Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35e6a5ba-bc30-34a3-ab77-5cff44ae2077.roa
File:                     35e6a5ba-bc30-34a3-ab77-5cff44ae2077.roa (raw, json)
Hash identifier:          xden659+5zMRms8/dRsizjzZiqr8/bzw7cniVBqiuo4=
Subject key identifier:   F4:86:A3:72:56:4A:EC:FA:BE:E2:09:79:B2:8E:1F:48:3D:39:B7:99
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A00DAEEA903F587FB50A21600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35e6a5ba-bc30-34a3-ab77-5cff44ae2077.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        23.10.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ee:a9:03:f5:87:fb:50:a2:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=4352552d-0760-4231-89c7-925ca3ac5fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:68:99:6d:3b:83:a7:b0:00:69:ce:20:47:
                    b3:67:37:41:d0:28:7e:8a:10:5b:62:8d:a7:8b:a2:
                    6f:91:37:6a:98:db:71:42:4f:3e:93:17:4c:33:f0:
                    c1:c7:10:81:31:d9:6b:03:b4:13:1a:e0:75:09:68:
                    c4:ad:7a:78:6b:2b:a6:03:0a:16:8f:78:b7:8d:f4:
                    c5:f1:c1:26:7b:62:c1:6e:9f:fd:b3:c2:dd:8c:d5:
                    1e:49:47:38:fc:94:14:46:ad:fa:82:68:0e:d4:a3:
                    6c:71:d7:41:51:b9:5e:aa:e6:c1:79:b4:c5:b6:b4:
                    d3:0f:ee:d0:10:41:a7:ab:1a:41:14:d5:24:a9:ff:
                    75:a6:17:cc:c2:41:2e:06:8f:d5:e8:69:cb:4a:17:
                    80:e5:69:8f:6e:bd:04:11:f9:09:bf:86:cf:35:6f:
                    bb:cc:1e:d8:40:64:7d:51:55:92:d4:c7:ab:82:50:
                    e0:d2:0a:7a:7c:41:2a:17:86:d7:eb:28:06:f8:65:
                    cb:88:52:f8:6e:49:ba:ac:60:da:fb:a5:61:85:09:
                    b7:9e:d5:4c:da:d5:f6:7f:33:87:88:6b:11:d8:66:
                    cc:cb:8d:1e:e2:25:c0:98:e1:23:08:7e:f8:20:b9:
                    c3:c5:8a:3e:52:d7:af:ab:cf:00:e6:58:fa:09:84:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:86:A3:72:56:4A:EC:FA:BE:E2:09:79:B2:8E:1F:48:3D:39:B7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35e6a5ba-bc30-34a3-ab77-5cff44ae2077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.10.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:33:a3:29:66:12:06:b1:7d:70:e7:a4:39:28:cc:4c:47:a8:
         8f:77:25:9f:f7:d5:2d:24:c7:e5:98:38:57:01:af:b6:fa:90:
         a4:17:92:9b:df:eb:e8:f8:45:55:f1:55:66:f1:d7:13:8a:08:
         e0:d9:f5:27:d8:84:ab:98:09:6c:a5:23:ea:37:fb:7f:5c:98:
         ff:1d:7a:9c:ea:12:82:45:96:95:59:ab:d2:a8:36:87:d5:7f:
         2f:1b:f8:cf:3d:20:91:f2:e2:fc:4d:50:0e:4c:81:6f:ac:20:
         64:f6:de:41:fe:c8:4b:2f:88:24:11:d2:c9:f3:79:d0:8f:73:
         f1:50:79:69:54:59:99:b4:10:65:ef:1e:e0:c8:45:66:40:e1:
         1f:6f:4e:cd:a4:3d:2e:85:b0:2a:a9:78:88:45:e8:c8:73:61:
         07:94:86:a6:55:f4:41:91:4f:eb:cd:88:55:9a:c9:83:e3:7f:
         ef:40:d5:a1:5b:90:3b:2c:7a:ec:c2:e6:b5:28:0e:70:10:4d:
         96:ec:a3:0c:41:01:02:51:2b:30:c2:82:18:39:fb:52:5a:b3:
         1b:8a:d4:1a:e9:8b:47:3d:71:08:c9:06:9f:b9:8a:59:51:b1:
         f1:62:b9:4d:ae:23:dc:44:34:a8:ee:4c:39:1a:cd:9f:31:70:
         2d:68:25:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2u6pA/WH+1CiFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NDM1MjU1MmQtMDc2MC00MjMxLTg5YzctOTI1Y2EzYWM1ZmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcxomW07g6ewAGnOIEezZzdB0Ch+ihBbYo2n
i6JvkTdqmNtxQk8+kxdMM/DBxxCBMdlrA7QTGuB1CWjErXp4ayumAwoWj3i3jfTF
8cEme2LBbp/9s8LdjNUeSUc4/JQURq36gmgO1KNscddBUblequbBebTFtrTTD+7Q
EEGnqxpBFNUkqf91phfMwkEuBo/V6GnLSheA5WmPbr0EEfkJv4bPNW+7zB7YQGR9
UVWS1MerglDg0gp6fEEqF4bX6ygG+GXLiFL4bkm6rGDa+6VhhQm3ntVM2tX2fzOH
iGsR2GbMy40e4iXAmOEjCH74ILnDxYo+Utevq88A5lj6CYR2nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSGo3JWSuz6vuIJebKOH0g9ObeZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzVlNmE1YmEtYmMzMC0z
NGEzLWFiNzctNWNmZjQ0YWUyMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFwrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEzoylmEgaxfXDnpDkozExHqI93JZ/31S0kx+WYOFcBr7b6kKQXkpvf
6+j4RVXxVWbx1xOKCODZ9SfYhKuYCWylI+o3+39cmP8depzqEoJFlpVZq9KoNofV
fy8b+M89IJHy4vxNUA5MgW+sIGT23kH+yEsviCQR0snzedCPc/FQeWlUWZm0EGXv
HuDIRWZA4R9vTs2kPS6FsCqpeIhF6MhzYQeUhqZV9EGRT+vNiFWayYPjf+9A1aFb
kDsseuzC5rUoDnAQTZbsowxBAQJRKzDCghg5+1JasxuK1Brpi0c9cQjJBp+5illR
sfFiuU2uI9xENKjuTDkazZ8xcC1oJW8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:20:08 2025 by rpki-client