Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/24150e67-b3f7-3214-a795-0c7b2dc904a5.roa
File:                     24150e67-b3f7-3214-a795-0c7b2dc904a5.roa (raw, json)
Hash identifier:          GUX9U/dBaNo/TMTxw8igQg75l/KNhTrQZ23G75cMTos=
Subject key identifier:   2E:9A:C7:20:5B:EA:3B:E8:A8:99:42:8F:71:B5:9F:C8:01:42:EB:3B
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F4328584AE2FBC20E14757DD64913A970
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/24150e67-b3f7-3214-a795-0c7b2dc904a5.roa
Signing time:             Sun 17 Aug 2025 13:00:41 +0000
ROA not before:           Sun 17 Aug 2025 13:00:41 +0000
ROA not after:            Sat 15 Nov 2025 14:00:41 +0000
asID:                     14315
IP address blocks:        23.146.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e2:fb:c2:0e:14:75:7d:d6:49:13:a9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Aug 17 13:00:41 2025 GMT
            Not After : Nov 15 14:00:41 2025 GMT
        Subject: CN=b262fc36-db73-46ad-a299-804992d8b10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:26:67:49:d6:55:dc:f8:91:6d:57:2e:2b:16:
                    9d:ea:48:c4:04:f5:e4:c1:ea:0b:b2:0d:d4:74:52:
                    20:94:e2:85:49:1c:2f:d0:78:43:fe:58:0b:6a:54:
                    a5:c3:28:82:6c:f9:85:e3:dd:c2:8e:2d:f9:29:e8:
                    b4:99:5e:4d:81:c2:2a:43:a7:18:3d:33:69:96:7b:
                    18:7d:b9:ab:c4:32:5d:7e:2f:7c:fc:68:41:d1:a9:
                    ed:bb:cc:c1:5c:03:af:1a:fb:b8:f4:d4:b0:96:b5:
                    45:2a:23:d9:3a:83:49:25:13:03:ef:92:55:fb:ab:
                    80:91:bd:f7:25:c3:77:24:bf:29:53:a0:3c:e1:4f:
                    b2:20:3d:71:4e:1c:32:33:71:77:84:a0:70:eb:4f:
                    04:31:1d:21:85:23:3c:15:17:e5:29:bd:d2:ba:b7:
                    2c:af:8b:5d:66:55:00:61:ee:8c:4a:33:7c:e4:66:
                    95:2f:a4:73:65:00:d9:6e:a3:38:d1:d6:90:b5:f8:
                    2f:bc:52:0f:04:7d:b0:8a:13:7d:98:f2:bf:19:f9:
                    60:5f:54:07:3c:3a:43:ee:06:06:5d:ff:fa:1c:cf:
                    89:ac:18:ae:5b:62:95:b0:a3:38:2b:39:5d:7c:0d:
                    04:01:24:2d:5e:39:1d:3b:9d:03:20:24:1b:69:2e:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9A:C7:20:5B:EA:3B:E8:A8:99:42:8F:71:B5:9F:C8:01:42:EB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/24150e67-b3f7-3214-a795-0c7b2dc904a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:64:3c:5c:4e:d5:4a:5c:cc:9f:ef:99:f1:f3:82:b7:46:dc:
         54:eb:57:b4:db:cd:79:71:73:b3:f1:cb:ee:a6:93:5a:7a:bb:
         9b:f4:78:e6:50:ae:bb:5e:32:aa:ba:7f:29:b0:89:a8:c8:39:
         e0:d4:6e:9d:b1:eb:93:a4:70:ae:0b:82:ae:16:ff:ab:fc:44:
         ec:60:b5:c3:c4:ff:93:96:6c:3f:fb:55:8e:05:cd:0b:23:3d:
         68:22:fd:be:b7:03:aa:fc:82:3c:bb:74:57:43:ba:21:75:59:
         2a:36:7a:66:60:f1:06:1f:4e:9f:0a:8c:c4:ef:59:7c:b2:66:
         1a:04:be:c6:ad:cc:80:c2:a8:e7:e4:1a:f1:00:d2:84:57:70:
         87:9d:b1:54:4a:aa:c8:c9:90:a4:c4:a3:34:76:4d:aa:bb:8a:
         84:24:c1:92:52:17:85:c4:1b:f8:f6:e6:f5:95:cb:3e:3c:8a:
         8c:7d:ba:f9:a8:65:02:eb:e3:39:21:7e:58:ae:32:c6:25:e5:
         fb:ec:72:01:25:21:33:0e:9c:66:15:bd:e1:ff:63:23:77:9c:
         9a:08:92:48:fb:bc:b3:b8:5d:4c:75:6f:6a:31:74:e1:c9:bf:
         d5:80:3c:df:e2:81:92:9c:37:f0:a2:c5:e5:55:fa:85:ed:ac:
         d6:b8:ec:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8IOFHV91kkTqXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMxYTkyNmMtOWZlNS00MjY5LTg1NDktYTE1ZWVjOWQw
MGQyMB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk
YjI2MmZjMzYtZGI3My00NmFkLWEyOTktODA0OTkyZDhiMTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiZnSdZV3PiRbVcuKxad6kjEBPXkweoLsg3U
dFIglOKFSRwv0HhD/lgLalSlwyiCbPmF493Cji35Kei0mV5NgcIqQ6cYPTNplnsY
fbmrxDJdfi98/GhB0antu8zBXAOvGvu49NSwlrVFKiPZOoNJJRMD75JV+6uAkb33
JcN3JL8pU6A84U+yID1xThwyM3F3hKBw608EMR0hhSM8FRflKb3Surcsr4tdZlUA
Ye6MSjN85GaVL6RzZQDZbqM40daQtfgvvFIPBH2wihN9mPK/GflgX1QHPDpD7gYG
Xf/6HM+JrBiuW2KVsKM4KzldfA0EASQtXjkdO50DICQbaS5UbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6axyBb6jvoqJlCj3G1n8gBQus7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MzFh
OTI2Yy05ZmU1LTQyNjktODU0OS1hMTVlZWM5ZDAwZDIvMjQxNTBlNjctYjNmNy0z
MjE0LWE3OTUtMGM3YjJkYzkwNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzMxYTkyNmMtOWZlNS00MjY5LTg1
NDktYTE1ZWVjOWQwMGQyLzczMWE5MjZjLTlmZTUtNDI2OS04NTQ5LWExNWVlYzlk
MDBkMi5jcmwwHwYDVR0jBBgwFoAU/joYbJVWQwBw8KR+SNQjRFuezRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83MzFhOTI2Yy05ZmU1LTQyNjktODU0OS1hMTVl
ZWM5ZDAwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5IoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKpkPFxO1UpczJ/vmfHzgrdG3FTrV7TbzXlxc7Pxy+6mk1p6u5v0eOZQ
rrteMqq6fymwiajIOeDUbp2x65OkcK4Lgq4W/6v8ROxgtcPE/5OWbD/7VY4FzQsj
PWgi/b63A6r8gjy7dFdDuiF1WSo2emZg8QYfTp8KjMTvWXyyZhoEvsatzIDCqOfk
GvEA0oRXcIedsVRKqsjJkKTEozR2Taq7ioQkwZJSF4XEG/j25vWVyz48iox9uvmo
ZQLr4zkhfliuMsYl5fvscgElITMOnGYVveH/YyN3nJoIkkj7vLO4XUx1b2oxdOHJ
v9WAPN/igZKcN/CixeVV+oXtrNa47Ek=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:29:05 2025 by rpki-client