Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa
File:                     e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa (raw, json)
Hash identifier:          T+pIjyoGcAMiV6kc8BKObXLuy9djHaqvKSwMGxwDmOM=
Subject key identifier:   ED:46:72:57:0B:23:EC:D7:F5:14:61:4C:A4:57:C3:52:68:48:63:E1
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F4328584B48E1B00DA8228D3914F43800
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     203125
IP address blocks:        23.146.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b0:0d:a8:22:8d:39:14:f4:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=7db62654-3626-4ed9-914e-65bf74a4370f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:28:1c:29:e0:42:c2:81:b7:f9:51:c3:8d:
                    a1:d5:6a:bb:90:ba:ef:c1:60:a7:62:8a:97:e9:bd:
                    40:6a:9d:61:d6:fe:98:84:4b:40:83:80:91:93:4e:
                    27:0a:c5:6e:f1:6f:3b:1d:77:36:93:0a:51:49:48:
                    a6:d6:95:fe:30:ea:e5:3e:2f:ef:f2:9f:01:63:86:
                    18:ef:5b:dd:c1:9e:9b:8b:c9:b3:e8:48:8e:50:24:
                    98:15:17:7e:fc:c2:d9:46:6a:a2:4b:8d:be:32:93:
                    d4:92:9d:94:e4:21:e4:fd:43:57:01:15:85:0d:07:
                    35:ae:19:e8:1e:1e:e8:47:0a:45:c5:a4:7a:ec:43:
                    61:d7:6f:d6:21:12:09:27:17:13:aa:9a:f3:73:9a:
                    3a:c4:7e:78:8d:65:59:29:e0:0b:d9:2c:04:1b:f7:
                    9a:db:d5:92:77:97:d7:88:a7:31:df:c0:85:b3:65:
                    26:ec:1a:43:8a:9c:d2:72:27:68:3d:80:27:60:36:
                    c2:51:b0:4a:46:38:62:1c:e4:b5:04:8c:31:8d:f2:
                    fc:3a:c4:cc:7d:93:2d:7e:95:cc:d6:26:29:42:d2:
                    ae:36:6e:e0:d8:73:ca:9c:fa:7b:be:fb:70:dc:6e:
                    39:47:54:46:84:d1:7d:c5:27:8e:a8:ce:c3:25:9a:
                    72:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:72:57:0B:23:EC:D7:F5:14:61:4C:A4:57:C3:52:68:48:63:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:5d:19:88:4e:d1:8a:ef:c5:57:3c:8d:08:86:d3:5f:9c:64:
         69:37:dc:2d:8a:bf:7f:f9:f9:5c:d9:d5:7f:dd:43:1a:95:b8:
         36:ea:ae:de:10:51:b8:b0:4b:08:7c:da:d4:ee:45:61:69:d5:
         95:d0:5f:41:d8:2e:9b:e9:94:a4:96:71:b2:45:73:92:c2:a8:
         0d:1a:07:8e:21:b7:8d:0e:47:74:82:71:28:ec:eb:5c:3d:ed:
         a0:ed:b9:fb:da:48:d9:3b:8a:9c:43:bb:5b:e1:08:7b:54:2e:
         af:c1:ec:95:69:3d:05:53:fc:6e:3e:09:ab:7c:13:fc:2c:e5:
         83:5e:25:a0:18:73:46:17:c7:9f:85:22:73:34:ef:4c:53:d9:
         e6:34:70:2e:1a:1e:cd:a6:44:01:6a:57:68:07:6d:ba:a9:68:
         e7:0a:b9:7f:f0:11:27:c2:c9:e3:b0:ae:fd:a7:b7:cb:d8:f5:
         15:e9:f8:5d:5f:5e:c8:45:00:2b:89:71:d4:9a:97:71:c1:7f:
         94:4b:32:64:65:d7:e7:30:5a:0e:0f:53:3e:9a:37:82:55:5d:
         c8:93:62:bd:8e:ae:cf:89:52:e8:57:53:9b:48:4f:9f:61:69:
         5d:d0:43:77:6b:e2:ae:23:26:d3:20:37:16:b0:a1:e7:e2:e8:
         60:6f:0a:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bANqCKNORT0OAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI1NmNhZWEtMjEzNi00MzQyLWJhZmYtNmYzMTI2OGQ0
Y2M0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
N2RiNjI2NTQtMzYyNi00ZWQ5LTkxNGUtNjViZjc0YTQzNzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2AoHCngQsKBt/lRw42h1Wq7kLrvwWCnYoqX
6b1Aap1h1v6YhEtAg4CRk04nCsVu8W87HXc2kwpRSUim1pX+MOrlPi/v8p8BY4YY
71vdwZ6bi8mz6EiOUCSYFRd+/MLZRmqiS42+MpPUkp2U5CHk/UNXARWFDQc1rhno
Hh7oRwpFxaR67ENh12/WIRIJJxcTqprzc5o6xH54jWVZKeAL2SwEG/ea29WSd5fX
iKcx38CFs2Um7BpDipzScidoPYAnYDbCUbBKRjhiHOS1BIwxjfL8OsTMfZMtfpXM
1iYpQtKuNm7g2HPKnPp7vvtw3G45R1RGhNF9xSeOqM7DJZpyaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1GclcLI+zX9RRhTKRXw1JoSGPhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjU2
Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4ZDRjYzQvZTQ1OWEzOWEtZjMyNS0z
NmZhLThmM2UtY2JmNzZmZWQxMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGI1NmNhZWEtMjEzNi00MzQyLWJh
ZmYtNmYzMTI2OGQ0Y2M0LzhiNTZjYWVhLTIxMzYtNDM0Mi1iYWZmLTZmMzEyNjhk
NGNjNC5jcmwwHwYDVR0jBBgwFoAUW5RpPQjOSIIV5jmWcSEjDZCow90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMx
MjY4ZDRjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5IYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5dGYhO0YrvxVc8jQiG01+cZGk33C2Kv3/5+VzZ1X/dQxqVuDbqrt4Q
UbiwSwh82tTuRWFp1ZXQX0HYLpvplKSWcbJFc5LCqA0aB44ht40OR3SCcSjs61w9
7aDtufvaSNk7ipxDu1vhCHtULq/B7JVpPQVT/G4+Cat8E/ws5YNeJaAYc0YXx5+F
InM070xT2eY0cC4aHs2mRAFqV2gHbbqpaOcKuX/wESfCyeOwrv2nt8vY9RXp+F1f
XshFACuJcdSal3HBf5RLMmRl1+cwWg4PUz6aN4JVXciTYr2Ors+JUuhXU5tIT59h
aV3QQ3dr4q4jJtMgNxawoefi6GBvCtE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:13 2025 by rpki-client