHCBAy8CZEAPNK25w4usTsT8UjAGlCfAyKh2
197B1j4LIU2L83JgoQBphH4tCBH9XczErRCqlk8u2gKyXhBtxUsa67oHpPVPWDCq
zxf5vnBk8vad0E3z7yShJhlY6dCpagGyRC5k68FcFp9d/V49WSWRR1nYiAwXNtDf
oU1o5uW5gfnfP5xBV1usyUN1RhAnF4O3pFlcl9qw7GUQorOmwl8ckqOMhuLVuojD
/IIBjRp3Ve7blM6J1ToHmD4egbyYU7/+FzR/4DQAUG5F/xBifGVi2cMEUeJCuUH2
b/sGBMyFAI6X5nJfZzOA+KmerEb15IK2JoxCZQZwoxTjf7f+7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9cbC6fYAeI+du+2tX/P/bEdepmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh
OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvZTZmYmM5NzAtNjI0MC0z
N2U2LWE3MWEtMDkxMDViYjU0NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli
MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx
MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3
ZTVmMTI3ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG90HhSiCf55hF44in99GJXZ9fzjmiX3a5c7tUYTXjCUvsTFZyLznkE4
8QCMDz7g3BC11wZOQ2OFqPQCbBURLNY5a6vnEsMvMFt++TkQoxNafMN7mA/c6llW
i83OuTu/V5/TI7O2TKHoJvtaGZUh34+utq4F7jvTtzw3SZjYiX1lQTm9+H4Y6t/B
KD5rJ7dCz8TY976H1Sj+HmHQLDnROOnkNpTd7Jmcn6lRDb/6q0fy13NuI9lbTA22
CrL0vEPCamLB+QXTYzWGWQwHd4Q8elY+HpoIjuaJDlRHDcuN5sr2AeczGet6TStC
UWV+rPEzq9Mw48vFPCdZSdFfUOdT/ls=
-----END CERTIFICATE-----
Generated at Wed Jul 9 20:49:58 2025 by rpki-client