Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
File:                     11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa (raw, json)
Hash identifier:          fdSzpcFRFtnPxzixDE+12h3TcdCyQcSMx6XLcwY+R70=
Subject key identifier:   75:2D:79:14:7A:25:AE:1E:7A:FB:8D:E9:98:7D:DC:20:94:09:42:33
Certificate issuer:       /CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
Certificate serial:       010D0C9F43285849B2AF62AD372E5C8156D85300
Authority key identifier: FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
Signing time:             Wed 30 Apr 2025 13:01:02 +0000
ROA not before:           Wed 30 Apr 2025 13:01:02 +0000
ROA not after:            Tue 29 Jul 2025 13:01:02 +0000
asID:                     394760
IP address blocks:        23.140.8.0/24 maxlen: 24
                          2602:fb30::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:af:62:ad:37:2e:5c:81:56:d8:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
        Validity
            Not Before: Apr 30 13:01:02 2025 GMT
            Not After : Jul 29 13:01:02 2025 GMT
        Subject: CN=8582f29e-39fc-4e45-9f41-bb559186d8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:28:4f:67:6b:51:28:94:15:5a:c2:01:0e:2a:
                    1d:ff:eb:62:4b:e9:cc:df:52:b9:a1:81:06:0f:b2:
                    fa:6f:f8:18:f9:23:f4:9f:9e:50:fa:5f:03:43:ad:
                    e3:8a:24:9a:b5:db:81:3a:b5:92:80:93:00:e7:8f:
                    74:4b:c4:bb:f1:8c:e0:57:13:36:1e:67:93:a6:e9:
                    12:65:f5:13:8e:34:3e:4a:e4:7c:db:30:fb:a7:2b:
                    34:ef:a8:2e:3a:4f:34:1f:f4:50:bb:70:29:33:f2:
                    75:fe:47:b0:81:43:d3:0c:9a:22:d6:20:53:42:96:
                    3b:2d:96:ee:c1:e6:d9:ac:b9:02:4d:5e:f6:d6:5d:
                    4c:ef:db:bb:f5:82:7a:78:8c:c3:be:59:e5:e4:c7:
                    f2:df:47:62:d6:2d:7c:05:13:12:46:41:07:47:84:
                    69:13:28:0a:92:d9:81:0e:b1:b9:96:51:75:33:8d:
                    0f:b4:1d:69:a8:14:a2:02:97:6b:a0:f3:98:0b:71:
                    23:9e:06:da:c4:60:13:f2:6c:ed:2c:2c:79:f2:46:
                    b9:76:ba:02:63:f4:d9:c6:a0:15:1a:13:bf:3f:09:
                    65:94:8c:7a:a5:0a:a0:59:f9:e0:1f:c6:ca:0d:f3:
                    45:7e:05:38:a1:47:dc:48:cd:0a:ae:1d:8d:ea:a1:
                    6b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2D:79:14:7A:25:AE:1E:7A:FB:8D:E9:98:7D:DC:20:94:09:42:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl

            X509v3 Authority Key Identifier:
                keyid:FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.8.0/24
                IPv6:
                  2602:fb30::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e3:60:26:4a:bf:81:f8:cf:45:6c:0c:5c:52:72:49:cb:bf:
         78:8f:05:4b:b5:5f:1b:96:b9:67:4f:f5:54:6a:db:f2:ec:6f:
         c5:56:40:49:07:fc:fb:be:12:18:8c:71:e9:9b:17:a3:7f:f0:
         52:aa:92:20:52:eb:9f:7b:65:38:97:7a:ef:be:98:0e:12:8e:
         ce:cd:67:d5:0b:9a:ef:47:8b:b5:a4:dd:29:05:16:e0:60:60:
         0a:e5:76:9c:18:32:a9:1d:33:fc:5e:28:dd:52:bb:60:46:47:
         1c:04:d1:b9:05:9a:e3:4d:86:d2:82:42:a2:f9:44:4e:60:e4:
         2e:22:2c:0c:a2:9e:7a:78:b6:79:25:d8:e6:d6:49:7e:ff:d0:
         d5:49:e2:11:95:bc:3c:4e:b6:f4:59:9f:f2:57:4e:fa:f5:49:
         c0:ab:32:ff:c0:8e:2d:14:a3:70:97:b1:2e:bb:50:43:cd:14:
         1d:22:44:97:02:7e:39:76:92:4b:8e:e0:f0:75:90:98:55:74:
         63:22:79:54:aa:b7:af:cd:61:d9:b4:2d:54:33:66:79:01:f4:
         9e:10:73:70:cb:9e:e9:5f:53:ed:00:ae:6a:5b:e0:34:4f:70:
         e7:ec:64:79:a3:0c:a6:b6:d8:f7:81:4d:7e:c2:56:d4:9f:74:
         cb:86:da:93
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmyr2KtNy5cgVbYUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFjN2MzYjQtY2JmYi00NjBiLThjYmEtYThiMDY1MDRj
ODkyMB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk
ODU4MmYyOWUtMzlmYy00ZTQ1LTlmNDEtYmI1NTkxODZkOGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/ChPZ2tRKJQVWsIBDiod/+tiS+nM31K5oYEG
D7L6b/gY+SP0n55Q+l8DQ63jiiSatduBOrWSgJMA5490S8S78YzgVxM2HmeTpukS
ZfUTjjQ+SuR82zD7pys076guOk80H/RQu3ApM/J1/kewgUPTDJoi1iBTQpY7LZbu
webZrLkCTV721l1M79u79YJ6eIzDvlnl5Mfy30di1i18BRMSRkEHR4RpEygKktmB
DrG5llF1M40PtB1pqBSiApdroPOYC3EjngbaxGAT8mztLCx58ka5droCY/TZxqAV
GhO/PwlllIx6pQqgWfngH8bKDfNFfgU4oUfcSM0Krh2N6qFr7QIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFHUteRR6Ja4eevuN6Zh93CCUCUIzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81YWM3
YzNiNC1jYmZiLTQ2MGItOGNiYS1hOGIwNjUwNGM4OTIvMTFkMWFmNjAtOTFlNy0z
ZDVhLTg1MzItOWRmZmNkZWY5ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWFjN2MzYjQtY2JmYi00NjBiLThj
YmEtYThiMDY1MDRjODkyLzVhYzdjM2I0LWNiZmItNDYwYi04Y2JhLWE4YjA2NTA0
Yzg5Mi5jcmwwHwYDVR0jBBgwFoAU+5HZC71nsRTK2OAzjZcioG1PIb8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81YWM3YzNiNC1jYmZiLTQ2MGItOGNiYS1hOGIw
NjUwNGM4OTIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4wIMA4E
AgACMAgDBgAmAvswADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAG42AmSr+B+M9FbAxcUnJJy794jwVLtV8b
lrlnT/VUatvy7G/FVkBJB/z7vhIYjHHpmxejf/BSqpIgUuufe2U4l3rvvpgOEo7O
zWfVC5rvR4u1pN0pBRbgYGAK5XacGDKpHTP8XijdUrtgRkccBNG5BZrjTYbSgkKi
+UROYOQuIiwMop56eLZ5Jdjm1kl+/9DVSeIRlbw8Trb0WZ/yV0769UnAqzL/wI4t
FKNwl7Euu1BDzRQdIkSXAn45dpJLjuDwdZCYVXRjInlUqrevzWHZtC1UM2Z5AfSe
EHNwy57pX1PtAK5qW+A0T3Dn7GR5owymttj3gU1+wlbUn3TLhtqT
-----END CERTIFICATE-----
Generated at Wed May 7 18:01:24 2025 by rpki-client