Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35f945b3-d249-3efe-aea4-92b2615cf446.roa
File:                     35f945b3-d249-3efe-aea4-92b2615cf446.roa (raw, json)
Hash identifier:          H0bhTHBY5d8DPYxbKO/IMFHL5wIY8WlLzx4KYxIFw68=
Subject key identifier:   8C:0C:41:2D:94:3F:B0:9F:9E:9C:3E:A6:33:02:E3:34:F5:2B:31:4F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3E45B3C02DEF78084CBF2140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35f945b3-d249-3efe-aea4-92b2615cf446.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     20940
IP address blocks:        23.48.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b3:c0:2d:ef:78:08:4c:bf:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=234c757d-3941-4ce7-b974-2b0b7c31ec8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:e4:f8:56:8e:12:e9:22:1f:bb:48:65:53:
                    e4:a3:86:44:d9:d7:19:a1:90:d8:93:0e:d0:78:e4:
                    a1:4c:ad:eb:18:2e:4b:aa:64:50:db:ce:e6:9b:38:
                    3a:5f:53:a9:79:08:15:b7:1b:25:4b:1c:c0:fc:d8:
                    89:c3:b0:ec:0c:30:f4:a7:75:f0:4e:78:1c:72:e7:
                    d8:47:a9:c7:fd:0f:03:de:2b:2f:d0:be:0b:ca:8f:
                    1e:90:1d:0f:f1:d3:32:ce:3f:4e:9b:6f:e0:e3:96:
                    9d:f4:25:18:a8:8f:54:54:cb:92:16:3e:87:45:40:
                    56:b7:7d:ee:b1:92:08:0b:34:ee:c5:2b:24:cf:8a:
                    6a:8b:87:3c:ae:42:5f:11:54:6c:c7:28:ce:a7:3c:
                    59:a0:3e:90:95:e4:f2:e5:04:1c:64:ff:f1:7d:f4:
                    5e:18:33:9c:81:60:2c:66:06:c4:d4:49:9a:77:90:
                    cc:2c:ca:1d:7f:07:9f:90:c6:a8:58:38:bc:dd:7f:
                    10:94:19:65:e2:79:e1:20:d3:4e:48:b2:24:ce:c3:
                    30:31:1e:86:f2:92:92:aa:53:78:7a:a1:bb:41:0d:
                    e4:2c:08:d6:a7:31:c0:fc:af:21:bb:e1:e4:f4:95:
                    7b:3b:c3:58:47:57:9d:6c:f4:99:92:a0:cb:84:89:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0C:41:2D:94:3F:B0:9F:9E:9C:3E:A6:33:02:E3:34:F5:2B:31:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35f945b3-d249-3efe-aea4-92b2615cf446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:1d:52:32:73:0a:f0:a9:6c:0b:25:55:96:52:27:fc:74:e9:
         ce:6b:48:1a:c8:83:32:12:ae:3b:14:54:96:d6:b8:51:83:a4:
         0c:3d:f2:b8:c2:47:21:d3:8f:c6:d1:b1:cd:04:01:56:df:8e:
         cb:4f:1b:28:b1:3e:ab:af:41:bc:71:5d:bd:df:4b:57:9e:5b:
         da:ff:9b:8d:27:9a:bc:3e:92:54:8b:6a:7c:90:5e:1d:17:c4:
         12:c6:d8:a7:c8:ae:51:37:c1:9e:17:05:94:ae:86:98:65:49:
         92:6d:6f:c5:1a:8d:03:05:2a:14:34:29:98:c8:a1:92:a4:17:
         ce:12:6d:75:06:b3:22:40:75:fd:41:c5:84:60:bc:e6:8c:01:
         bc:d0:6b:25:eb:d6:9a:81:ac:cd:14:28:87:ee:8b:c2:20:0b:
         cb:9a:4c:0e:30:17:cf:cb:0e:12:04:df:f1:27:78:48:0a:5b:
         bc:77:ae:8d:38:e0:da:84:48:b8:9f:47:7d:c7:c8:27:85:9d:
         28:d6:20:57:d8:6c:49:dd:a5:91:8e:f5:58:98:8d:b8:87:ba:
         8b:c5:ca:d9:43:5f:10:3f:03:cd:01:41:3d:d5:5a:3a:23:04:
         8f:c3:af:31:49:d1:3c:d6:fa:cd:0d:e0:32:4a:d7:33:0b:a7:
         aa:6b:74:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RbPALe94CEy/IUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk
MjM0Yzc1N2QtMzk0MS00Y2U3LWI5NzQtMmIwYjdjMzFlYzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZPk+FaOEukiH7tIZVPko4ZE2dcZoZDYkw7Q
eOShTK3rGC5LqmRQ287mmzg6X1OpeQgVtxslSxzA/NiJw7DsDDD0p3XwTngccufY
R6nH/Q8D3isv0L4Lyo8ekB0P8dMyzj9Om2/g45ad9CUYqI9UVMuSFj6HRUBWt33u
sZIICzTuxSskz4pqi4c8rkJfEVRsxyjOpzxZoD6QleTy5QQcZP/xffReGDOcgWAs
ZgbE1Emad5DMLModfwefkMaoWDi83X8QlBll4nnhINNOSLIkzsMwMR6G8pKSqlN4
eqG7QQ3kLAjWpzHA/K8hu+Hk9JV7O8NYR1edbPSZkqDLhImMLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwMQS2UP7Cfnpw+pjMC4zT1KzFPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzVmOTQ1YjMtZDI0OS0z
ZWZlLWFlYTQtOTJiMjYxNWNmNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzCWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsdUjJzCvCpbAslVZZSJ/x06c5rSBrIgzISrjsUVJbWuFGDpAw98rjC
RyHTj8bRsc0EAVbfjstPGyixPquvQbxxXb3fS1eeW9r/m40nmrw+klSLanyQXh0X
xBLG2KfIrlE3wZ4XBZSuhphlSZJtb8UajQMFKhQ0KZjIoZKkF84SbXUGsyJAdf1B
xYRgvOaMAbzQayXr1pqBrM0UKIfui8IgC8uaTA4wF8/LDhIE3/EneEgKW7x3ro04
4NqESLifR33HyCeFnSjWIFfYbEndpZGO9ViYjbiHuovFytlDXxA/A80BQT3VWjoj
BI/DrzFJ0TzW+s0N4DJK1zMLp6prdJM=
-----END CERTIFICATE-----
Generated at Sun Jun 29 13:56:13 2025 by rpki-client