Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/80d58c62-259d-3869-b8c1-d9be9521f3ef.roa
File:                     80d58c62-259d-3869-b8c1-d9be9521f3ef.roa (raw, json)
Hash identifier:          nUnmbjzN+d+xkJbKhP/t1LW6qwJS7Du0OIGRcOkOx6Q=
Subject key identifier:   4B:6A:A0:41:11:25:39:7B:4C:B3:0A:2D:D7:A0:71:65:69:3E:C9:F5
Certificate issuer:       /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial:       010D0C9F4328584AD3A0F59D8CF19D5F91533DC0
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/80d58c62-259d-3869-b8c1-d9be9521f3ef.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     46918
IP address blocks:        23.161.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f5:9d:8c:f1:9d:5f:91:53:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=9a3b9d43-1c4b-4e94-9180-d79497589d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:36:64:84:19:6e:f0:bf:97:e9:20:9a:00:
                    5b:3e:ef:a3:b2:a8:a5:bb:5c:46:db:23:3f:fc:0b:
                    7e:b4:30:28:5f:e2:8a:5a:41:14:83:ca:ce:38:5f:
                    2c:27:1c:8b:cc:cb:27:51:75:94:05:ba:89:11:d1:
                    70:65:52:f3:85:3d:e7:ad:e6:28:1d:ec:83:f9:cf:
                    3b:ad:9b:78:33:ec:4c:36:f5:71:60:dc:0d:ab:89:
                    56:88:49:5c:23:39:a8:39:db:81:ec:38:46:61:bf:
                    56:ac:00:ed:8c:2d:5e:53:23:c6:89:45:18:5e:19:
                    9a:cb:d9:b9:35:10:79:05:4e:b8:61:ed:84:63:fc:
                    11:82:e3:60:cc:48:e8:37:8a:c1:d3:0f:c6:17:10:
                    e5:84:01:5b:d1:eb:8c:11:ed:8d:13:bd:be:a4:63:
                    5d:64:0b:dc:4e:71:a4:8b:c8:bf:b5:b2:a3:b4:d6:
                    47:4c:b7:ac:b3:61:55:a2:72:bd:95:16:94:cf:c3:
                    3c:d5:fd:e7:21:25:84:65:f6:52:f4:3e:39:0b:12:
                    69:f4:8b:4f:80:5e:63:4a:2d:24:00:fb:af:cc:1e:
                    83:04:a8:fb:e5:db:50:d6:61:cb:65:e0:65:24:26:
                    ef:0f:33:5d:74:ea:9e:c4:e0:4d:3f:77:c8:1a:eb:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6A:A0:41:11:25:39:7B:4C:B3:0A:2D:D7:A0:71:65:69:3E:C9:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/80d58c62-259d-3869-b8c1-d9be9521f3ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:56:8a:56:ca:fb:e4:cc:ed:a7:9d:a4:ea:53:66:37:73:42:
         9f:d1:01:c5:91:d2:a0:f1:59:09:77:b6:bb:16:b9:36:1c:e2:
         99:f0:d8:23:ce:68:42:69:1a:97:c4:b8:d2:c7:ca:4a:22:b9:
         d8:2e:60:70:72:93:2a:99:f3:fe:ed:49:6b:c9:16:76:26:22:
         45:c5:62:86:da:b7:a1:0e:f2:ef:55:fc:64:83:fe:fd:47:af:
         03:70:ff:15:69:fa:9f:d5:cf:ff:e6:27:64:be:03:62:eb:82:
         64:db:55:0b:f2:cf:3f:53:8d:0d:67:ae:05:87:dc:b3:83:16:
         55:5c:a7:99:5a:6a:bc:a6:ed:c0:e7:2b:f8:d2:e3:8f:cd:a1:
         8e:5b:12:c8:cc:2a:c0:38:ec:af:c7:c1:99:c6:a8:77:bc:d1:
         45:78:eb:90:77:ff:96:f3:95:ac:bb:93:fa:d6:bd:3d:53:44:
         77:a0:49:a3:76:b9:a9:1f:dd:be:8c:9f:56:5f:d3:69:5d:88:
         9c:f1:6f:07:24:a3:e7:f6:3d:de:88:9c:b7:72:64:b0:ad:e4:
         ff:ec:86:f9:12:0d:14:89:65:87:a0:4b:7f:83:0e:b2:58:08:
         d9:39:c2:f2:ed:5f:74:2f:2b:59:c3:34:64:74:dc:66:fc:b6:
         eb:40:e2:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPWdjPGdX5FTPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTQzMDMxYmItYjQ4Yi00ZWZiLWFlMjYtNDAzNTY4ODE5
OWY3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
OWEzYjlkNDMtMWM0Yi00ZTk0LTkxODAtZDc5NDk3NTg5ZDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUk2ZIQZbvC/l+kgmgBbPu+jsqilu1xG2yM/
/At+tDAoX+KKWkEUg8rOOF8sJxyLzMsnUXWUBbqJEdFwZVLzhT3nreYoHeyD+c87
rZt4M+xMNvVxYNwNq4lWiElcIzmoOduB7DhGYb9WrADtjC1eUyPGiUUYXhmay9m5
NRB5BU64Ye2EY/wRguNgzEjoN4rB0w/GFxDlhAFb0euMEe2NE72+pGNdZAvcTnGk
i8i/tbKjtNZHTLess2FVonK9lRaUz8M81f3nISWEZfZS9D45CxJp9ItPgF5jSi0k
APuvzB6DBKj75dtQ1mHLZeBlJCbvDzNddOqexOBNP3fIGusRQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtqoEERJTl7TLMKLdegcWVpPsn1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NDMw
MzFiYi1iNDhiLTRlZmItYWUyNi00MDM1Njg4MTk5ZjcvODBkNThjNjItMjU5ZC0z
ODY5LWI4YzEtZDliZTk1MjFmM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTQzMDMxYmItYjQ4Yi00ZWZiLWFl
MjYtNDAzNTY4ODE5OWY3LzU0MzAzMWJiLWI0OGItNGVmYi1hZTI2LTQwMzU2ODgx
OTlmNy5jcmwwHwYDVR0jBBgwFoAULS998jX/Dvkwd4cgQfSA0j4I2OowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81NDMwMzFiYi1iNDhiLTRlZmItYWUyNi00MDM1
Njg4MTk5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6EDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlWilbK++TM7aedpOpTZjdzQp/RAcWR0qDxWQl3trsWuTYc4pnw2CPO
aEJpGpfEuNLHykoiudguYHBykyqZ8/7tSWvJFnYmIkXFYobat6EO8u9V/GSD/v1H
rwNw/xVp+p/Vz//mJ2S+A2LrgmTbVQvyzz9TjQ1nrgWH3LODFlVcp5laarym7cDn
K/jS44/NoY5bEsjMKsA47K/HwZnGqHe80UV465B3/5bzlay7k/rWvT1TRHegSaN2
uakf3b6Mn1Zf02ldiJzxbwcko+f2Pd6InLdyZLCt5P/shvkSDRSJZYegS3+DDrJY
CNk5wvLtX3QvK1nDNGR03Gb8tutA4jI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:36:41 2025 by rpki-client