Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/24105fda-50fc-3315-80fa-9b2b670269aa.roa
File:                     24105fda-50fc-3315-80fa-9b2b670269aa.roa (raw, json)
Hash identifier:          L1FoTJJLBwmC0gWdckb8PWwd7lGlfFzAl/w43ov63JU=
Subject key identifier:   2E:E2:FE:14:20:14:E4:68:A3:31:CC:3B:00:23:46:FC:F2:79:3C:72
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584AD23BADC50754FAFE44CB4000
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/24105fda-50fc-3315-80fa-9b2b670269aa.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        192.184.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:ad:c5:07:54:fa:fe:44:cb:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=380693a1-48a9-4027-9c40-76da01dd8153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:ea:98:2f:85:5a:bc:ac:65:9e:b6:22:69:
                    c2:39:95:4e:af:86:54:2e:79:bd:55:cd:51:ce:18:
                    e1:90:ec:1d:20:fa:2a:ff:a0:9f:00:9f:bf:f1:33:
                    d1:28:75:13:18:1c:60:0a:c6:2d:8e:f7:d6:c1:75:
                    80:6a:c4:8d:38:3c:9f:53:89:cd:05:1b:2e:85:7b:
                    b6:8e:2f:8c:36:d8:11:03:ba:9a:e1:70:37:0e:c9:
                    14:0a:51:c4:47:58:af:db:b3:2e:d9:70:ce:f8:7b:
                    79:5b:26:42:0e:ca:36:1c:97:81:d9:fe:31:ed:f4:
                    e9:f8:44:90:e7:60:2a:05:d0:ee:f9:da:18:4b:f6:
                    28:2a:29:95:e6:25:46:ef:f0:98:7c:72:ea:4d:8b:
                    c8:e4:6b:3a:4a:fa:8c:96:79:c2:ef:ff:cb:3a:67:
                    a4:19:e7:33:fa:f3:fa:17:9f:a1:09:a4:a9:cf:07:
                    11:8b:01:ae:ba:5a:f8:c4:f1:22:97:b4:80:1d:df:
                    6c:ac:dc:5e:19:58:f1:19:68:c9:f9:90:6b:24:5a:
                    d4:0c:a3:31:fe:88:32:73:de:e4:cf:bf:a0:a5:a2:
                    a5:6e:66:e5:a4:bd:d3:11:d1:b9:e0:78:4c:d6:c8:
                    7e:b3:d8:6c:04:36:c6:a6:9e:8d:7a:f8:4f:22:f1:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:FE:14:20:14:E4:68:A3:31:CC:3B:00:23:46:FC:F2:79:3C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/24105fda-50fc-3315-80fa-9b2b670269aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:b0:1c:e2:3d:7b:88:ef:28:6e:0f:8e:af:70:fc:51:79:96:
         23:c1:b2:32:b8:94:a9:90:06:cb:7f:1a:da:26:3c:86:59:9d:
         ef:53:0c:b7:8e:02:3e:e8:b4:2e:ca:58:cf:97:61:b6:c6:11:
         db:d2:9b:f3:be:38:32:05:f0:eb:8b:27:69:32:65:0a:24:f6:
         4f:a8:d8:c2:c3:85:55:11:0b:5d:1f:04:97:75:7e:70:ba:43:
         4f:f3:da:54:c1:75:b1:56:cf:6b:1d:50:9f:93:ad:c8:5e:b5:
         0b:37:3b:be:8a:bb:1c:bf:57:d8:68:a4:dd:6a:f9:9b:0a:2a:
         28:a1:97:0e:21:77:70:10:ab:fa:04:cc:ec:b6:5c:58:da:7e:
         c9:fa:f8:76:73:56:a1:9b:e4:9d:e5:e3:05:5b:d3:4a:56:68:
         5c:b6:6f:1a:26:9f:b8:1d:8f:14:4b:6b:21:0e:41:f6:5a:64:
         26:40:14:1a:90:29:39:ae:1f:1f:d4:17:a7:5f:12:39:a5:df:
         59:30:08:e7:72:bd:0b:77:75:4b:9e:bd:a7:37:b8:57:3b:6b:
         33:99:38:3b:ac:81:b2:41:d5:af:4d:6a:c3:26:2e:91:19:61:
         b7:6a:c6:81:56:21:16:25:64:5a:31:09:c9:ce:3b:64:8a:8c:
         8d:e2:e6:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO63FB1T6/kTLQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
MzgwNjkzYTEtNDhhOS00MDI3LTljNDAtNzZkYTAxZGQ4MTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPrqmC+FWrysZZ62ImnCOZVOr4ZULnm9Vc1R
zhjhkOwdIPoq/6CfAJ+/8TPRKHUTGBxgCsYtjvfWwXWAasSNODyfU4nNBRsuhXu2
ji+MNtgRA7qa4XA3DskUClHER1iv27Mu2XDO+Ht5WyZCDso2HJeB2f4x7fTp+ESQ
52AqBdDu+doYS/YoKimV5iVG7/CYfHLqTYvI5Gs6SvqMlnnC7//LOmekGecz+vP6
F5+hCaSpzwcRiwGuulr4xPEil7SAHd9srNxeGVjxGWjJ+ZBrJFrUDKMx/ogyc97k
z7+gpaKlbmblpL3TEdG54HhM1sh+s9hsBDbGpp6NevhPIvHqcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7i/hQgFORoozHMOwAjRvzyeTxyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMjQxMDVmZGEtNTBmYy0z
MzE1LTgwZmEtOWIyYjY3MDI2OWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALCwHOI9e4jvKG4Pjq9w/FF5liPBsjK4lKmQBst/GtomPIZZne9TDLeO
Aj7otC7KWM+XYbbGEdvSm/O+ODIF8OuLJ2kyZQok9k+o2MLDhVURC10fBJd1fnC6
Q0/z2lTBdbFWz2sdUJ+TrchetQs3O76Kuxy/V9hopN1q+ZsKKiihlw4hd3AQq/oE
zOy2XFjafsn6+HZzVqGb5J3l4wVb00pWaFy2bxomn7gdjxRLayEOQfZaZCZAFBqQ
KTmuHx/UF6dfEjml31kwCOdyvQt3dUuevac3uFc7azOZODusgbJB1a9NasMmLpEZ
YbdqxoFWIRYlZFoxCcnOO2SKjI3i5ro=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:25:13 2025 by rpki-client