Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60d37aaa-ffd1-3546-bae8-87722eb27e81.roa
File:                     60d37aaa-ffd1-3546-bae8-87722eb27e81.roa (raw, json)
Hash identifier:          k8v4g5uGt0x2E2eDCjltWvKyowmN41nWHqiBCCE4DXg=
Subject key identifier:   23:54:45:A0:12:F2:0A:47:1A:CB:2F:AC:96:5C:35:C5:FF:9B:15:B9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A03A55B6B8F34359EF0E9FF90
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60d37aaa-ffd1-3546-bae8-87722eb27e81.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     16625
IP address blocks:        23.1.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:5b:6b:8f:34:35:9e:f0:e9:ff:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=c29387bb-d8a2-49c6-980a-6642c15fceea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:a6:00:09:8e:89:e0:af:e0:14:8b:da:92:
                    93:1b:cb:ae:35:0a:8b:23:ac:db:ca:d4:ff:ec:2c:
                    2b:9d:2a:ad:c7:c8:db:0b:52:e7:8f:fe:35:4c:d7:
                    32:b2:f4:85:5e:a9:df:21:18:ab:1d:ee:21:23:60:
                    7d:9a:fa:7d:8a:7e:c8:70:98:0f:e0:a6:bd:b3:40:
                    48:0a:f0:e8:a0:d2:dd:8a:59:16:c2:f4:f6:7f:a6:
                    15:bc:3f:2c:8d:b5:b5:df:f2:3b:a6:75:63:dc:3f:
                    e9:63:4a:7f:59:bf:31:69:8c:5b:9c:fb:a7:59:71:
                    cb:8a:6f:47:15:31:f8:82:2c:3f:e9:a4:05:71:fd:
                    e7:65:fd:46:4b:f1:71:12:28:55:7e:6e:29:f0:1d:
                    1a:a6:c3:71:42:d0:a5:24:2e:a8:e8:01:6c:b6:25:
                    db:83:22:76:cd:13:1d:b8:d4:ef:54:2e:6a:12:e5:
                    58:fb:eb:dc:12:ce:e2:5f:32:95:63:91:99:32:12:
                    c3:e0:f0:6d:84:5e:33:f9:c9:41:91:c5:aa:62:ab:
                    f9:71:07:1b:09:92:ee:f2:69:29:c4:2a:eb:e7:2b:
                    06:39:76:ec:06:a2:dd:49:d7:75:59:e0:3f:96:d7:
                    15:20:07:99:08:42:25:8c:23:d9:5a:62:4c:91:a5:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:54:45:A0:12:F2:0A:47:1A:CB:2F:AC:96:5C:35:C5:FF:9B:15:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60d37aaa-ffd1-3546-bae8-87722eb27e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.1.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:15:ba:ee:0d:ac:30:d5:dd:cc:1f:48:dc:99:20:a2:30:80:
         ef:d5:e7:87:d8:c1:75:89:fe:c5:19:e8:6c:1e:07:a3:ca:51:
         60:26:f2:1c:30:41:f3:da:5d:4f:71:23:e8:52:32:d1:76:42:
         6a:79:18:40:c0:94:00:b5:a7:2f:3d:38:a5:0d:7f:f9:08:61:
         75:82:af:6a:05:7f:6a:c3:c9:dc:3a:8f:9b:15:b7:db:61:93:
         da:15:79:92:c4:5f:28:fa:3a:44:1d:c9:b6:65:c3:8f:cf:bf:
         ae:6c:e1:e5:0a:c4:6d:7b:c4:cb:26:20:25:0e:45:4b:6e:4f:
         b0:b4:1d:37:e3:01:c9:ce:48:e0:80:8a:0b:e6:fa:7b:71:b0:
         e1:6f:3b:6c:29:96:bd:60:2e:56:33:78:b9:6a:b6:bf:7e:40:
         ab:36:d8:4b:6f:30:62:17:20:f6:09:aa:d4:1d:e0:df:41:67:
         32:45:0a:31:49:0f:be:5a:99:6d:b7:a0:76:ce:09:c5:f0:a2:
         94:33:3a:62:f4:10:f2:69:8f:0e:8c:b7:4e:1e:c0:f6:dd:1d:
         7e:85:66:aa:ad:e1:ab:19:ae:c4:db:96:92:41:c7:3e:ad:32:
         d0:18:b6:96:d5:89:53:e4:a8:5a:b6:53:69:b4:1b:0a:a5:5b:
         ba:67:49:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVtrjzQ1nvDp/5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
YzI5Mzg3YmItZDhhMi00OWM2LTk4MGEtNjY0MmMxNWZjZWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf+mAAmOieCv4BSL2pKTG8uuNQqLI6zbytT/
7CwrnSqtx8jbC1Lnj/41TNcysvSFXqnfIRirHe4hI2B9mvp9in7IcJgP4Ka9s0BI
CvDooNLdilkWwvT2f6YVvD8sjbW13/I7pnVj3D/pY0p/Wb8xaYxbnPunWXHLim9H
FTH4giw/6aQFcf3nZf1GS/FxEihVfm4p8B0apsNxQtClJC6o6AFstiXbgyJ2zRMd
uNTvVC5qEuVY++vcEs7iXzKVY5GZMhLD4PBthF4z+clBkcWqYqv5cQcbCZLu8mkp
xCrr5ysGOXbsBqLdSdd1WeA/ltcVIAeZCEIljCPZWmJMkaWVbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNURaAS8gpHGssvrJZcNcX/mxW5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjBkMzdhYWEtZmZkMS0z
NTQ2LWJhZTgtODc3MjJlYjI3ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcVuu4NrDDV3cwfSNyZIKIwgO/V54fYwXWJ/sUZ6GweB6PKUWAm8hww
QfPaXU9xI+hSMtF2Qmp5GEDAlAC1py89OKUNf/kIYXWCr2oFf2rDydw6j5sVt9th
k9oVeZLEXyj6OkQdybZlw4/Pv65s4eUKxG17xMsmICUORUtuT7C0HTfjAcnOSOCA
igvm+ntxsOFvO2wplr1gLlYzeLlqtr9+QKs22EtvMGIXIPYJqtQd4N9BZzJFCjFJ
D75amW23oHbOCcXwopQzOmL0EPJpjw6Mt04ewPbdHX6FZqqt4asZrsTblpJBxz6t
MtAYtpbViVPkqFq2U2m0GwqlW7pnSfg=
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:40 2025 by rpki-client