Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad408de4-06f3-32e5-854b-384edc90ba36.roa
File:                     ad408de4-06f3-32e5-854b-384edc90ba36.roa (raw, json)
Hash identifier:          T6QCb7XEiFDjzYZE7jaT/CLE+xF/8AaAFAnS5Bcwgng=
Subject key identifier:   D0:04:D6:07:8D:E3:5F:B8:8D:9E:02:EF:DC:03:DE:9C:69:0F:C1:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3E78A3DAC44094B4F4840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad408de4-06f3-32e5-854b-384edc90ba36.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        71.230.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:e7:8a:3d:ac:44:09:4b:4f:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=f3e93767-d29c-4e54-8c8f-9deb6689fcd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a3:22:06:ab:00:96:16:cf:f1:9f:9b:49:ba:
                    40:93:f4:76:04:3b:fe:47:67:e7:a2:f6:84:3c:75:
                    35:f2:c8:30:dd:cc:a7:32:9c:76:4a:09:d2:d1:0a:
                    93:de:15:5c:9d:cc:2b:22:df:47:da:9b:54:42:62:
                    89:53:61:f8:9a:7f:97:67:63:03:6a:7e:0f:e5:7e:
                    91:92:c9:2d:d3:0a:d3:f4:4c:f1:fc:80:27:85:50:
                    01:7a:62:44:7e:f6:54:4a:21:34:19:b8:ba:a2:fa:
                    6b:44:52:b5:c3:9d:f7:c1:9c:7f:6f:50:ce:f8:b8:
                    3d:5d:ad:f0:1c:05:c9:c0:6b:4b:31:48:53:cf:db:
                    1e:3c:cf:e6:0c:75:55:61:58:4e:ed:0b:59:5d:49:
                    76:1d:0a:d3:10:7a:66:99:a7:5f:71:f2:3a:be:34:
                    87:32:ce:03:27:f1:c4:4b:35:b7:6d:5d:86:7d:6f:
                    61:3b:88:c0:43:92:46:60:08:4b:ef:57:99:c2:66:
                    c7:f4:94:09:c9:93:51:f2:74:35:51:b2:df:ee:55:
                    18:05:f5:68:42:93:76:ae:f5:5f:36:32:df:d2:4b:
                    58:40:a2:db:01:ac:a1:89:16:b3:c9:b9:a3:52:cb:
                    f7:68:bf:3d:08:79:a2:eb:96:bc:f9:b0:d8:06:5c:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:04:D6:07:8D:E3:5F:B8:8D:9E:02:EF:DC:03:DE:9C:69:0F:C1:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad408de4-06f3-32e5-854b-384edc90ba36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.230.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b2:9a:f6:67:07:74:46:ef:d6:83:d4:b6:a4:86:9a:26:dc:
         5a:4d:05:2d:81:90:16:e8:ae:5e:77:82:4b:0a:4a:e7:b4:79:
         3d:00:eb:66:6c:b1:8e:63:15:99:0b:11:91:a7:02:1f:85:e4:
         07:d6:26:0f:bb:86:87:52:58:ba:4f:b6:c0:ed:1b:3f:15:74:
         90:77:7b:0d:f4:c0:62:b0:2f:4b:55:82:fc:e2:cd:1d:24:58:
         5b:2d:05:b0:38:8e:03:19:88:fa:e3:86:e9:d9:3c:92:eb:68:
         b4:c1:2f:ed:59:d8:dd:b5:06:3a:26:4e:d3:b2:92:c5:05:85:
         43:b4:e2:bd:92:70:5a:f3:9a:01:f6:7c:e2:a4:cc:05:07:33:
         3b:ec:96:c9:7b:31:99:2e:ad:39:6b:cc:b4:f6:9a:0a:4e:52:
         19:03:9f:00:e9:0d:5d:3f:ad:25:c9:75:72:a2:0e:35:bf:c9:
         16:95:5f:71:03:7a:b5:d8:7d:c7:62:45:70:98:11:98:20:ca:
         23:32:e0:ac:b2:b8:a5:44:06:e3:a2:93:d1:a0:d7:ca:c4:eb:
         aa:16:bd:f4:f6:be:ab:94:f7:0b:82:68:78:97:ef:9e:32:c1:
         76:f8:c8:54:46:65:b5:a0:10:cf:d8:2a:c8:87:85:e3:96:c0:
         cd:5b:11:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw+eKPaxECUtPSEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
ZjNlOTM3NjctZDI5Yy00ZTU0LThjOGYtOWRlYjY2ODlmY2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqMiBqsAlhbP8Z+bSbpAk/R2BDv+R2fnovaE
PHU18sgw3cynMpx2SgnS0QqT3hVcncwrIt9H2ptUQmKJU2H4mn+XZ2MDan4P5X6R
kskt0wrT9Ezx/IAnhVABemJEfvZUSiE0Gbi6ovprRFK1w533wZx/b1DO+Lg9Xa3w
HAXJwGtLMUhTz9sePM/mDHVVYVhO7QtZXUl2HQrTEHpmmadfcfI6vjSHMs4DJ/HE
SzW3bV2GfW9hO4jAQ5JGYAhL71eZwmbH9JQJyZNR8nQ1UbLf7lUYBfVoQpN2rvVf
NjLf0ktYQKLbAayhiRazybmjUsv3aL89CHmi65a8+bDYBlwz+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAE1geN41+4jZ4C79wD3pxpD8H6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQ0MDhkZTQtMDZmMy0z
MmU1LTg1NGItMzg0ZWRjOTBiYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+bgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKiymvZnB3RG79aD1Lakhpom3FpNBS2BkBborl53gksKSue0eT0A62Zs
sY5jFZkLEZGnAh+F5AfWJg+7hodSWLpPtsDtGz8VdJB3ew30wGKwL0tVgvzizR0k
WFstBbA4jgMZiPrjhunZPJLraLTBL+1Z2N21BjomTtOyksUFhUO04r2ScFrzmgH2
fOKkzAUHMzvslsl7MZkurTlrzLT2mgpOUhkDnwDpDV0/rSXJdXKiDjW/yRaVX3ED
erXYfcdiRXCYEZggyiMy4KyyuKVEBuOik9Gg18rE66oWvfT2vquU9wuCaHiX754y
wXb4yFRGZbWgEM/YKsiHheOWwM1bEQU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:26:23 2025 by rpki-client