Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa
File:                     dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa (raw, json)
Hash identifier:          i2d/rl76gfzU8k0l82fFVLzpbPNjJSViYzrykPUQjJY=
Subject key identifier:   53:94:3E:F8:D3:C5:3D:ED:70:84:31:B8:02:96:05:D7:A6:E0:38:7D
Certificate issuer:       /CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
Certificate serial:       010D0C9F4328584A0C0562E9AF5148C807E1D840
Authority key identifier: F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     53654
IP address blocks:        23.171.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:62:e9:af:51:48:c8:07:e1:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=434a4b29-8d75-41a8-81e4-1dc197dddd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:7d:c7:9b:07:31:4a:90:99:b8:3b:a5:eb:
                    45:dd:32:2a:f1:73:57:b6:54:e0:aa:a1:f7:02:bd:
                    7d:0a:81:da:df:f6:aa:ba:4a:6a:70:fe:c2:d3:1e:
                    d3:e2:53:d7:0b:cf:62:59:63:c7:79:16:22:68:59:
                    73:4f:d2:ca:02:56:26:95:d7:c6:58:85:28:e6:3c:
                    8c:43:91:86:8c:25:a9:73:b9:b3:ee:63:91:a9:62:
                    8a:6d:14:ad:93:98:59:03:df:63:89:c7:6f:c6:8c:
                    07:09:41:5b:06:63:e1:63:af:9f:6c:45:23:08:df:
                    ec:38:22:3d:06:8c:f4:aa:ec:51:52:1e:22:f0:98:
                    46:32:9d:fd:83:09:e3:0f:1d:43:ee:ac:46:e8:cc:
                    bd:ff:c6:0f:23:92:00:b9:c4:5e:95:97:a1:74:1a:
                    e1:29:40:56:d5:1c:17:f3:dd:68:24:bb:ea:0e:c7:
                    dc:42:36:37:6f:82:54:75:ac:37:8b:18:6d:c8:66:
                    8b:8e:06:b4:58:f3:55:43:9f:15:8a:2a:54:65:53:
                    d3:50:c0:19:dd:78:3a:b1:3d:05:ef:7c:be:3f:aa:
                    68:3e:e0:6c:6b:12:ce:f5:ad:7b:59:8c:20:2c:b5:
                    aa:d9:ef:fe:56:38:73:a9:73:4b:82:1f:2e:9f:d2:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:94:3E:F8:D3:C5:3D:ED:70:84:31:B8:02:96:05:D7:A6:E0:38:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl

            X509v3 Authority Key Identifier:
                keyid:F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:e5:b6:70:22:ee:5a:f9:59:19:ad:55:22:10:35:0c:d4:74:
         f1:3a:44:e5:a1:0a:a7:cf:18:bd:91:86:32:b3:a0:f0:41:06:
         ec:dd:a6:a6:c1:6a:99:07:ce:2c:60:fc:7b:2c:6f:66:f2:65:
         f0:5f:8c:99:f4:d3:82:7c:84:86:8c:9f:c3:c7:ce:de:e4:cf:
         c9:6e:bc:5a:07:1c:85:46:fd:5e:92:4c:cd:c3:7e:a6:5e:ab:
         a7:b3:2f:58:50:c8:f1:fd:c9:bf:cf:5e:fe:25:a7:d6:5a:00:
         c2:19:c0:7a:93:4f:b2:dc:52:f3:7d:05:98:fd:3b:b9:fc:70:
         42:05:9e:ad:f2:66:82:68:43:ce:fa:70:f6:42:f5:b7:39:30:
         60:0e:aa:4c:18:ca:3e:ee:8b:2f:b2:a3:df:d9:cd:32:4d:0c:
         99:99:29:f5:3e:72:29:60:35:c2:91:da:2a:7a:99:ac:2f:a7:
         ef:f3:6e:6f:eb:e1:22:fa:64:eb:3c:56:a2:66:78:16:df:c6:
         a2:9e:21:44:26:4a:fb:af:eb:19:41:a7:12:84:36:93:2d:9d:
         97:32:98:30:84:05:19:cc:3c:59:50:5e:30:2c:5d:24:63:6a:
         2c:09:e8:9c:c7:6c:7b:d1:90:42:74:c4:76:77:0d:48:9c:ef:
         ff:13:1e:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWLpr1FIyAfh2EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRmNmJjYWYtYzA2OC00NzM3LWJjZTQtMTVhNDg5ZGM1
NGY4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NDM0YTRiMjktOGQ3NS00MWE4LTgxZTQtMWRjMTk3ZGRkZDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBJ9x5sHMUqQmbg7petF3TIq8XNXtlTgqqH3
Ar19CoHa3/aqukpqcP7C0x7T4lPXC89iWWPHeRYiaFlzT9LKAlYmldfGWIUo5jyM
Q5GGjCWpc7mz7mORqWKKbRStk5hZA99jicdvxowHCUFbBmPhY6+fbEUjCN/sOCI9
Boz0quxRUh4i8JhGMp39gwnjDx1D7qxG6My9/8YPI5IAucRelZehdBrhKUBW1RwX
891oJLvqDsfcQjY3b4JUdaw3ixhtyGaLjga0WPNVQ58ViipUZVPTUMAZ3Xg6sT0F
73y+P6poPuBsaxLO9a17WYwgLLWq2e/+VjhzqXNLgh8un9LkoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOUPvjTxT3tcIQxuAKWBdem4Dh9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNGY2
YmNhZi1jMDY4LTQ3MzctYmNlNC0xNWE0ODlkYzU0ZjgvZGJjNzc3YmEtZThiZC0z
ODg1LThmY2QtNDc1ZThkYzUwODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTRmNmJjYWYtYzA2OC00NzM3LWJj
ZTQtMTVhNDg5ZGM1NGY4L2E0ZjZiY2FmLWMwNjgtNDczNy1iY2U0LTE1YTQ4OWRj
NTRmOC5jcmwwHwYDVR0jBBgwFoAU8QxapLejbseUcsfeIxkoi7GTs5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hNGY2YmNhZi1jMDY4LTQ3MzctYmNlNC0xNWE0
ODlkYzU0ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6sYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ3ltnAi7lr5WRmtVSIQNQzUdPE6ROWhCqfPGL2RhjKzoPBBBuzdpqbB
apkHzixg/Hssb2byZfBfjJn004J8hIaMn8PHzt7kz8luvFoHHIVG/V6STM3DfqZe
q6ezL1hQyPH9yb/PXv4lp9ZaAMIZwHqTT7LcUvN9BZj9O7n8cEIFnq3yZoJoQ876
cPZC9bc5MGAOqkwYyj7uiy+yo9/ZzTJNDJmZKfU+cilgNcKR2ip6mawvp+/zbm/r
4SL6ZOs8VqJmeBbfxqKeIUQmSvuv6xlBpxKENpMtnZcymDCEBRnMPFlQXjAsXSRj
aiwJ6JzHbHvRkEJ0xHZ3DUic7/8THtQ=
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:44:05 2025 by rpki-client