Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/b1d22641-4320-33c9-af60-60b017e65ac3.roa
File:                     b1d22641-4320-33c9-af60-60b017e65ac3.roa (raw, json)
Hash identifier:          t3lXOa7NCLKlyFMoE8ylnDOPWxf1Iah7uHUEkLT7xMg=
Subject key identifier:   BF:EF:E2:E3:02:18:3D:CC:3F:B6:45:EA:D8:77:BB:F6:D7:16:11:2E
Certificate issuer:       /CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
Certificate serial:       010D0C9F4328584A53359D3F1A91849B5C779A80
Authority key identifier: 8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/b1d22641-4320-33c9-af60-60b017e65ac3.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     398999
IP address blocks:        23.132.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:9d:3f:1a:91:84:9b:5c:77:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=d1c76160-4eee-4545-9faf-3fa16ad1c761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:b6:7a:00:fc:64:11:a2:d8:b5:86:8a:21:
                    46:77:a7:98:47:7d:0d:5c:3b:05:37:37:49:2d:42:
                    b5:d4:a4:42:84:fa:c1:ec:10:a7:68:0c:68:cc:50:
                    0a:8c:dc:f4:5e:94:d6:97:9a:43:7e:af:6e:bf:ea:
                    ee:7e:73:94:3a:50:d5:4a:b2:4e:94:50:aa:a2:21:
                    b8:f7:bf:a4:71:f8:07:3d:82:66:da:8f:f3:5d:9d:
                    7a:bb:77:ff:ae:af:56:2d:ff:e5:10:07:04:dd:e9:
                    c4:08:8e:0b:4e:1b:fe:47:fc:ba:59:d2:30:ea:30:
                    2c:89:ef:2f:58:b6:84:23:ab:88:3c:3e:7c:a8:cf:
                    35:60:2e:f7:51:97:3e:cb:6e:f4:92:45:c4:1d:f5:
                    70:27:79:81:52:2f:8f:6e:56:fb:b3:ec:04:79:16:
                    55:65:c4:36:24:7a:5f:d7:cd:3e:94:8a:63:bd:80:
                    bd:c4:2a:d7:7c:54:fa:89:3a:1b:26:f0:19:52:fc:
                    9a:b8:d2:a9:00:0d:d5:f7:aa:f2:cb:c7:4d:ea:e0:
                    ce:44:d9:4e:ac:95:db:6f:a4:c6:cf:15:3d:3c:d0:
                    3b:79:6d:de:7d:37:03:0f:7b:a1:32:c6:bb:7a:08:
                    ea:a1:c6:9a:51:5a:0c:a9:b2:9e:60:56:4d:f7:0b:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EF:E2:E3:02:18:3D:CC:3F:B6:45:EA:D8:77:BB:F6:D7:16:11:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/b1d22641-4320-33c9-af60-60b017e65ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:81:01:62:22:45:17:51:6f:2f:30:ee:89:27:1b:16:3a:
         af:08:e1:7c:95:17:8d:c3:8c:d2:bd:91:ce:1e:0e:be:7d:8e:
         9b:cd:da:0c:67:73:6d:4f:bc:57:d8:23:27:d5:c4:d4:65:52:
         cd:63:86:85:ca:4e:cf:dd:e6:43:26:06:13:85:08:97:68:04:
         1a:f7:e1:a9:2f:df:19:a1:05:f1:cd:42:08:18:c2:26:1a:54:
         ce:7d:36:ac:bd:79:83:9e:1f:e0:8e:7a:70:a2:32:e5:b7:27:
         fc:88:72:5e:57:b4:0c:48:27:20:7c:44:89:7c:f0:02:e4:6f:
         35:1d:9e:d3:3c:8a:a8:09:f4:a6:96:18:ee:2c:41:72:02:48:
         0f:99:1c:ca:c1:3a:44:ea:1a:57:9c:95:3c:1f:09:ad:0c:9b:
         1c:5b:06:33:d2:da:6c:2a:31:12:ad:e3:b0:09:17:6d:5e:17:
         cc:d8:8f:c8:f1:7a:d0:9e:64:e9:f5:fb:66:6f:42:fb:79:28:
         08:62:6e:92:a5:03:32:ba:a8:a5:b0:f4:35:25:9d:5a:0d:3a:
         27:6a:88:bb:63:7c:72:88:dc:ce:53:66:7b:ac:47:50:95:2c:
         8d:9d:16:89:bb:ab:c1:25:40:ae:3c:53:b3:aa:46:43:57:c8:
         9e:bf:cc:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNZ0/GpGEm1x3moAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJkZjllYWUtNjQ0Ny00ZDNiLTkxODItN2EwNGNlNmYy
ZGI5MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
ZDFjNzYxNjAtNGVlZS00NTQ1LTlmYWYtM2ZhMTZhZDFjNzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIO2egD8ZBGi2LWGiiFGd6eYR30NXDsFNzdJ
LUK11KRChPrB7BCnaAxozFAKjNz0XpTWl5pDfq9uv+rufnOUOlDVSrJOlFCqoiG4
97+kcfgHPYJm2o/zXZ16u3f/rq9WLf/lEAcE3enECI4LThv+R/y6WdIw6jAsie8v
WLaEI6uIPD58qM81YC73UZc+y270kkXEHfVwJ3mBUi+Pblb7s+wEeRZVZcQ2JHpf
180+lIpjvYC9xCrXfFT6iTobJvAZUvyauNKpAA3V96ryy8dN6uDORNlOrJXbb6TG
zxU9PNA7eW3efTcDD3uhMsa7egjqocaaUVoMqbKeYFZN9wsJXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/v4uMCGD3MP7ZF6th3u/bXFhEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mYmRm
OWVhZS02NDQ3LTRkM2ItOTE4Mi03YTA0Y2U2ZjJkYjkvYjFkMjI2NDEtNDMyMC0z
M2M5LWFmNjAtNjBiMDE3ZTY1YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmJkZjllYWUtNjQ0Ny00ZDNiLTkx
ODItN2EwNGNlNmYyZGI5L2ZiZGY5ZWFlLTY0NDctNGQzYi05MTgyLTdhMDRjZTZm
MmRiOS5jcmwwHwYDVR0jBBgwFoAUjaAY3SaxKgm0LMdpzwaxRu+Dy2wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mYmRmOWVhZS02NDQ3LTRkM2ItOTE4Mi03YTA0
Y2U2ZjJkYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4SUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASagQFiIkUXUW8vMO6JJxsWOq8I4XyVF43DjNK9kc4eDr59jpvN2gxn
c21PvFfYIyfVxNRlUs1jhoXKTs/d5kMmBhOFCJdoBBr34akv3xmhBfHNQggYwiYa
VM59Nqy9eYOeH+COenCiMuW3J/yIcl5XtAxIJyB8RIl88ALkbzUdntM8iqgJ9KaW
GO4sQXICSA+ZHMrBOkTqGleclTwfCa0MmxxbBjPS2mwqMRKt47AJF21eF8zYj8jx
etCeZOn1+2ZvQvt5KAhibpKlAzK6qKWw9DUlnVoNOidqiLtjfHKI3M5TZnusR1CV
LI2dFom7q8ElQK48U7OqRkNXyJ6/zLY=
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:00:06 2025 by rpki-client