Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3ab904f-165d-3b4c-8ca8-0155fa57a335.roa
File:                     a3ab904f-165d-3b4c-8ca8-0155fa57a335.roa (raw, json)
Hash identifier:          lsvHQoooDrhiQPbHJvlhRNitBFyXHBXSTb08uxThnuI=
Subject key identifier:   26:9A:29:FC:93:DF:67:9A:7A:3D:9A:00:CB:A9:8A:1D:EB:A6:11:BC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B0CDC2565E11EAC46DD14DC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3ab904f-165d-3b4c-8ca8-0155fa57a335.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     18403
IP address blocks:        23.32.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:25:65:e1:1e:ac:46:dd:14:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=5b003681-70fd-44e7-aa7a-8e94e784c47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8a:ab:40:d2:f7:8a:27:bb:f9:79:5c:f5:b7:
                    bf:41:9c:5b:60:24:ba:ff:34:cc:71:1b:c2:19:c0:
                    38:c3:5f:56:96:ca:be:39:8f:14:7e:08:ee:bb:05:
                    ea:ac:3d:5e:44:a7:1c:0f:97:5b:61:96:7e:8f:65:
                    d8:ba:1d:1d:9f:32:7c:40:4b:8c:de:3c:23:b6:d1:
                    ec:18:09:69:6e:fc:55:a1:0f:d5:dd:db:aa:3e:50:
                    35:41:9f:e0:8f:12:33:63:c8:48:05:38:1a:9f:52:
                    52:6b:a6:62:ad:28:0a:65:dc:71:f7:4a:a5:e9:19:
                    1f:76:88:16:27:3a:65:f8:85:e8:ab:04:38:5d:ff:
                    25:9a:f6:be:ab:76:a0:bf:49:29:2c:d2:5e:f2:1a:
                    55:0c:09:4a:42:43:7e:b3:6c:a6:8b:50:77:68:b8:
                    a9:4a:c6:f4:51:44:c7:83:ba:fd:ab:b6:ac:66:ab:
                    01:9a:99:6c:ab:6b:48:a2:b4:0e:2d:d4:bf:38:5d:
                    b9:8d:9b:a1:bf:73:72:a3:c9:78:5f:35:4c:64:62:
                    f3:0b:c1:3f:01:fb:c6:25:92:69:6d:09:68:5a:bc:
                    80:d1:9b:62:cf:05:6a:f2:d5:d8:8f:03:15:85:13:
                    ae:1f:4d:c8:44:81:c5:ad:2f:fd:7c:1c:b0:69:49:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:29:FC:93:DF:67:9A:7A:3D:9A:00:CB:A9:8A:1D:EB:A6:11:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3ab904f-165d-3b4c-8ca8-0155fa57a335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:96:e8:d2:6d:db:55:3c:ba:1a:0b:ec:83:39:08:b8:9f:d0:
         0e:6e:12:94:60:5a:f6:8f:23:fb:21:94:90:4c:97:29:e6:4b:
         1a:b6:cc:2e:e1:da:c8:b1:98:9f:44:5a:ef:69:11:4e:f0:b5:
         c3:85:77:ff:c6:9c:96:e5:a0:3f:b3:2c:49:d5:28:eb:bf:04:
         3d:7f:67:fb:de:20:64:ae:e6:3b:ea:5e:8a:8b:44:01:f3:ce:
         6c:22:8b:9a:30:76:8e:34:73:b3:24:36:ae:f9:ae:dd:94:9b:
         bb:cd:20:9d:7c:62:41:92:47:86:d2:9c:9b:96:a8:c2:20:33:
         2a:13:34:38:e8:50:a0:5c:48:02:d5:e4:7b:67:e0:4b:ec:e1:
         8e:d8:b3:d2:a2:06:0b:4d:00:0c:41:c1:12:f7:2e:89:ab:c1:
         52:ae:c2:bc:b7:00:75:e5:78:10:54:77:d7:6b:13:11:1e:53:
         b4:83:33:1e:a0:12:66:44:c5:0b:8c:43:b7:3e:d1:e8:62:89:
         a6:ef:ed:be:04:3e:b7:b0:30:90:93:d6:b7:03:94:4c:16:5f:
         67:1f:30:16:77:bd:23:41:ea:0a:6c:72:d5:3e:8f:2b:7d:44:
         db:a3:00:eb:f0:29:cb:a3:9d:4a:5c:4e:b3:61:d7:a2:fa:f4:
         5f:8a:ab:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CVl4R6sRt0U3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
NWIwMDM2ODEtNzBmZC00NGU3LWFhN2EtOGU5NGU3ODRjNDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IqrQNL3iie7+Xlc9be/QZxbYCS6/zTMcRvC
GcA4w19Wlsq+OY8UfgjuuwXqrD1eRKccD5dbYZZ+j2XYuh0dnzJ8QEuM3jwjttHs
GAlpbvxVoQ/V3duqPlA1QZ/gjxIzY8hIBTgan1JSa6ZirSgKZdxx90ql6RkfdogW
Jzpl+IXoqwQ4Xf8lmva+q3agv0kpLNJe8hpVDAlKQkN+s2ymi1B3aLipSsb0UUTH
g7r9q7asZqsBmplsq2tIorQOLdS/OF25jZuhv3Nyo8l4XzVMZGLzC8E/AfvGJZJp
bQloWryA0ZtizwVq8tXYjwMVhROuH03IRIHFrS/9fBywaUkckwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaaKfyT32eaej2aAMupih3rphG8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTNhYjkwNGYtMTY1ZC0z
YjRjLThjYTgtMDE1NWZhNTdhMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyBKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAuW6NJt21U8uhoL7IM5CLif0A5uEpRgWvaPI/shlJBMlynmSxq2zC7h
2sixmJ9EWu9pEU7wtcOFd//GnJbloD+zLEnVKOu/BD1/Z/veIGSu5jvqXoqLRAHz
zmwii5owdo40c7MkNq75rt2Um7vNIJ18YkGSR4bSnJuWqMIgMyoTNDjoUKBcSALV
5Htn4Evs4Y7Ys9KiBgtNAAxBwRL3LomrwVKuwry3AHXleBBUd9drExEeU7SDMx6g
EmZExQuMQ7c+0ehiiabv7b4EPrewMJCT1rcDlEwWX2cfMBZ3vSNB6gpsctU+jyt9
RNujAOvwKcujnUpcTrNh16L69F+Kqyc=
-----END CERTIFICATE-----
Generated at Sat Sep 6 05:05:40 2025 by rpki-client