Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/6857b5d2-c32c-3cbc-a5e7-ac087f158ff1.roa
File:                     6857b5d2-c32c-3cbc-a5e7-ac087f158ff1.roa (raw, json)
Hash identifier:          O3yruSmYRQS/l5dG6Ki89sGJNfUM325vlvWIjcc77dk=
Subject key identifier:   6E:6C:34:8C:51:03:2C:7E:47:3D:24:27:C7:1B:15:1A:50:F7:82:DC
Certificate issuer:       /CN=70833e05-2509-4686-bf80-d3c49dc27dac
Certificate serial:       010D0C9F4328584A49707384C4118F095B69CD80
Authority key identifier: 51:E6:3D:C3:5C:D0:8B:93:C3:B0:A2:16:28:5A:0B:59:2C:23:20:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/6857b5d2-c32c-3cbc-a5e7-ac087f158ff1.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     46488
IP address blocks:        23.178.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:73:84:c4:11:8f:09:5b:69:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70833e05-2509-4686-bf80-d3c49dc27dac
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=7c8b36bf-9fe0-454f-8f2a-82f3f851996d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:1c:0c:96:17:da:75:35:3b:87:db:51:e2:
                    f9:06:69:4a:a6:b1:db:38:53:ff:9a:14:5b:25:43:
                    c2:ec:ab:ee:6d:12:cb:df:06:44:7c:bd:5a:13:77:
                    2d:c6:45:62:26:89:d9:7e:fa:04:bd:f5:70:24:35:
                    6e:58:69:7a:b4:01:70:f8:d6:57:65:73:03:9c:49:
                    b8:f7:be:a4:c1:ec:49:c1:57:f3:3d:98:ab:b8:18:
                    5c:f9:7f:00:13:84:a4:01:47:32:76:67:46:3b:b7:
                    0b:07:ed:7e:e5:d9:84:f9:32:8a:a0:ab:90:57:a5:
                    a1:f8:33:35:f2:a0:85:b7:67:06:3a:43:bb:c4:35:
                    59:95:cf:fc:7f:65:74:6d:bb:fd:02:b1:a6:7f:ca:
                    99:fc:1f:ef:b7:06:56:98:35:a5:83:07:b1:80:0a:
                    71:12:21:8c:56:7a:0b:05:cd:37:fd:62:a4:53:a5:
                    35:e7:7b:11:2b:4b:87:a6:62:16:41:fd:30:f2:26:
                    0e:e3:9e:5a:f2:22:24:87:15:50:3c:3e:c7:37:e9:
                    9f:a9:15:f5:8d:3c:70:50:b9:ee:a1:83:83:ac:f8:
                    16:bc:79:8c:01:4d:69:8f:1a:66:b8:18:3a:3b:65:
                    22:1f:a7:e5:cb:60:86:d1:0b:b8:27:42:30:95:42:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6C:34:8C:51:03:2C:7E:47:3D:24:27:C7:1B:15:1A:50:F7:82:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/6857b5d2-c32c-3cbc-a5e7-ac087f158ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.crl

            X509v3 Authority Key Identifier:
                keyid:51:E6:3D:C3:5C:D0:8B:93:C3:B0:A2:16:28:5A:0B:59:2C:23:20:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ca:a8:1c:5e:71:7d:cf:5f:21:d1:31:68:8c:ac:66:8e:0c:
         c5:04:5a:08:c6:0a:c4:7e:b0:84:ae:3e:11:e9:bc:94:96:66:
         8e:d6:20:fa:df:af:39:be:01:3a:4a:31:0e:e3:9f:58:25:14:
         4d:8f:66:35:ef:ba:f1:47:4d:d3:d0:f9:3c:eb:f4:db:d1:3c:
         4b:59:cf:3a:cc:b4:14:f2:df:6c:fc:a9:ec:b2:af:7a:c4:65:
         a5:f7:7d:5d:fb:37:e5:d4:81:88:b3:91:62:4c:19:95:15:b4:
         9a:a0:ed:1b:a7:e8:64:ec:ee:eb:e7:42:b9:e5:fd:6a:0f:03:
         41:d9:7d:4d:57:be:28:cd:5a:86:1b:1e:87:bb:40:fa:88:df:
         db:52:61:39:f4:16:8c:53:bc:ff:4c:02:e8:99:3b:27:7d:92:
         07:d9:3e:8a:56:cb:d5:82:5f:93:00:ef:5b:5a:6e:df:1f:6e:
         80:ac:b7:8d:67:0b:3b:0c:61:4b:2e:dc:47:91:9a:a9:dd:c5:
         02:43:ad:c5:89:8a:62:91:22:ec:40:f0:4b:3c:19:1f:a9:19:
         bc:82:c1:31:9a:bb:c7:9a:75:03:ce:99:9f:f5:84:7b:36:f6:
         2c:f0:df:d4:9a:52:48:8a:5b:ae:b3:c3:13:b1:43:87:11:b5:
         88:bd:25:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHOExBGPCVtpzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA4MzNlMDUtMjUwOS00Njg2LWJmODAtZDNjNDlkYzI3
ZGFjMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk
N2M4YjM2YmYtOWZlMC00NTRmLThmMmEtODJmM2Y4NTE5OTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9gcDJYX2nU1O4fbUeL5BmlKprHbOFP/mhRb
JUPC7KvubRLL3wZEfL1aE3ctxkViJonZfvoEvfVwJDVuWGl6tAFw+NZXZXMDnEm4
976kwexJwVfzPZiruBhc+X8AE4SkAUcydmdGO7cLB+1+5dmE+TKKoKuQV6Wh+DM1
8qCFt2cGOkO7xDVZlc/8f2V0bbv9ArGmf8qZ/B/vtwZWmDWlgwexgApxEiGMVnoL
Bc03/WKkU6U153sRK0uHpmIWQf0w8iYO455a8iIkhxVQPD7HN+mfqRX1jTxwULnu
oYODrPgWvHmMAU1pjxpmuBg6O2UiH6fly2CG0Qu4J0IwlULhPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG5sNIxRAyx+Rz0kJ8cbFRpQ94LcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MDgz
M2UwNS0yNTA5LTQ2ODYtYmY4MC1kM2M0OWRjMjdkYWMvNjg1N2I1ZDItYzMyYy0z
Y2JjLWE1ZTctYWMwODdmMTU4ZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzA4MzNlMDUtMjUwOS00Njg2LWJm
ODAtZDNjNDlkYzI3ZGFjLzcwODMzZTA1LTI1MDktNDY4Ni1iZjgwLWQzYzQ5ZGMy
N2RhYy5jcmwwHwYDVR0jBBgwFoAUUeY9w1zQi5PDsKIWKFoLWSwjIEowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83MDgzM2UwNS0yNTA5LTQ2ODYtYmY4MC1kM2M0
OWRjMjdkYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7KIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGLKqBxecX3PXyHRMWiMrGaODMUEWgjGCsR+sISuPhHpvJSWZo7WIPrf
rzm+ATpKMQ7jn1glFE2PZjXvuvFHTdPQ+Tzr9NvRPEtZzzrMtBTy32z8qeyyr3rE
ZaX3fV37N+XUgYizkWJMGZUVtJqg7Run6GTs7uvnQrnl/WoPA0HZfU1XvijNWoYb
Hoe7QPqI39tSYTn0FoxTvP9MAuiZOyd9kgfZPopWy9WCX5MA71tabt8fboCst41n
CzsMYUsu3EeRmqndxQJDrcWJimKRIuxA8Es8GR+pGbyCwTGau8eadQPOmZ/1hHs2
9izw39SaUkiKW66zwxOxQ4cRtYi9Jeg=
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:22:28 2025 by rpki-client