Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa
File:                     99e77285-3c2b-3fae-96c0-463d87b57b40.roa (raw, json)
Hash identifier:          Fk+8g6YU0zj9C8TB44DffM+wH91No9KcVZOjDYvMMkQ=
Subject key identifier:   7D:2F:4F:46:E2:5B:1B:2F:D9:F6:C8:70:36:66:0B:24:32:98:C8:7A
Certificate issuer:       /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
Certificate serial:       010D0C9F4328584A3E45A509246BCBBEBB4846C0
Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     399214
IP address blocks:        23.141.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a5:09:24:6b:cb:be:bb:48:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=cf1b9e4d-485e-4436-acc8-e65e1137113e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:70:b4:d5:7c:6a:82:a8:30:77:9d:a5:64:16:
                    1b:0e:3f:c5:38:dc:f8:26:e6:49:39:01:a1:dc:3a:
                    3c:1d:3c:c6:54:b1:94:14:a9:0e:16:21:28:3a:b0:
                    a4:b3:95:31:5e:1e:d2:6b:f4:f0:61:36:99:ac:60:
                    fc:0f:7b:db:71:21:f2:a1:f5:d7:ea:ad:58:f7:e5:
                    6a:65:12:3f:cc:1d:60:d4:88:c0:20:7e:a3:c4:0f:
                    60:01:3d:d6:d6:cb:83:ef:f7:d0:0d:30:63:dd:a2:
                    46:ec:d6:f7:71:a4:8e:1a:9e:a7:e8:fe:55:43:57:
                    c4:45:ea:e7:47:98:bf:bb:d3:c4:5e:3c:c7:d1:1b:
                    b2:ac:13:4e:5d:a4:29:5c:5d:89:fb:65:1c:99:52:
                    42:9f:bf:e9:08:74:f2:2b:2a:52:70:25:da:80:8b:
                    c4:07:50:b2:09:84:08:e0:ba:97:78:9d:c7:16:ec:
                    8b:f7:31:1d:e0:35:18:63:6d:99:dc:c9:f7:82:67:
                    63:7e:b1:6f:a6:74:e3:34:2a:27:2f:f8:2a:b9:29:
                    5b:b1:d5:61:bd:cb:1f:02:1f:fa:20:b5:82:69:ef:
                    c0:ab:fa:a1:85:8c:f9:c4:48:36:35:44:4a:00:db:
                    f7:7d:7b:20:2f:cd:e6:04:24:c6:8c:aa:93:00:73:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2F:4F:46:E2:5B:1B:2F:D9:F6:C8:70:36:66:0B:24:32:98:C8:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:48:0d:95:70:d8:b2:da:5b:3e:65:60:41:6c:3d:01:64:65:
         ce:1e:04:41:63:41:a2:a6:e9:d5:a7:a2:6a:0b:b8:7a:43:68:
         4d:dd:f5:89:13:a2:8c:53:c5:89:3f:81:da:ce:76:47:b5:3a:
         f4:c3:21:6a:ac:c5:17:eb:e4:f3:2a:7a:ee:21:14:2c:b1:33:
         f1:4d:d2:3e:88:64:f7:ce:4a:4e:ce:42:3c:a6:7a:6a:a2:f3:
         91:25:37:15:67:26:00:95:12:06:1b:3f:41:95:23:d4:68:5e:
         38:34:f0:c6:da:b9:33:28:5f:c5:df:90:2a:b8:ed:fa:b7:21:
         cb:20:e0:22:cd:84:b0:d2:84:00:24:54:2d:0d:9c:00:27:a6:
         38:69:a5:96:43:3a:7f:7b:37:f1:e0:8a:98:b4:49:3c:b1:6a:
         78:76:16:8a:38:b0:40:ab:e1:3a:aa:5f:32:50:11:60:99:9d:
         05:ee:ef:69:20:b3:37:cc:71:ee:3b:d0:ef:cf:9f:f4:eb:a5:
         7b:26:c1:5a:ea:43:37:27:5b:d3:c9:45:d3:5b:b1:dc:75:d2:
         6b:04:01:39:45:f3:51:4b:c1:16:22:6f:8e:8f:c3:fe:72:07:
         78:48:a2:0e:a6:53:9d:56:be:d4:4a:22:da:49:9b:c6:90:6b:
         81:e9:a7:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaUJJGvLvrtIRsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk
ZmQxMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk
Y2YxYjllNGQtNDg1ZS00NDM2LWFjYzgtZTY1ZTExMzcxMTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXC01Xxqgqgwd52lZBYbDj/FONz4JuZJOQGh
3Do8HTzGVLGUFKkOFiEoOrCks5UxXh7Sa/TwYTaZrGD8D3vbcSHyofXX6q1Y9+Vq
ZRI/zB1g1IjAIH6jxA9gAT3W1suD7/fQDTBj3aJG7Nb3caSOGp6n6P5VQ1fERern
R5i/u9PEXjzH0RuyrBNOXaQpXF2J+2UcmVJCn7/pCHTyKypScCXagIvEB1CyCYQI
4LqXeJ3HFuyL9zEd4DUYY22Z3Mn3gmdjfrFvpnTjNConL/gquSlbsdVhvcsfAh/6
ILWCae/Aq/qhhYz5xEg2NURKANv3fXsgL83mBCTGjKqTAHMWMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0vT0biWxsv2fbIcDZmCyQymMh6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl
N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvOTllNzcyODUtM2MyYi0z
ZmFlLTk2YzAtNDYzZDg3YjU3YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4
OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy
ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh
ODlmMmRmZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF41oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJIDZVw2LLaWz5lYEFsPQFkZc4eBEFjQaKm6dWnomoLuHpDaE3d9YkT
ooxTxYk/gdrOdke1OvTDIWqsxRfr5PMqeu4hFCyxM/FN0j6IZPfOSk7OQjymemqi
85ElNxVnJgCVEgYbP0GVI9RoXjg08MbauTMoX8XfkCq47fq3Icsg4CLNhLDShAAk
VC0NnAAnpjhppZZDOn97N/Hgipi0STyxanh2Foo4sECr4TqqXzJQEWCZnQXu72kg
szfMce470O/Pn/TrpXsmwVrqQzcnW9PJRdNbsdx10msEATlF81FLwRYib46Pw/5y
B3hIog6mU51WvtRKItpJm8aQa4Hpp7M=
-----END CERTIFICATE-----
Generated at Mon Jun 30 02:29:36 2025 by rpki-client