Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa
File:                     b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa (raw, json)
Hash identifier:          faWRfspXREGuIV7A/wScpvhVgkycSzmutBxijEpbOJU=
Subject key identifier:   2F:6F:E1:77:40:44:BF:B4:29:4E:45:10:C3:29:3D:54:DB:C8:48:93
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584B76F2275F323B3376218B1180
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     31898
IP address blocks:        23.239.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:27:5f:32:3b:33:76:21:8b:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=b096c747-10a6-4409-b56d-c4f728f55163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:03:c4:03:4e:0c:74:b0:02:b2:fe:30:10:3d:
                    bb:f5:e6:59:9e:b6:db:bf:97:b4:f7:bc:51:0c:4e:
                    6d:77:29:36:48:32:3f:80:cd:34:b5:92:61:20:31:
                    a2:d5:b6:30:f5:3e:7a:3d:a2:61:89:4d:ca:43:85:
                    77:9b:f8:62:37:76:a7:a8:96:ac:ab:2f:96:57:b2:
                    e5:44:0f:5f:8c:15:d6:27:dd:1b:76:fd:b2:55:ae:
                    7f:b7:cb:33:81:12:b9:37:1f:2b:8a:1c:3b:4f:b9:
                    43:77:91:24:9f:06:96:bb:1c:0f:dc:a7:36:f4:6b:
                    26:59:a4:71:b6:29:44:a5:ce:d8:1f:8e:b2:cc:92:
                    79:f0:55:6e:99:bc:7d:9c:a6:00:e4:70:b9:f3:91:
                    d3:11:3f:36:64:77:4b:71:07:e0:f7:87:8e:4f:29:
                    74:b4:41:fd:b5:cf:39:6a:8e:57:d3:d5:be:43:13:
                    8d:ca:46:6b:e8:98:cd:d9:bd:8a:d0:0b:55:46:03:
                    cc:29:68:36:3d:e1:65:8d:ae:0a:0d:2f:fd:8a:eb:
                    cc:38:5b:f6:c2:84:57:77:a3:f2:94:bb:a2:28:07:
                    67:2f:2f:53:c6:a0:66:92:d0:5f:14:43:0b:2b:e4:
                    a8:28:10:e3:a3:a5:e8:82:78:aa:eb:26:7c:ee:74:
                    d7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6F:E1:77:40:44:BF:B4:29:4E:45:10:C3:29:3D:54:DB:C8:48:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:83:26:ed:fd:56:94:bd:17:ed:91:28:72:d1:46:4e:a0:d4:
         e2:d5:f0:cc:10:67:3a:d9:61:9b:bf:d2:02:75:4d:e6:df:0d:
         2f:5e:91:f8:ce:3d:7e:04:a4:e8:96:64:78:c8:b4:cd:0e:87:
         bd:95:ca:85:d5:1d:d6:ef:36:65:ba:2e:11:c9:7b:19:c9:ea:
         20:8c:57:00:d5:fc:ef:b1:65:06:6a:46:99:fb:6e:9d:81:b2:
         9f:9f:e9:55:3d:98:5f:a5:dd:e4:c4:a3:1e:91:0f:c4:ab:f0:
         d8:97:fc:e9:62:f2:f0:34:1d:8e:41:c4:10:4f:05:80:59:18:
         74:39:53:b2:b8:7f:9d:4c:1c:4d:a9:20:53:05:ad:c8:50:f4:
         ba:2e:2f:b7:34:af:79:2c:d5:e4:5a:71:de:60:72:c1:85:eb:
         bb:5c:d8:d7:90:4a:00:53:69:75:7b:9f:d3:43:4a:f4:fb:bf:
         b0:86:38:1b:1d:7a:6d:df:ed:3f:24:20:db:d6:94:d8:0c:1f:
         5e:39:e6:1b:b6:6c:4c:3b:ac:7c:e8:69:fd:6c:3f:44:58:40:
         35:4e:77:52:3b:80:1c:6a:d5:8e:84:a0:52:0f:cd:6e:1f:7c:
         08:80:08:16:2b:3e:66:64:3c:5b:21:70:59:23:70:e9:09:fc:
         77:c6:35:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28idfMjszdiGLEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
YjA5NmM3NDctMTBhNi00NDA5LWI1NmQtYzRmNzI4ZjU1MTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAPEA04MdLACsv4wED279eZZnrbbv5e097xR
DE5tdyk2SDI/gM00tZJhIDGi1bYw9T56PaJhiU3KQ4V3m/hiN3anqJasqy+WV7Ll
RA9fjBXWJ90bdv2yVa5/t8szgRK5Nx8rihw7T7lDd5EknwaWuxwP3Kc29GsmWaRx
tilEpc7YH46yzJJ58FVumbx9nKYA5HC585HTET82ZHdLcQfg94eOTyl0tEH9tc85
ao5X09W+QxONykZr6JjN2b2K0AtVRgPMKWg2PeFlja4KDS/9iuvMOFv2woRXd6Py
lLuiKAdnLy9TxqBmktBfFEMLK+SoKBDjo6Xogniq6yZ87nTXGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9v4XdARL+0KU5FEMMpPVTbyEiTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYjU3YzVmZTktZTk4NS0z
OGIyLTljYzItYzRkZmMwN2JjZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+/4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGDJu39VpS9F+2RKHLRRk6g1OLV8MwQZzrZYZu/0gJ1TebfDS9ekfjO
PX4EpOiWZHjItM0Oh72VyoXVHdbvNmW6LhHJexnJ6iCMVwDV/O+xZQZqRpn7bp2B
sp+f6VU9mF+l3eTEox6RD8Sr8NiX/Oli8vA0HY5BxBBPBYBZGHQ5U7K4f51MHE2p
IFMFrchQ9LouL7c0r3ks1eRacd5gcsGF67tc2NeQSgBTaXV7n9NDSvT7v7CGOBsd
em3f7T8kINvWlNgMH1455hu2bEw7rHzoaf1sP0RYQDVOd1I7gBxq1Y6EoFIPzW4f
fAiACBYrPmZkPFshcFkjcOkJ/HfGNf4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:46 2025 by rpki-client