Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa
File:                     fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa (raw, json)
Hash identifier:          Xu7OP7Il7etfO69AG2uV9edIYQH0aHLwSzHrnlEN+/M=
Subject key identifier:   A5:73:0D:83:CD:8F:F1:D2:99:85:D7:91:2C:16:C6:64:81:87:B9:62
Certificate issuer:       /CN=6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d
Certificate serial:       010D0C9F4328584A42757C9ADCAF4F79892A4620
Authority key identifier: 9A:D4:E1:85:7A:C0:9C:F0:B5:60:82:97:F4:BA:8A:F1:AB:60:B6:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     401510
IP address blocks:        23.130.116.0/24 maxlen: 24
                          2602:f80d::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:7c:9a:dc:af:4f:79:89:2a:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=5b9949fa-2e3b-4b97-90c3-bf0cf11a0409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:58:58:ee:b9:5d:db:df:5d:b9:ef:df:7e:
                    95:74:62:0b:ba:d7:92:53:79:4b:1a:f9:f8:62:13:
                    df:14:62:c5:72:25:fe:e0:12:e3:df:22:c9:40:63:
                    29:1c:d1:71:95:fc:e9:42:77:15:7b:7d:72:49:45:
                    75:d2:07:bd:46:4b:a2:06:b9:00:29:fb:7c:e3:09:
                    7d:d0:53:21:47:d0:5a:00:db:90:b0:6d:3f:64:0d:
                    0a:63:95:60:4c:1d:a3:9d:49:f8:0c:6a:b5:d2:1b:
                    aa:b0:43:0f:96:b6:eb:ef:86:80:bb:61:8c:5b:86:
                    67:cd:88:8e:d4:de:90:ac:5e:fa:90:96:cb:44:8f:
                    5a:fc:f7:89:d1:b5:03:cf:8c:ce:07:72:4f:df:25:
                    08:4f:39:13:d9:0d:78:db:ed:f6:64:99:a3:38:8d:
                    d8:cb:0d:99:03:ff:ad:93:05:25:7c:92:04:28:41:
                    e5:81:e3:e1:a2:f4:4f:be:81:2e:d8:f6:de:b8:7a:
                    20:cf:cb:3d:74:32:20:1d:98:2b:ae:5d:ed:9c:3b:
                    bd:31:e9:f3:b9:ec:f9:78:5d:27:de:23:f8:c1:76:
                    50:ba:5f:04:84:87:58:7d:f7:41:18:2f:8b:33:29:
                    91:58:bc:ee:16:a5:c5:ae:0c:e8:a1:b8:c7:7f:ef:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:73:0D:83:CD:8F:F1:D2:99:85:D7:91:2C:16:C6:64:81:87:B9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.crl

            X509v3 Authority Key Identifier:
                keyid:9A:D4:E1:85:7A:C0:9C:F0:B5:60:82:97:F4:BA:8A:F1:AB:60:B6:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.116.0/24
                IPv6:
                  2602:f80d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:48:aa:9c:d7:7c:fb:84:51:4f:01:ae:85:07:3e:59:ec:
         e2:ed:3c:14:ca:c4:a5:8b:1f:eb:c3:05:03:34:6e:aa:84:be:
         b1:49:a1:35:88:e8:cc:42:55:79:65:02:0d:53:c8:ed:8b:b9:
         2e:83:47:a8:7f:60:f7:0f:a2:47:3f:99:97:58:79:b6:64:4d:
         8a:c2:4a:8c:e7:9e:8a:38:06:be:a1:d5:f6:6d:2f:b9:c4:d0:
         b9:8d:d1:56:89:47:2c:29:91:ef:fe:01:8a:92:9c:f5:61:b6:
         40:81:01:ce:7a:86:b6:e0:7d:cf:28:34:ef:b2:c3:d3:bc:f7:
         90:5e:74:3d:8e:33:39:48:47:ed:76:dd:5a:8e:88:2f:1f:4c:
         7b:f8:40:0c:6f:08:84:75:18:9a:99:28:df:5a:0d:e0:8c:a3:
         5f:49:07:0a:cc:0f:55:c7:de:a9:05:ff:2a:6a:ae:b2:4a:87:
         26:5d:85:0b:1c:84:1e:c2:14:53:03:2d:3c:49:1b:3b:a6:06:
         76:2d:9a:6f:45:15:62:f8:1f:5e:31:af:1b:ba:25:83:e6:2e:
         b8:ae:64:0f:bd:66:be:ce:c3:53:e0:53:e1:1e:5a:4f:3a:c7:
         f9:f1:11:9d:2e:dc:4b:19:65:51:a4:8d:4f:88:bd:bb:02:c4:
         82:b6:e3:3c
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpCdXya3K9PeYkqRiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ3YTBhOGMtMmUxZi00OGE2LTg5NjAtN2NlMWFiYjFj
NTNkMB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk
NWI5OTQ5ZmEtMmUzYi00Yjk3LTkwYzMtYmYwY2YxMWEwNDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJBYWO65XdvfXbnv336VdGILuteSU3lLGvn4
YhPfFGLFciX+4BLj3yLJQGMpHNFxlfzpQncVe31ySUV10ge9RkuiBrkAKft84wl9
0FMhR9BaANuQsG0/ZA0KY5VgTB2jnUn4DGq10huqsEMPlrbr74aAu2GMW4ZnzYiO
1N6QrF76kJbLRI9a/PeJ0bUDz4zOB3JP3yUITzkT2Q142+32ZJmjOI3Yyw2ZA/+t
kwUlfJIEKEHlgePhovRPvoEu2PbeuHogz8s9dDIgHZgrrl3tnDu9Menzuez5eF0n
3iP4wXZQul8EhIdYffdBGC+LMymRWLzuFqXFrgzoobjHf+8HzQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKVzDYPNj/HSmYXXkSwWxmSBh7liMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZDdh
MGE4Yy0yZTFmLTQ4YTYtODk2MC03Y2UxYWJiMWM1M2QvZmE4YjIxZTEtZWUxNy0z
ZmZiLTljMzUtYjdjOGE0YTQ1ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmQ3YTBhOGMtMmUxZi00OGE2LTg5
NjAtN2NlMWFiYjFjNTNkLzZkN2EwYThjLTJlMWYtNDhhNi04OTYwLTdjZTFhYmIx
YzUzZC5jcmwwHwYDVR0jBBgwFoAUmtThhXrAnPC1YIKX9LqK8atgtsAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZDdhMGE4Yy0yZTFmLTQ4YTYtODk2MC03Y2Ux
YWJiMWM1M2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4J0MA4E
AgACMAgDBgAmAvgNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeW0iqnNd8+4RRTwGuhQc+Wezi7TwUysSl
ix/rwwUDNG6qhL6xSaE1iOjMQlV5ZQINU8jti7kug0eof2D3D6JHP5mXWHm2ZE2K
wkqM556KOAa+odX2bS+5xNC5jdFWiUcsKZHv/gGKkpz1YbZAgQHOeoa24H3PKDTv
ssPTvPeQXnQ9jjM5SEftdt1ajogvH0x7+EAMbwiEdRiamSjfWg3gjKNfSQcKzA9V
x96pBf8qaq6ySocmXYULHIQewhRTAy08SRs7pgZ2LZpvRRVi+B9eMa8buiWD5i64
rmQPvWa+zsNT4FPhHlpPOsf58RGdLtxLGWVRpI1PiL27AsSCtuM8
-----END CERTIFICATE-----
Generated at Fri Jul 4 21:10:45 2025 by rpki-client