Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b/6efd731b-0f94-3d06-bc84-a38322c570fa.roa
File:                     6efd731b-0f94-3d06-bc84-a38322c570fa.roa (raw, json)
Hash identifier:          4xKwTJ6wqkzeEoByIS9lzBrai2GrVF+KaOxw1sHrmCc=
Subject key identifier:   E3:C5:D3:A6:C6:0A:5E:C2:AD:7F:76:DC:5F:9E:36:8A:11:9E:72:06
Certificate issuer:       /CN=9b0fc877-c837-44ab-9292-c0d36898de7b
Certificate serial:       010D0C9F4328584AC30EC4C99FCD84340E043280
Authority key identifier: 61:2C:F2:F5:AE:09:B4:17:2C:60:6F:58:16:8E:E9:40:04:CB:51:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b/6efd731b-0f94-3d06-bc84-a38322c570fa.roa
Signing time:             Wed 06 Aug 2025 02:33:09 +0000
ROA not before:           Wed 06 Aug 2025 02:33:09 +0000
ROA not after:            Tue 04 Nov 2025 03:33:09 +0000
asID:                     7029
IP address blocks:        23.143.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b/9b0fc877-c837-44ab-9292-c0d36898de7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b/9b0fc877-c837-44ab-9292-c0d36898de7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c3:0e:c4:c9:9f:cd:84:34:0e:04:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0fc877-c837-44ab-9292-c0d36898de7b
        Validity
            Not Before: Aug  6 02:33:09 2025 GMT
            Not After : Nov  4 03:33:09 2025 GMT
        Subject: CN=b2b820b4-02e8-4ae1-8338-4a604c414051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:1e:72:5a:1e:ff:08:d7:ec:ed:38:c5:de:
                    5b:c2:55:f1:65:67:af:2c:00:56:e3:a1:bc:e6:e2:
                    fb:bd:ff:30:ea:17:f7:7e:6b:8a:8c:e7:af:aa:12:
                    2a:9e:c3:28:78:ee:94:2b:b5:4a:f4:cd:aa:08:b9:
                    14:39:bd:19:cd:22:28:e8:2c:23:0e:5c:61:7c:39:
                    68:be:4b:11:11:8c:84:e2:fd:27:3f:d0:b5:c1:ba:
                    0e:d5:e3:39:2a:94:c1:08:9a:2a:29:97:c7:de:7f:
                    68:d9:99:53:5b:94:12:13:09:fc:62:b6:36:39:04:
                    81:3a:0c:42:c3:5e:41:43:df:73:1f:84:cd:e4:99:
                    7f:a5:33:92:30:6a:79:75:90:17:ed:cb:c0:e1:b7:
                    72:cd:34:64:99:f3:28:13:af:24:6d:c9:16:99:62:
                    55:5f:3a:9d:62:a6:36:66:a8:f9:69:c1:b5:3d:d8:
                    b8:59:95:04:c4:46:48:f6:d8:94:4b:81:20:0b:00:
                    8c:bf:7c:c0:2e:0b:87:47:85:84:a8:99:e7:75:46:
                    36:e6:05:2c:90:71:99:5a:99:de:8d:60:d4:51:ea:
                    6e:a9:11:7f:45:96:5f:8f:f3:d1:3f:86:8a:36:c9:
                    c5:dc:c6:be:e8:8c:6e:47:b7:e8:e7:05:05:a0:17:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C5:D3:A6:C6:0A:5E:C2:AD:7F:76:DC:5F:9E:36:8A:11:9E:72:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b/6efd731b-0f94-3d06-bc84-a38322c570fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b/9b0fc877-c837-44ab-9292-c0d36898de7b.crl

            X509v3 Authority Key Identifier:
                keyid:61:2C:F2:F5:AE:09:B4:17:2C:60:6F:58:16:8E:E9:40:04:CB:51:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b0fc877-c837-44ab-9292-c0d36898de7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:8b:a2:6d:c2:9d:38:a1:0a:7f:e8:6f:02:85:79:71:e5:69:
         ef:27:b5:0f:58:8b:fb:aa:fb:f7:6e:06:69:0a:dc:52:39:57:
         37:e4:6c:44:e8:cd:62:f4:dc:7a:25:e2:2e:f7:06:80:b2:f0:
         b0:18:7d:ae:8c:6d:ae:00:01:1d:b1:f0:57:5f:7e:7b:c2:27:
         01:37:74:3f:96:fe:96:20:45:bc:31:4e:dc:9c:04:66:51:68:
         b5:a6:9e:f3:aa:19:68:a0:fa:1b:95:83:68:59:b8:49:38:ca:
         da:f8:55:17:d6:13:07:c7:92:3f:15:24:ab:c8:85:22:f3:26:
         97:bd:87:a1:3c:d3:22:83:e8:b6:25:78:90:25:ec:e0:ab:ab:
         08:84:5a:0d:da:47:69:e9:14:30:36:03:13:a9:e0:1d:b3:6b:
         85:3c:4b:48:e0:85:0d:8f:e5:c1:53:dc:29:40:71:94:eb:59:
         df:de:a2:aa:1a:23:f7:7f:ba:7d:7b:3d:a3:2a:77:07:2c:b4:
         f5:9c:96:7e:21:e1:f7:f0:04:db:6b:d1:0a:49:9e:8d:83:e9:
         4e:4c:89:f2:c6:2a:a4:c9:58:d7:b8:de:e7:e5:29:7b:7a:68:
         51:2c:31:12:e2:37:ae:7b:c5:ec:f6:f7:c6:b9:d0:e3:77:1b:
         8a:9b:01:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErDDsTJn82ENA4EMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIwZmM4NzctYzgzNy00NGFiLTkyOTItYzBkMzY4OThk
ZTdiMB4XDTI1MDgwNjAyMzMwOVoXDTI1MTEwNDAzMzMwOVowLzEtMCsGA1UEAxMk
YjJiODIwYjQtMDJlOC00YWUxLTgzMzgtNGE2MDRjNDE0MDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE8ecloe/wjX7O04xd5bwlXxZWevLABW46G8
5uL7vf8w6hf3fmuKjOevqhIqnsMoeO6UK7VK9M2qCLkUOb0ZzSIo6CwjDlxhfDlo
vksREYyE4v0nP9C1wboO1eM5KpTBCJoqKZfH3n9o2ZlTW5QSEwn8YrY2OQSBOgxC
w15BQ99zH4TN5Jl/pTOSMGp5dZAX7cvA4bdyzTRkmfMoE68kbckWmWJVXzqdYqY2
Zqj5acG1Pdi4WZUExEZI9tiUS4EgCwCMv3zALguHR4WEqJnndUY25gUskHGZWpne
jWDUUepuqRF/RZZfj/PRP4aKNsnF3Ma+6IxuR7fo5wUFoBcuKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPF06bGCl7CrX923F+eNooRnnIGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YjBm
Yzg3Ny1jODM3LTQ0YWItOTI5Mi1jMGQzNjg5OGRlN2IvNmVmZDczMWItMGY5NC0z
ZDA2LWJjODQtYTM4MzIyYzU3MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWIwZmM4NzctYzgzNy00NGFiLTky
OTItYzBkMzY4OThkZTdiLzliMGZjODc3LWM4MzctNDRhYi05MjkyLWMwZDM2ODk4
ZGU3Yi5jcmwwHwYDVR0jBBgwFoAUYSzy9a4JtBcsYG9YFo7pQATLUSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YjBmYzg3Ny1jODM3LTQ0YWItOTI5Mi1jMGQz
Njg5OGRlN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF480MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGCLom3CnTihCn/obwKFeXHlae8ntQ9Yi/uq+/duBmkK3FI5VzfkbETo
zWL03Hol4i73BoCy8LAYfa6Mba4AAR2x8FdffnvCJwE3dD+W/pYgRbwxTtycBGZR
aLWmnvOqGWig+huVg2hZuEk4ytr4VRfWEwfHkj8VJKvIhSLzJpe9h6E80yKD6LYl
eJAl7OCrqwiEWg3aR2npFDA2AxOp4B2za4U8S0jghQ2P5cFT3ClAcZTrWd/eoqoa
I/d/un17PaMqdwcstPWcln4h4ffwBNtr0QpJno2D6U5MifLGKqTJWNe43uflKXt6
aFEsMRLiN657xez298a50ON3G4qbAYg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:12 2025 by rpki-client