Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/80baa659-5916-3808-be13-418862d8ff10.roa
File:                     80baa659-5916-3808-be13-418862d8ff10.roa (raw, json)
Hash identifier:          8yOKtywwxKD9kQdpdzHKBreiS8TAgJlLWooNyh2h3aw=
Subject key identifier:   F1:A0:37:5D:69:63:E5:82:5C:8C:09:D3:21:7E:45:54:4E:CA:97:8B
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849CD34C0A0A315AC0C5C092140
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/80baa659-5916-3808-be13-418862d8ff10.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     11537
IP address blocks:        163.253.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:c0:a0:a3:15:ac:0c:5c:09:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=511fe8ad-2a67-4ab1-9e3b-55f49a516c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:82:4b:cd:96:4b:14:70:e3:46:3d:52:9d:18:
                    9f:6c:ce:cf:1f:46:c2:1b:ad:6c:55:a0:4a:4a:d0:
                    37:a6:ff:3e:37:c3:80:a6:bd:02:44:8f:44:e1:e1:
                    4c:38:03:37:c5:d0:88:29:d6:6d:2b:88:90:43:b8:
                    a6:5f:f2:fa:5c:b6:fb:3e:d6:89:14:ad:d3:3b:88:
                    c5:3e:cb:0a:30:b0:4e:42:7d:30:a5:6c:39:0d:61:
                    ac:03:b4:66:ac:d8:fa:4a:68:45:4a:3c:de:02:c1:
                    bc:be:cb:b2:ca:cb:ee:5c:24:2c:bf:c8:f8:06:25:
                    05:db:57:64:1c:bf:15:9c:eb:5c:24:6c:3a:30:07:
                    df:08:02:39:d1:86:92:73:81:bf:d7:a0:61:c1:09:
                    ea:90:66:0b:e7:b9:f1:ce:88:de:a7:b0:45:0e:dc:
                    d9:2a:5f:31:77:0a:ca:f3:a6:25:21:b8:cd:ba:cc:
                    84:31:e1:84:ce:1f:57:7d:b0:06:8f:a6:f6:f2:8c:
                    fe:74:19:3a:71:cc:15:7c:46:4c:81:ff:c2:0f:e5:
                    c2:79:be:25:4b:84:81:38:5f:44:f8:21:74:3d:e5:
                    9c:92:d7:66:92:bf:99:0b:71:71:8f:5f:46:56:1d:
                    25:e1:83:ef:6c:b8:f6:27:5b:f3:70:bc:19:c7:3f:
                    f4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A0:37:5D:69:63:E5:82:5C:8C:09:D3:21:7E:45:54:4E:CA:97:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/80baa659-5916-3808-be13-418862d8ff10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:f8:ac:e8:55:bb:c2:84:ea:f8:e7:b2:bd:9c:e1:ae:b5:
         6b:8c:8c:e3:99:ad:3f:d9:d5:14:af:fe:cd:18:26:1f:7b:8f:
         99:46:ad:9a:7a:9e:5b:48:fd:9f:0f:51:50:73:c8:ac:23:68:
         4e:d5:df:b4:ec:f5:71:85:5f:01:45:7f:92:a1:e1:c6:c5:99:
         f4:f9:35:f1:60:d7:8d:d5:cb:20:91:2d:b0:f8:ec:f7:21:77:
         db:0c:a4:ce:66:e4:3b:8e:93:2b:7e:81:c3:d6:db:d6:3b:12:
         2d:e8:52:ac:db:dd:fc:0a:15:8f:c1:2f:e7:4c:11:0b:53:e8:
         d1:1c:4c:20:8b:2f:ef:f4:12:8e:32:5f:7e:73:ae:44:fc:f6:
         9d:23:51:8e:49:ed:30:45:f5:4a:82:00:32:4c:e7:43:63:10:
         7f:da:d3:a2:77:ae:27:44:32:e7:73:17:f9:25:0c:d1:ec:ca:
         17:15:4e:77:83:b7:12:b3:5e:41:da:b6:9f:1d:eb:31:a0:ff:
         eb:a1:7f:3c:0a:b4:71:d1:40:23:96:d9:af:05:9e:f1:45:92:
         01:01:8b:b8:a8:71:9e:ef:c4:a2:e7:23:4a:a4:aa:c2:d3:9f:
         fe:89:88:9c:32:28:ab:01:f2:f2:9b:60:56:27:e3:e9:d1:5c:
         82:32:bd:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMCgoxWsDFwJIUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk
NTExZmU4YWQtMmE2Ny00YWIxLTllM2ItNTVmNDlhNTE2YzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIJLzZZLFHDjRj1SnRifbM7PH0bCG61sVaBK
StA3pv8+N8OApr0CRI9E4eFMOAM3xdCIKdZtK4iQQ7imX/L6XLb7PtaJFK3TO4jF
PssKMLBOQn0wpWw5DWGsA7RmrNj6SmhFSjzeAsG8vsuyysvuXCQsv8j4BiUF21dk
HL8VnOtcJGw6MAffCAI50YaSc4G/16BhwQnqkGYL57nxzojep7BFDtzZKl8xdwrK
86YlIbjNusyEMeGEzh9XfbAGj6b28oz+dBk6ccwVfEZMgf/CD+XCeb4lS4SBOF9E
+CF0PeWcktdmkr+ZC3Fxj19GVh0l4YPvbLj2J1vzcLwZxz/0OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGgN11pY+WCXIwJ0yF+RVROypeLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvODBiYWE2NTktNTkxNi0z
ODA4LWJlMTMtNDE4ODYyZDhmZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCb+KzoVbvChOr457K9nOGutWuMjOOZrT/Z1RSv/s0YJh97j5lGrZp6
nltI/Z8PUVBzyKwjaE7V37Ts9XGFXwFFf5Kh4cbFmfT5NfFg143VyyCRLbD47Pch
d9sMpM5m5DuOkyt+gcPW29Y7Ei3oUqzb3fwKFY/BL+dMEQtT6NEcTCCLL+/0Eo4y
X35zrkT89p0jUY5J7TBF9UqCADJM50NjEH/a06J3ridEMudzF/klDNHsyhcVTneD
txKzXkHatp8d6zGg/+uhfzwKtHHRQCOW2a8FnvFFkgEBi7iocZ7vxKLnI0qkqsLT
n/6JiJwyKKsB8vKbYFYn4+nRXIIyvXU=
-----END CERTIFICATE-----
Generated at Mon May 12 19:55:35 2025 by rpki-client