Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a30d051-b52c-3862-9df4-98b0555828e4.roa
File:                     1a30d051-b52c-3862-9df4-98b0555828e4.roa (raw, json)
Hash identifier:          b/eeQEw4cDNgiGzvkUrsV0yovH+gIiVTzzqyUTbf+Wg=
Subject key identifier:   FB:7C:7F:5D:F7:12:1E:B6:84:70:CE:04:19:C9:4C:C5:D3:45:3D:89
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849244E8E0BF3FED686F9756C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a30d051-b52c-3862-9df4-98b0555828e4.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        23.4.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:8e:0b:f3:fe:d6:86:f9:75:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=9f28563e-8ea8-4d33-8b0f-b991170f8fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2f:d8:54:97:fc:57:ad:b6:48:81:eb:14:f5:
                    e2:9d:00:dc:07:75:04:b9:e2:83:80:c3:09:a5:44:
                    09:12:d7:1f:d3:c8:b5:f4:8b:15:e7:07:cc:37:6c:
                    90:9b:2a:99:fc:8b:67:b1:9b:db:3f:5e:fa:a0:00:
                    06:85:59:62:43:14:63:05:38:69:22:39:f5:02:43:
                    2c:25:83:93:1a:62:a4:d1:c1:ca:44:22:3e:82:c9:
                    1c:4d:29:c0:14:aa:d3:04:c7:46:a1:fd:4a:91:65:
                    f6:5e:5d:6d:75:dc:73:c3:a2:a6:74:a2:20:ff:0e:
                    4e:83:98:f8:e3:f7:05:09:aa:16:eb:e9:09:48:1d:
                    c9:0a:5e:5e:ad:09:a6:e2:08:98:d0:e9:d9:cb:47:
                    ab:10:a4:6f:9b:2a:be:ce:2d:04:00:05:ef:b0:0f:
                    17:9e:db:6e:68:9f:ad:e4:d4:1d:94:0b:28:12:68:
                    e2:3c:0f:58:96:11:0e:2a:c6:65:21:02:d2:b4:01:
                    e6:c5:bb:30:e3:a0:9f:9e:50:8e:a1:b3:08:da:87:
                    f7:fb:a4:8f:f1:e0:31:77:a5:1b:58:91:ac:d2:34:
                    82:65:65:99:a3:42:52:3d:82:de:08:ee:7f:71:65:
                    24:cd:3e:50:80:7d:a3:03:20:d6:2a:0d:40:23:e0:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7C:7F:5D:F7:12:1E:B6:84:70:CE:04:19:C9:4C:C5:D3:45:3D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a30d051-b52c-3862-9df4-98b0555828e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.4.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:26:40:d9:2a:be:99:98:8f:57:19:cb:9e:af:6f:72:7e:4a:
         f2:d4:9d:13:ab:ea:0b:00:50:ac:b6:0e:9c:3a:40:66:e7:3b:
         94:13:bf:2e:0c:9b:ee:59:3f:c0:d3:4c:2e:42:74:b9:ea:f8:
         67:fe:a2:92:95:a4:09:f9:d8:2c:ff:96:fe:9a:be:c6:d8:d9:
         e7:49:1f:d4:f5:34:51:eb:ec:9c:aa:72:ad:dd:37:75:23:01:
         fd:32:ed:4f:98:88:e2:26:4b:3c:fd:50:53:a9:1d:0c:45:ab:
         2c:56:6d:76:cc:af:33:12:79:51:53:95:7a:a6:2d:90:70:e1:
         78:15:4f:f7:43:d7:f5:e6:fd:09:c7:73:dd:4c:5c:8c:9b:55:
         75:c0:c9:90:d7:8a:26:37:5d:d9:f9:4f:a8:65:60:26:47:97:
         b1:d4:dd:ea:e1:00:a1:74:01:80:4b:98:e3:b1:64:5b:1d:3d:
         da:a9:f7:c4:25:97:34:2d:aa:e5:ef:bd:45:5c:56:c4:b6:b7:
         4d:b9:12:ee:eb:2f:78:76:c5:66:58:d1:2f:12:0a:cf:db:1f:
         b1:59:ff:f2:be:17:84:38:d4:f3:4a:a1:75:c9:e2:c8:ab:48:
         a8:e0:e0:94:a7:e0:42:2d:53:bb:01:cf:85:b6:f5:f8:50:7d:
         f5:94:85:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTo4L8/7Whvl1bAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
OWYyODU2M2UtOGVhOC00ZDMzLThiMGYtYjk5MTE3MGY4ZmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC/YVJf8V622SIHrFPXinQDcB3UEueKDgMMJ
pUQJEtcf08i19IsV5wfMN2yQmyqZ/ItnsZvbP176oAAGhVliQxRjBThpIjn1AkMs
JYOTGmKk0cHKRCI+gskcTSnAFKrTBMdGof1KkWX2Xl1tddxzw6KmdKIg/w5Og5j4
4/cFCaoW6+kJSB3JCl5erQmm4giY0OnZy0erEKRvmyq+zi0EAAXvsA8XnttuaJ+t
5NQdlAsoEmjiPA9YlhEOKsZlIQLStAHmxbsw46CfnlCOobMI2of3+6SP8eAxd6Ub
WJGs0jSCZWWZo0JSPYLeCO5/cWUkzT5QgH2jAyDWKg1AI+CAQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPt8f133Eh62hHDOBBnJTMXTRT2JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWEzMGQwNTEtYjUyYy0z
ODYyLTlkZjQtOThiMDU1NTgyOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwRYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEomQNkqvpmYj1cZy56vb3J+SvLUnROr6gsAUKy2Dpw6QGbnO5QTvy4M
m+5ZP8DTTC5CdLnq+Gf+opKVpAn52Cz/lv6avsbY2edJH9T1NFHr7Jyqcq3dN3Uj
Af0y7U+YiOImSzz9UFOpHQxFqyxWbXbMrzMSeVFTlXqmLZBw4XgVT/dD1/Xm/QnH
c91MXIybVXXAyZDXiiY3Xdn5T6hlYCZHl7HU3erhAKF0AYBLmOOxZFsdPdqp98Ql
lzQtquXvvUVcVsS2t025Eu7rL3h2xWZY0S8SCs/bH7FZ//K+F4Q41PNKoXXJ4sir
SKjg4JSn4EItU7sBz4W29fhQffWUhV8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:29 2025 by rpki-client