Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6ab7f56-e868-3c03-a4be-00b9054b6893.roa
File:                     a6ab7f56-e868-3c03-a4be-00b9054b6893.roa (raw, json)
Hash identifier:          lIPJHBCWzGfDVWcBsMXnt2/MHkIcwecv7RBGPQnloZY=
Subject key identifier:   89:92:5F:7D:E2:2B:8A:7E:66:7C:60:60:AA:31:C8:CD:2B:62:AA:34
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5765D7D010F5B7A241B76230
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6ab7f56-e868-3c03-a4be-00b9054b6893.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     16625
IP address blocks:        23.192.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d7:d0:10:f5:b7:a2:41:b7:62:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=60ed7284-1f54-4fd0-a15c-3d794533f029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:ed:93:73:ff:43:c2:a2:88:db:37:44:c9:
                    ae:d7:bc:ab:e1:1d:88:69:4e:1d:10:ec:0f:73:19:
                    d0:12:08:15:3b:fc:50:c8:98:9b:5e:41:eb:11:fb:
                    f6:31:ec:6d:15:b2:c6:f0:9b:a2:4b:2b:38:c5:a9:
                    e6:95:c0:c9:48:2a:4d:31:4f:ae:84:67:51:5d:95:
                    aa:c0:bf:86:6a:71:38:54:30:93:51:4b:8b:58:15:
                    c0:3e:f4:0c:da:db:35:41:7a:6c:e1:59:98:70:e8:
                    9c:95:6f:b4:a9:44:7f:7d:38:52:18:e9:6a:7b:75:
                    c3:23:30:57:03:a6:45:ef:58:03:08:b8:4b:a5:13:
                    65:0e:93:4d:ff:fa:a8:5a:a1:60:70:c0:af:bd:1f:
                    02:fc:83:de:76:31:f1:f4:49:c8:bd:61:87:6e:49:
                    66:de:b0:dc:99:db:ea:94:75:1c:19:3b:7e:7b:cb:
                    c3:5d:a5:92:2f:ab:d6:b9:0e:d1:8f:6c:66:c7:60:
                    49:14:f0:b7:39:cb:af:e7:3d:c2:7a:77:9a:7c:e3:
                    02:26:83:df:e6:a8:e8:c5:91:eb:64:5c:32:fc:85:
                    7f:1a:b1:c7:5f:11:97:29:8a:ec:9b:27:0e:40:ee:
                    55:d2:0c:ce:4b:38:31:59:84:49:05:68:fd:82:70:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:92:5F:7D:E2:2B:8A:7E:66:7C:60:60:AA:31:C8:CD:2B:62:AA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6ab7f56-e868-3c03-a4be-00b9054b6893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:47:40:11:8a:be:1e:e3:38:a5:4a:3d:d4:2c:37:a7:b8:ee:
         8a:44:25:92:5b:5a:38:de:a0:8c:fa:7b:8a:87:7f:8b:e6:83:
         13:a4:08:e0:62:b9:39:9c:74:2a:18:55:bf:45:30:28:a2:18:
         f1:bd:9a:c6:71:f9:4d:c7:5b:76:ed:66:5a:26:20:28:35:8d:
         63:b4:1d:03:fb:5e:de:45:d9:d4:70:30:46:70:ae:33:77:93:
         f0:99:c0:3d:8e:fb:61:6d:73:60:96:2d:76:af:cc:5d:a7:01:
         0a:22:6c:1e:53:0c:49:0d:80:56:e0:35:b6:1a:83:7c:d9:6d:
         44:ad:da:28:f8:4d:b0:76:32:cc:de:bc:52:fd:2b:2a:e8:4d:
         5a:88:fc:ed:22:a2:eb:8e:bd:c0:1c:1f:4d:0c:4d:1b:5f:03:
         e8:21:b3:ac:78:07:fd:93:ee:f9:8d:93:27:a5:8e:79:8e:aa:
         aa:09:f9:f6:66:8e:40:21:a4:8a:23:2d:6f:61:e8:bd:d8:8d:
         b5:8b:62:f2:cb:dc:7f:e7:ef:dd:41:72:ca:96:61:df:92:aa:
         e3:6c:31:59:83:20:4a:da:62:23:2e:6f:d7:b4:80:6e:b8:92:
         ae:b2:93:9c:d1:13:14:f7:ad:4b:3f:a6:10:d6:c2:02:56:b5:
         13:3d:44:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdfQEPW3okG3YjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk
NjBlZDcyODQtMWY1NC00ZmQwLWExNWMtM2Q3OTQ1MzNmMDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xvtk3P/Q8KiiNs3RMmu17yr4R2IaU4dEOwP
cxnQEggVO/xQyJibXkHrEfv2MextFbLG8JuiSys4xanmlcDJSCpNMU+uhGdRXZWq
wL+GanE4VDCTUUuLWBXAPvQM2ts1QXps4VmYcOiclW+0qUR/fThSGOlqe3XDIzBX
A6ZF71gDCLhLpRNlDpNN//qoWqFgcMCvvR8C/IPedjHx9EnIvWGHbklm3rDcmdvq
lHUcGTt+e8vDXaWSL6vWuQ7Rj2xmx2BJFPC3Ocuv5z3CeneafOMCJoPf5qjoxZHr
ZFwy/IV/GrHHXxGXKYrsmycOQO5V0gzOSzgxWYRJBWj9gnAJhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImSX33iK4p+ZnxgYKoxyM0rYqo0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTZhYjdmNTYtZTg2OC0z
YzAzLWE0YmUtMDBiOTA1NGI2ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8CiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtHQBGKvh7jOKVKPdQsN6e47opEJZJbWjjeoIz6e4qHf4vmgxOkCOBi
uTmcdCoYVb9FMCiiGPG9msZx+U3HW3btZlomICg1jWO0HQP7Xt5F2dRwMEZwrjN3
k/CZwD2O+2Ftc2CWLXavzF2nAQoibB5TDEkNgFbgNbYag3zZbUSt2ij4TbB2Msze
vFL9KyroTVqI/O0iouuOvcAcH00MTRtfA+ghs6x4B/2T7vmNkyeljnmOqqoJ+fZm
jkAhpIojLW9h6L3YjbWLYvLL3H/n791BcsqWYd+SquNsMVmDIEraYiMub9e0gG64
kq6yk5zRExT3rUs/phDWwgJWtRM9RH8=
-----END CERTIFICATE-----
Generated at Sun Jun 29 19:20:33 2025 by rpki-client