Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa
File:                     44fcabf0-f89c-3bb1-adb4-595ce7300823.roa (raw, json)
Hash identifier:          ryIwUvBNJTvFWJtAvlV4CGbMvIdfHR/Lf2oTnh6CDFo=
Subject key identifier:   A6:1A:6D:1F:7D:83:C2:48:24:C7:13:D4:94:9C:48:14:81:C3:2B:A5
Certificate issuer:       /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial:       010D0C9F4328584AFC1C0FE1D6E75CAD956BB300
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     401370
IP address blocks:        23.187.152.0/24 maxlen: 24
                          2602:f82d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:0f:e1:d6:e7:5c:ad:95:6b:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=3134e4f6-8fd8-4f46-9716-15134b9aeb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:4e:da:bf:14:20:42:7a:7b:3c:60:eb:f4:
                    8b:f0:b9:7e:1e:a8:9a:e5:bf:9e:58:2d:8d:70:b0:
                    e4:5c:12:96:87:98:2c:1f:df:95:ff:3f:4e:1d:fa:
                    f6:51:05:1f:ca:ec:d0:29:be:22:13:9a:2e:db:64:
                    8e:57:32:45:bd:12:4f:5e:50:5a:50:28:33:41:25:
                    e1:02:3d:00:2c:bf:f6:6a:78:1f:e6:2c:19:67:1b:
                    b4:a8:ca:43:dd:85:41:0b:8a:56:6d:33:b2:f9:db:
                    5d:b0:aa:08:30:f3:70:4c:89:c3:30:45:88:6b:68:
                    67:b1:42:06:36:7c:66:66:7f:c6:ce:44:cb:7c:d8:
                    59:8e:cf:fd:d6:c4:db:83:5e:d9:06:40:04:9a:b5:
                    dd:7d:47:83:ea:e4:d6:22:04:ae:e2:97:1a:f9:94:
                    c8:2b:0b:82:e9:0c:f7:6a:37:aa:79:fd:97:5d:32:
                    56:7b:60:96:a1:93:87:01:99:b6:f6:90:9c:28:6c:
                    f0:06:c4:28:d9:2c:b5:c6:36:d4:09:de:44:c9:bd:
                    71:9a:c8:ca:9a:e0:5a:91:82:6c:27:0a:14:6d:f3:
                    91:d0:30:c4:38:e4:a1:e7:9f:4e:9c:6d:52:84:fc:
                    d6:86:31:3c:71:43:0b:f8:55:d9:6e:95:e8:84:4b:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1A:6D:1F:7D:83:C2:48:24:C7:13:D4:94:9C:48:14:81:C3:2B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.152.0/24
                IPv6:
                  2602:f82d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e2:ec:c6:ce:e0:7f:e5:20:61:8e:e8:2b:c1:75:c7:94:d0:
         09:1c:9e:b3:63:d5:6c:9c:57:6c:63:f9:5b:57:6c:83:d1:95:
         6b:85:e1:f1:6a:10:18:6a:34:a7:d3:b7:3b:51:be:06:ee:a6:
         1b:1d:d6:78:d0:0c:a6:b6:71:99:a3:b1:a3:1a:11:2a:71:d8:
         9d:bc:ae:c1:84:23:de:09:36:b0:16:1f:ca:b7:31:dc:27:db:
         fa:c7:ed:37:3b:01:4c:d0:97:75:19:c6:52:57:3a:67:d3:12:
         e3:f9:74:2b:81:ff:ca:cf:8a:59:30:11:8e:3f:27:16:a0:d6:
         36:56:1b:9b:75:81:0c:4d:c3:ac:2e:85:aa:31:a7:9a:33:0e:
         d5:04:0b:a3:5f:bc:ef:da:62:31:37:00:b4:b4:92:da:26:7d:
         a1:d7:fd:c6:eb:51:23:a6:48:9a:06:39:14:75:13:bc:61:76:
         5c:53:ff:f0:21:db:b1:f8:ae:c2:8b:8e:45:83:72:69:d2:08:
         5f:c3:b3:60:18:b7:3d:56:da:45:db:70:43:32:c7:6d:90:59:
         f1:7a:9f:87:ca:69:72:02:bc:df:05:83:ce:69:f1:e5:a9:a5:
         60:c0:c4:0f:fd:82:1d:c7:81:3f:d0:1e:75:b1:aa:81:d8:38:
         10:0e:ea:8a
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr8HA/h1udcrZVrswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3
NWI4MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
MzEzNGU0ZjYtOGZkOC00ZjQ2LTk3MTYtMTUxMzRiOWFlYjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiJO2r8UIEJ6ezxg6/SL8Ll+Hqia5b+eWC2N
cLDkXBKWh5gsH9+V/z9OHfr2UQUfyuzQKb4iE5ou22SOVzJFvRJPXlBaUCgzQSXh
Aj0ALL/2angf5iwZZxu0qMpD3YVBC4pWbTOy+dtdsKoIMPNwTInDMEWIa2hnsUIG
NnxmZn/GzkTLfNhZjs/91sTbg17ZBkAEmrXdfUeD6uTWIgSu4pca+ZTIKwuC6Qz3
ajeqef2XXTJWe2CWoZOHAZm29pCcKGzwBsQo2Sy1xjbUCd5Eyb1xmsjKmuBakYJs
JwoUbfOR0DDEOOSh559OnG1ShPzWhjE8cUML+FXZbpXohEvdpQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKYabR99g8JIJMcT1JScSBSBwyulMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4
NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvNDRmY2FiZjAtZjg5Yy0z
YmIxLWFkYjQtNTk1Y2U3MzAwODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh
NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4
NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj
MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E
AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCV4uzGzuB/5SBhjugrwXXHlNAJHJ6zY9Vs
nFdsY/lbV2yD0ZVrheHxahAYajSn07c7Ub4G7qYbHdZ40AymtnGZo7GjGhEqcdid
vK7BhCPeCTawFh/KtzHcJ9v6x+03OwFM0Jd1GcZSVzpn0xLj+XQrgf/Kz4pZMBGO
PycWoNY2VhubdYEMTcOsLoWqMaeaMw7VBAujX7zv2mIxNwC0tJLaJn2h1/3G61Ej
pkiaBjkUdRO8YXZcU//wIdux+K7Ci45Fg3Jp0ghfw7NgGLc9VtpF23BDMsdtkFnx
ep+HymlyArzfBYPOafHlqaVgwMQP/YIdx4E/0B51saqB2DgQDuqK
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:07:49 2025 by rpki-client