Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa
File:                     e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa (raw, json)
Hash identifier:          svEZx9m1lcAOGBxPrGuLT909YorwlHPgleab6ojinhA=
Subject key identifier:   0F:02:7C:D9:A8:AC:1F:5D:E4:C2:B9:7A:E2:40:51:30:90:C4:BC:36
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F4328584988CF1F175176DB7DB5334F80
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     203125
IP address blocks:        23.146.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:1f:17:51:76:db:7d:b5:33:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=6962d29e-11d8-40de-8e7d-f36d6d4997a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:d4:c4:12:b7:3d:5f:75:73:db:67:6e:95:
                    46:b8:18:5f:20:fd:72:e8:85:23:6e:47:c6:2b:6b:
                    70:c6:1b:e5:ce:8d:ca:cb:a6:c8:e3:c2:50:9d:2a:
                    9e:29:e3:4a:df:65:8d:7e:32:d3:9b:5d:8d:b3:bb:
                    97:1d:03:6b:40:95:3e:bb:2e:cb:23:b1:3f:25:9c:
                    8c:e6:0a:14:05:39:58:7c:3f:f6:80:df:5c:3b:e8:
                    5a:fc:96:e4:2d:f8:94:64:ff:37:ca:40:7d:ab:a6:
                    38:56:4c:14:04:35:8a:d2:03:f3:39:ea:20:90:c1:
                    37:76:6a:6c:7d:3d:89:55:94:4b:9c:7f:cd:36:87:
                    c1:bb:1d:c3:37:02:45:e5:53:d0:86:3a:cb:79:15:
                    2f:9d:c4:fb:68:44:e8:f7:d7:ea:a2:43:72:59:6c:
                    bb:32:7b:5a:fc:05:08:3e:c7:0b:1b:9f:eb:6a:ec:
                    61:77:c3:9f:99:ed:92:fc:f3:e8:fb:a9:6c:7d:e6:
                    1c:28:c1:11:b2:77:9d:a6:a5:3f:2d:1e:e3:ea:49:
                    66:72:39:01:a7:3b:35:bd:29:70:04:58:9a:b4:e6:
                    79:98:47:6d:13:dd:be:c5:ce:d7:61:d8:8c:59:45:
                    80:dc:69:a3:cd:b9:8c:00:58:75:51:0b:39:51:1d:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:7C:D9:A8:AC:1F:5D:E4:C2:B9:7A:E2:40:51:30:90:C4:BC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:31:09:3f:5f:83:6d:4d:aa:68:d1:1c:49:4c:c9:7b:ce:08:
         b8:8c:21:74:8c:aa:b6:57:e8:36:6b:f1:ae:f8:bd:35:0b:cf:
         3c:2f:2f:15:75:ba:fc:1a:9e:14:bb:3d:d8:31:16:86:a7:9a:
         23:6e:70:9f:dd:30:90:60:76:18:0f:a0:fa:10:7d:f1:c0:c3:
         ce:3d:a1:3e:0c:44:bc:83:9b:3e:26:00:72:6c:92:96:34:76:
         ba:7b:e6:04:b5:18:c6:b2:f9:a1:8a:90:d9:53:96:ea:69:09:
         b2:38:3e:6b:84:1c:1a:17:1d:73:9e:8e:fd:04:ce:28:16:3a:
         3c:cd:0c:e0:f2:a0:45:e3:57:f5:66:7e:cb:2d:eb:67:1b:36:
         fb:c6:97:8c:69:31:c6:2d:75:c0:ad:c2:09:c8:3b:c6:df:6a:
         f8:fe:e3:3e:f9:0e:51:88:50:9d:e8:c9:56:e3:3d:cd:39:a4:
         0a:e5:41:43:e5:9c:d9:00:35:c2:20:f0:58:9a:31:5d:5f:46:
         3f:45:d7:00:76:7b:15:5a:5e:f8:d3:7e:d8:67:d8:64:52:fe:
         c0:1a:a8:b5:cf:66:25:bf:d9:3d:dc:86:d4:9b:5f:56:e6:c9:
         49:bc:63:57:3c:d0:14:6c:d6:1d:dc:ab:96:7b:67:5e:d1:fe:
         65:93:4a:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzx8XUXbbfbUzT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI1NmNhZWEtMjEzNi00MzQyLWJhZmYtNmYzMTI2OGQ0
Y2M0MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
Njk2MmQyOWUtMTFkOC00MGRlLThlN2QtZjM2ZDZkNDk5N2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr7UxBK3PV91c9tnbpVGuBhfIP1y6IUjbkfG
K2twxhvlzo3Ky6bI48JQnSqeKeNK32WNfjLTm12Ns7uXHQNrQJU+uy7LI7E/JZyM
5goUBTlYfD/2gN9cO+ha/JbkLfiUZP83ykB9q6Y4VkwUBDWK0gPzOeogkME3dmps
fT2JVZRLnH/NNofBux3DNwJF5VPQhjrLeRUvncT7aETo99fqokNyWWy7Mnta/AUI
PscLG5/rauxhd8Ofme2S/PPo+6lsfeYcKMERsnedpqU/LR7j6klmcjkBpzs1vSlw
BFiatOZ5mEdtE92+xc7XYdiMWUWA3GmjzbmMAFh1UQs5UR0DWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8CfNmorB9d5MK5euJAUTCQxLw2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjU2
Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4ZDRjYzQvZTQ1OWEzOWEtZjMyNS0z
NmZhLThmM2UtY2JmNzZmZWQxMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGI1NmNhZWEtMjEzNi00MzQyLWJh
ZmYtNmYzMTI2OGQ0Y2M0LzhiNTZjYWVhLTIxMzYtNDM0Mi1iYWZmLTZmMzEyNjhk
NGNjNC5jcmwwHwYDVR0jBBgwFoAUW5RpPQjOSIIV5jmWcSEjDZCow90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMx
MjY4ZDRjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5IYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHExCT9fg21NqmjRHElMyXvOCLiMIXSMqrZX6DZr8a74vTULzzwvLxV1
uvwanhS7PdgxFoanmiNucJ/dMJBgdhgPoPoQffHAw849oT4MRLyDmz4mAHJskpY0
drp75gS1GMay+aGKkNlTluppCbI4PmuEHBoXHXOejv0EzigWOjzNDODyoEXjV/Vm
fsst62cbNvvGl4xpMcYtdcCtwgnIO8bfavj+4z75DlGIUJ3oyVbjPc05pArlQUPl
nNkANcIg8FiaMV1fRj9F1wB2exVaXvjTfthn2GRS/sAaqLXPZiW/2T3chtSbX1bm
yUm8Y1c80BRs1h3cq5Z7Z17R/mWTSoY=
-----END CERTIFICATE-----
Generated at Thu May 8 10:02:36 2025 by rpki-client