Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/9e27f66c-b1a3-3251-86f9-a19a30381767.roa
File:                     9e27f66c-b1a3-3251-86f9-a19a30381767.roa (raw, json)
Hash identifier:          5fjnnXP/jwjrepwjYjJJP2OgJUdYUZlZvMFblz8SV/U=
Subject key identifier:   89:7C:7E:1A:4B:BA:E3:80:FD:76:0E:53:C8:1F:74:A7:FC:3B:8E:49
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F43285849EEB5038BA447D042A386A300
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/9e27f66c-b1a3-3251-86f9-a19a30381767.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     18914
IP address blocks:        23.147.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:03:8b:a4:47:d0:42:a3:86:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=0211a31a-d30d-4061-aa8c-4229df0c6b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:e2:7a:c9:63:de:cb:0e:7b:8d:04:52:36:
                    35:a5:d9:38:0a:dd:31:fe:bf:0e:f6:e0:0f:41:87:
                    ff:36:6d:29:b0:be:d8:59:20:7d:22:ad:9d:3c:a2:
                    66:eb:0e:2b:2c:04:84:1d:5c:0e:fd:e2:9d:95:87:
                    8f:47:b7:98:ca:07:c4:62:68:ab:fb:c6:87:83:e3:
                    e5:d9:72:97:8a:6a:55:92:6a:5b:1d:37:ef:ae:02:
                    15:87:f9:e8:07:28:a5:7b:57:3c:6b:43:6a:ec:ce:
                    12:cf:de:f9:24:e6:ea:39:0e:ab:80:dd:98:5a:62:
                    92:51:60:dd:b8:78:eb:08:4a:18:59:c8:7b:2f:a1:
                    37:31:a3:35:a1:67:49:2c:6f:88:ef:06:f6:57:cd:
                    4e:7a:49:9b:41:09:84:04:e3:c9:08:ca:79:cd:1a:
                    17:6d:f3:ec:40:41:e5:6f:18:55:59:7a:c6:09:3f:
                    24:54:ed:0d:bb:14:7a:0a:65:da:ab:d7:1e:d6:db:
                    db:33:56:e5:6c:50:0e:11:1a:f9:43:f3:fc:f1:37:
                    a7:f6:64:12:59:af:22:65:dc:9b:70:4e:71:b6:fe:
                    ab:44:73:2a:09:71:dc:48:2b:5a:2c:b0:0c:13:c8:
                    90:1b:06:61:87:86:e6:a0:69:01:63:07:3d:fb:0a:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7C:7E:1A:4B:BA:E3:80:FD:76:0E:53:C8:1F:74:A7:FC:3B:8E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/9e27f66c-b1a3-3251-86f9-a19a30381767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ab:64:7e:ca:c9:95:b0:95:4e:12:ed:f4:a0:e7:c3:27:e2:
         f6:7b:4e:77:e2:7a:f1:de:d6:7a:4d:dd:d7:72:ec:fd:8b:6d:
         22:09:ed:8a:e4:b1:7c:23:c6:89:62:45:a1:58:08:6a:40:01:
         4e:39:32:63:d4:fe:c2:9c:43:48:72:2a:ad:14:87:b3:7a:11:
         95:2a:58:7c:e1:61:a3:c2:8d:8a:bb:07:d4:82:23:61:14:a6:
         4c:96:6a:87:91:d7:4d:c1:18:3e:9b:63:0f:00:ab:ea:b0:07:
         a7:17:9b:ba:81:d3:9a:f8:e0:95:b7:a3:6a:0f:7d:fd:b7:ff:
         3c:0e:59:86:c3:ad:d5:0e:bc:bf:40:41:83:ea:a4:b1:00:f4:
         82:50:5b:1d:97:e2:ae:76:70:97:a0:19:95:54:ba:41:15:0c:
         c9:c2:c8:25:9c:2e:22:be:37:25:2a:f2:6f:39:23:78:de:cc:
         79:34:00:af:f6:1b:c1:1a:20:0b:ec:7f:4a:de:20:1f:a6:eb:
         55:f6:17:10:6d:d6:52:af:29:3c:3e:b6:42:51:a2:c8:ea:d1:
         f5:6f:94:31:27:a8:97:89:b9:90:98:0c:80:00:1a:b5:69:61:
         a7:07:59:d7:44:34:e3:1a:99:5b:4a:5a:ac:7f:82:63:03:0e:
         98:fb:ce:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQOLpEfQQqOGowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk
MDIxMWEzMWEtZDMwZC00MDYxLWFhOGMtNDIyOWRmMGM2YjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLDieslj3ssOe40EUjY1pdk4Ct0x/r8O9uAP
QYf/Nm0psL7YWSB9Iq2dPKJm6w4rLASEHVwO/eKdlYePR7eYygfEYmir+8aHg+Pl
2XKXimpVkmpbHTfvrgIVh/noByile1c8a0Nq7M4Sz975JObqOQ6rgN2YWmKSUWDd
uHjrCEoYWch7L6E3MaM1oWdJLG+I7wb2V81OekmbQQmEBOPJCMp5zRoXbfPsQEHl
bxhVWXrGCT8kVO0NuxR6CmXaq9ce1tvbM1blbFAOERr5Q/P88Ten9mQSWa8iZdyb
cE5xtv6rRHMqCXHcSCtaLLAME8iQGwZhh4bmoGkBYwc9+wo2MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIl8fhpLuuOA/XYOU8gfdKf8O45JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvOWUyN2Y2NmMtYjFhMy0z
MjUxLTg2ZjktYTE5YTMwMzgxNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5NZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKrZH7KyZWwlU4S7fSg58Mn4vZ7TnfievHe1npN3ddy7P2LbSIJ7Yrk
sXwjxoliRaFYCGpAAU45MmPU/sKcQ0hyKq0Uh7N6EZUqWHzhYaPCjYq7B9SCI2EU
pkyWaoeR103BGD6bYw8Aq+qwB6cXm7qB05r44JW3o2oPff23/zwOWYbDrdUOvL9A
QYPqpLEA9IJQWx2X4q52cJegGZVUukEVDMnCyCWcLiK+NyUq8m85I3jezHk0AK/2
G8EaIAvsf0reIB+m61X2FxBt1lKvKTw+tkJRosjq0fVvlDEnqJeJuZCYDIAAGrVp
YacHWddENOMamVtKWqx/gmMDDpj7zi8=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:17:28 2025 by rpki-client