Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/94b26837-184a-30cb-8311-194f75be68b5.roa
File:                     94b26837-184a-30cb-8311-194f75be68b5.roa (raw, json)
Hash identifier:          c8Zs6m/sG4oRqdWXYkUXRMhvsBcJn7fR0SZW3B2OXhc=
Subject key identifier:   C3:56:44:F3:86:E0:AE:50:0C:86:86:49:AD:06:A0:C1:0E:A9:13:45
Certificate issuer:       /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690
Certificate serial:       010D0C9F4328584B4081A629E6133E5A7AD0BB20
Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/94b26837-184a-30cb-8311-194f75be68b5.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     207420
IP address blocks:        23.144.248.0/24 maxlen: 24
                          2602:fb3c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:a6:29:e6:13:3e:5a:7a:d0:bb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=ee8ff8b8-faaa-4015-bf20-ade6bccb6ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:ab:32:e8:14:d6:29:bb:23:d1:b7:de:bc:
                    4b:13:ba:70:ed:c8:47:94:04:1f:fd:09:8b:2c:82:
                    64:bf:42:3f:e9:1e:21:46:c2:b4:31:b4:e4:7c:af:
                    eb:f4:03:76:63:03:cd:94:f3:2f:bf:30:0b:64:aa:
                    be:3b:eb:3a:e1:5a:43:6e:df:03:55:49:47:73:7c:
                    c9:21:8c:76:f6:4c:f3:83:f0:3d:77:a0:5a:0c:d0:
                    a1:9f:03:7b:c4:27:fe:51:1a:ab:74:c1:ff:f2:c6:
                    b3:91:63:10:57:e7:d9:bc:85:09:55:80:c2:c1:fa:
                    f5:de:7b:93:5a:59:9b:10:be:cc:a2:4b:b9:9b:9f:
                    20:2b:72:47:4e:41:56:d2:62:3d:e5:5c:4f:e9:af:
                    e7:ed:00:4b:7a:16:57:2f:4c:93:4d:d9:22:fd:08:
                    ae:0b:33:13:3d:d2:5e:1d:95:d2:10:5c:fb:55:e5:
                    84:d0:ae:e5:43:b3:29:89:1c:30:63:9c:08:d9:71:
                    c9:85:e4:f9:b7:dc:18:d9:61:bb:b1:91:08:aa:24:
                    5f:72:c8:46:0a:38:49:f6:86:90:f3:03:fc:b5:bf:
                    e4:e1:64:0d:c6:3c:e5:4d:d5:26:62:6b:e7:3f:32:
                    7d:91:2a:28:6b:f9:78:c5:c9:9d:77:87:06:e3:c7:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:56:44:F3:86:E0:AE:50:0C:86:86:49:AD:06:A0:C1:0E:A9:13:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/94b26837-184a-30cb-8311-194f75be68b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl

            X509v3 Authority Key Identifier:
                keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.248.0/24
                IPv6:
                  2602:fb3c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:96:cd:72:d4:d9:4b:59:e4:c4:d1:05:9d:a1:08:22:14:cf:
         65:f4:81:d4:9d:d1:23:fa:cc:eb:21:7f:94:eb:0d:8d:9d:f6:
         ca:8e:4a:e5:9a:35:de:0a:75:32:1c:bf:81:48:ef:7c:26:24:
         a2:dc:34:21:15:09:e0:7b:30:bd:51:66:dd:1e:2d:eb:10:d7:
         40:11:c6:0e:d2:ec:b7:60:bd:bd:34:66:6b:ce:86:78:7e:d7:
         d3:eb:57:ec:dc:ba:bb:da:86:50:5a:79:bc:20:97:fd:ef:5a:
         5c:68:0c:7c:4e:d4:31:df:6c:5a:3b:90:37:6f:d5:f5:d3:85:
         67:6d:ff:57:5e:0f:61:e3:7c:22:6d:48:85:a8:54:fe:f9:ae:
         ea:0b:5b:6a:2b:1e:de:39:5a:0d:e9:54:b4:fd:26:89:3b:8a:
         99:42:96:2a:92:7b:bb:a6:08:4c:c5:3e:89:76:31:01:aa:c5:
         3e:06:0c:3a:ef:cc:c2:d2:15:cb:14:b5:cb:06:87:cc:1b:00:
         c2:17:ff:4c:55:7e:33:01:bd:96:f3:af:fb:75:e9:69:02:a4:
         8f:e9:0d:e6:f4:4e:34:4a:81:7e:fa:88:5d:d1:3d:7b:f1:a5:
         71:74:56:5f:9a:25:cc:41:87:d4:fa:e2:b3:b1:1e:ce:ea:fe:
         a6:97:68:94
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtAgaYp5hM+WnrQuyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx
NjkwMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk
ZWU4ZmY4YjgtZmFhYS00MDE1LWJmMjAtYWRlNmJjY2I2ZWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVyrMugU1im7I9G33rxLE7pw7chHlAQf/QmL
LIJkv0I/6R4hRsK0MbTkfK/r9AN2YwPNlPMvvzALZKq+O+s64VpDbt8DVUlHc3zJ
IYx29kzzg/A9d6BaDNChnwN7xCf+URqrdMH/8sazkWMQV+fZvIUJVYDCwfr13nuT
WlmbEL7Moku5m58gK3JHTkFW0mI95VxP6a/n7QBLehZXL0yTTdki/QiuCzMTPdJe
HZXSEFz7VeWE0K7lQ7MpiRwwY5wI2XHJheT5t9wY2WG7sZEIqiRfcshGCjhJ9oaQ
8wP8tb/k4WQNxjzlTdUmYmvnPzJ9kSooa/l4xcmdd4cG48e0wwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFMNWRPOG4K5QDIaGSa0GoMEOqRNFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh
MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvOTRiMjY4MzctMTg0YS0z
MGNiLTgzMTEtMTk0Zjc1YmU2OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5
MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5
MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2
ZGQxOTE2OTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5D4MA4E
AgACMAgDBgQmAvs8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpls1y1NlLWeTE0QWdoQgiFM9l9IHUndEj
+szrIX+U6w2NnfbKjkrlmjXeCnUyHL+BSO98JiSi3DQhFQngezC9UWbdHi3rENdA
EcYO0uy3YL29NGZrzoZ4ftfT61fs3Lq72oZQWnm8IJf971pcaAx8TtQx32xaO5A3
b9X104Vnbf9XXg9h43wibUiFqFT++a7qC1tqKx7eOVoN6VS0/SaJO4qZQpYqknu7
pghMxT6JdjEBqsU+Bgw678zC0hXLFLXLBofMGwDCF/9MVX4zAb2W86/7delpAqSP
6Q3m9E40SoF++ohd0T178aVxdFZfmiXMQYfU+uKzsR7O6v6ml2iU
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:05 2025 by rpki-client