Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7112c104-db43-3390-9015-a6a18c6f0407.roa
File:                     7112c104-db43-3390-9015-a6a18c6f0407.roa (raw, json)
Hash identifier:          vCNqa4q24VXphp8sRIwfelYgntB34HxmNpGR9LinWok=
Subject key identifier:   79:4C:88:4F:63:E8:FA:76:D7:1A:D8:44:A3:E1:31:35:30:64:A2:9A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849D977EE92B6E7B402A0A8C4E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7112c104-db43-3390-9015-a6a18c6f0407.roa
Signing time:             Wed 14 May 2025 10:25:53 +0000
ROA not before:           Wed 14 May 2025 10:25:53 +0000
ROA not after:            Tue 12 Aug 2025 10:25:53 +0000
asID:                     16625
IP address blocks:        23.0.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d9:77:ee:92:b6:e7:b4:02:a0:a8:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 10:25:53 2025 GMT
            Not After : Aug 12 10:25:53 2025 GMT
        Subject: CN=aa848740-7a7b-4779-8d98-83282f5817bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:a9:5e:f0:aa:3b:58:ef:d2:8b:f0:98:14:
                    90:5c:27:64:2f:fc:fd:ad:69:b2:d7:50:2e:ad:1d:
                    14:ba:ba:0d:c0:3f:12:7b:2d:2c:0c:98:d6:74:b3:
                    df:0c:bf:61:8b:c2:aa:98:19:3e:ad:5e:cd:86:20:
                    de:8e:36:b8:3f:d9:c5:c1:29:93:e5:dc:a2:cd:91:
                    26:a8:e4:3f:02:1c:39:b7:26:e8:9a:aa:59:7c:e9:
                    1f:fb:00:ff:38:fd:65:32:bf:d7:bc:56:5d:0b:70:
                    af:af:ea:8b:97:b4:e3:35:2e:50:36:8c:fe:69:8b:
                    9d:81:e1:ac:4e:ad:b5:27:fc:f3:07:fc:37:e2:42:
                    8e:c5:6c:ae:dc:89:42:24:ad:cd:ab:8f:53:2f:8b:
                    ed:80:c4:54:88:d2:a3:33:8f:d4:b6:f7:74:49:ff:
                    d1:05:50:ef:76:69:02:f3:61:b7:8c:60:ae:1c:58:
                    ed:5a:b0:e2:07:a3:93:75:24:a8:e1:aa:85:4c:84:
                    9c:c4:c5:ab:c2:c5:fa:d6:ba:a5:98:e6:b0:10:68:
                    84:d5:96:f5:a0:f3:e4:70:2c:32:b8:40:2d:d2:e6:
                    22:2f:10:94:fc:a1:77:8a:6f:cf:ed:19:7f:06:b1:
                    08:b9:ff:60:59:2b:66:04:23:f8:50:73:1c:5b:e6:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4C:88:4F:63:E8:FA:76:D7:1A:D8:44:A3:E1:31:35:30:64:A2:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7112c104-db43-3390-9015-a6a18c6f0407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.0.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:19:30:8a:88:c4:f9:08:48:5f:b0:d7:1c:42:76:a5:14:69:
         e7:d0:50:96:0f:73:14:85:ff:25:59:1c:5a:a8:3e:53:86:41:
         5c:ce:d6:f8:82:0c:ae:37:dc:e0:20:63:2a:59:c6:05:50:d2:
         bd:95:b8:8c:fb:6f:ca:d1:d5:2f:5f:02:9f:10:f3:a2:2f:33:
         bf:47:57:54:e8:ac:8b:4b:a0:5a:e0:15:16:07:35:d2:03:9b:
         23:6a:bf:4b:b8:aa:14:7e:ae:8d:4d:a2:be:75:df:2b:f4:e6:
         10:f6:8e:b8:b3:11:09:40:4b:3d:08:b8:e0:d3:1d:1d:cc:74:
         16:f2:c4:ea:40:f3:dd:db:07:d5:ea:45:a6:e2:80:7c:3e:5b:
         f5:2b:19:d6:ba:c3:b2:44:21:a2:6c:a0:0c:18:bb:d7:57:fe:
         35:74:db:84:44:b6:13:2d:c3:4e:a0:74:b5:5a:7a:85:f3:ef:
         68:a7:a5:b9:e1:62:5c:b9:4c:a6:15:c1:ba:ce:88:7e:20:8f:
         ef:9c:fe:ea:94:13:18:67:85:dc:2a:41:38:22:84:24:68:00:
         d5:dc:9a:5f:bb:63:fc:68:07:35:6a:7a:a0:17:b4:ed:f9:5b:
         31:b2:81:76:c6:e3:63:a9:39:7a:3a:d0:c8:e9:49:f4:7d:c7:
         f8:d5:75:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZd+6Stue0AqCoxOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxNDEwMjU1M1oXDTI1MDgxMjEwMjU1M1owLzEtMCsGA1UEAxMk
YWE4NDg3NDAtN2E3Yi00Nzc5LThkOTgtODMyODJmNTgxN2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr36pXvCqO1jv0ovwmBSQXCdkL/z9rWmy11Au
rR0UuroNwD8Sey0sDJjWdLPfDL9hi8KqmBk+rV7NhiDejja4P9nFwSmT5dyizZEm
qOQ/Ahw5tybomqpZfOkf+wD/OP1lMr/XvFZdC3Cvr+qLl7TjNS5QNoz+aYudgeGs
Tq21J/zzB/w34kKOxWyu3IlCJK3Nq49TL4vtgMRUiNKjM4/Utvd0Sf/RBVDvdmkC
82G3jGCuHFjtWrDiB6OTdSSo4aqFTIScxMWrwsX61rqlmOawEGiE1Zb1oPPkcCwy
uEAt0uYiLxCU/KF3im/P7Rl/BrEIuf9gWStmBCP4UHMcW+bOFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlMiE9j6Pp21xrYRKPhMTUwZKKaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzExMmMxMDQtZGI0My0z
MzkwLTkwMTUtYTZhMThjNmYwNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwCkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4ZMIqIxPkISF+w1xxCdqUUaefQUJYPcxSF/yVZHFqoPlOGQVzO1viC
DK433OAgYypZxgVQ0r2VuIz7b8rR1S9fAp8Q86IvM79HV1TorItLoFrgFRYHNdID
myNqv0u4qhR+ro1Nor513yv05hD2jrizEQlASz0IuODTHR3MdBbyxOpA893bB9Xq
RabigHw+W/UrGda6w7JEIaJsoAwYu9dX/jV024REthMtw06gdLVaeoXz72inpbnh
Yly5TKYVwbrOiH4gj++c/uqUExhnhdwqQTgihCRoANXcml+7Y/xoBzVqeqAXtO35
WzGygXbG42OpOXo60MjpSfR9x/jVde8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:55:41 2025 by rpki-client