Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/843b3d01-4e2e-3a6c-86c9-0af966a0d1da.roa
File:                     843b3d01-4e2e-3a6c-86c9-0af966a0d1da.roa (raw, json)
Hash identifier:          fhMAykknNCIMmGikbA6urHEQAuq/84Viu3XKqReNU28=
Subject key identifier:   61:6B:69:EB:34:FF:9F:CA:C1:BA:4D:6D:7E:E8:6C:C4:EF:11:16:BF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D0E12CB6C4B410333EF80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/843b3d01-4e2e-3a6c-86c9-0af966a0d1da.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        23.240.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:0e:12:cb:6c:4b:41:03:33:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=47e504b2-e73f-4c25-aba8-3c28f8c0cba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:4a:c9:ae:21:6c:28:39:9f:7b:cd:4d:5c:
                    bc:49:7c:b2:f5:ea:3c:3b:79:bf:b4:d1:72:b2:5f:
                    8a:d4:3a:89:0d:c3:a5:f7:b2:b6:d6:61:7c:37:b8:
                    df:a0:fc:ec:d0:5a:a0:8e:78:38:f6:cb:35:b8:0c:
                    6b:6b:c8:af:d6:a7:6a:82:ca:6e:45:21:38:6b:51:
                    73:e9:ca:0a:da:f9:6f:6b:b9:c6:67:4e:bf:fd:74:
                    3c:4e:58:99:75:9d:ae:43:b7:01:e0:b7:0e:bd:92:
                    a7:d6:c9:76:3f:39:9f:6a:1c:71:fe:a9:34:9a:cb:
                    7b:26:15:34:93:a0:75:91:01:6b:6a:19:e1:42:cd:
                    d9:68:33:ca:6d:d7:0e:2c:ac:29:a9:28:cd:81:68:
                    60:95:76:17:2a:5f:30:86:55:d0:47:ee:20:46:79:
                    29:d9:04:f4:36:42:90:54:d1:a3:fa:52:aa:d4:a9:
                    98:f5:f6:5a:5b:23:b0:ab:c8:60:ee:fd:e6:f7:27:
                    97:1f:44:91:2f:24:9d:f6:ca:de:66:ec:f7:54:4e:
                    59:54:1d:33:77:41:d7:ea:9a:41:51:cb:60:f7:7d:
                    94:21:46:f2:ab:c0:7f:48:18:db:8d:cc:a5:e2:16:
                    8a:8c:6b:05:ef:d8:49:24:51:8b:65:3c:b7:f6:16:
                    32:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6B:69:EB:34:FF:9F:CA:C1:BA:4D:6D:7E:E8:6C:C4:EF:11:16:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/843b3d01-4e2e-3a6c-86c9-0af966a0d1da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.240.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:58:21:f8:74:2b:ed:62:96:39:da:b8:80:29:8e:d1:dd:
         94:7e:78:25:3b:16:91:ca:02:4a:85:02:cc:3c:56:e5:ae:4b:
         30:f2:c2:f5:29:58:42:05:b0:41:eb:e4:6d:e0:98:a6:7a:f1:
         7b:dd:ec:46:93:19:c9:b8:6d:be:01:c4:23:55:00:41:b4:55:
         b9:40:99:9c:98:b3:d2:cc:15:61:02:12:97:42:5f:37:fc:2d:
         44:9a:a6:0b:92:74:4b:81:f6:4a:08:78:e3:d6:ea:5b:ef:a4:
         17:1e:24:c9:24:7c:1c:19:50:a1:ac:bd:26:6e:92:2b:27:6b:
         55:1a:7b:6e:fe:7b:6e:22:ee:0e:0c:e6:cd:0f:17:a3:37:48:
         4f:3d:96:56:5f:44:b1:d2:8d:be:7d:41:73:a3:89:0a:87:02:
         16:e7:20:21:1c:db:15:e3:67:97:ec:bc:9c:67:69:84:68:c1:
         aa:d0:7f:1f:2a:08:7e:62:dc:82:0a:6c:89:aa:f6:ad:f7:2d:
         e0:c5:10:f6:2e:28:63:bb:df:26:f7:ab:ee:a0:c6:15:ea:f7:
         65:e2:03:37:27:46:fe:3a:5c:09:78:59:5d:f1:58:e3:18:0c:
         9b:39:36:0a:5e:42:1d:7b:62:b4:dd:f4:07:a6:4c:10:c9:4a:
         ee:5a:fe:6b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuCHQ4Sy2xLQQMz74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NDdlNTA0YjItZTczZi00YzI1LWFiYTgtM2MyOGY4YzBjYmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6tKya4hbCg5n3vNTVy8SXyy9eo8O3m/tNFy
sl+K1DqJDcOl97K21mF8N7jfoPzs0Fqgjng49ss1uAxra8iv1qdqgspuRSE4a1Fz
6coK2vlva7nGZ06//XQ8TliZdZ2uQ7cB4LcOvZKn1sl2Pzmfahxx/qk0mst7JhU0
k6B1kQFrahnhQs3ZaDPKbdcOLKwpqSjNgWhglXYXKl8whlXQR+4gRnkp2QT0NkKQ
VNGj+lKq1KmY9fZaWyOwq8hg7v3m9yeXH0SRLySd9sreZuz3VE5ZVB0zd0HX6ppB
Uctg932UIUbyq8B/SBjbjcyl4haKjGsF79hJJFGLZTy39hYybwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGFraes0/5/KwbpNbX7obMTvERa/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODQzYjNkMDEtNGUyZS0z
YTZjLTg2YzktMGFmOTY2YTBkMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCF/AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbRtYIfh0K+1iljnauIApjtHdlH54JTsWkcoCSoUCzDxW5a5LMPLC9SlY
QgWwQevkbeCYpnrxe93sRpMZybhtvgHEI1UAQbRVuUCZnJiz0swVYQISl0JfN/wt
RJqmC5J0S4H2Sgh449bqW++kFx4kySR8HBlQoay9Jm6SKydrVRp7bv57biLuDgzm
zQ8XozdITz2WVl9EsdKNvn1Bc6OJCocCFucgIRzbFeNnl+y8nGdphGjBqtB/HyoI
fmLcggpsiar2rfct4MUQ9i4oY7vfJver7qDGFer3ZeIDNydG/jpcCXhZXfFY4xgM
mzk2Cl5CHXtitN30B6ZMEMlK7lr+aw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:36:22 2025 by rpki-client