Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/0c060746-dfa9-3d36-9473-b896b81420c9.roa
File:                     0c060746-dfa9-3d36-9473-b896b81420c9.roa (raw, json)
Hash identifier:          4YQVbbXundMke/gG2844MDvis73ddyevBcXfAubIruU=
Subject key identifier:   41:B8:F8:F6:E3:35:A5:89:7C:12:69:29:7B:0D:EA:9D:0B:E1:C2:19
Certificate issuer:       /CN=d489668a-f993-4f95-90e5-c584eabef64b
Certificate serial:       010D0C9F4328584B750CA3F25EDFD29F5F998580
Authority key identifier: 34:AA:F7:71:65:BB:52:CA:05:49:3E:66:71:5F:18:62:87:72:A0:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/0c060746-dfa9-3d36-9473-b896b81420c9.roa
Signing time:             Wed 08 Oct 2025 20:42:45 +0000
ROA not before:           Wed 08 Oct 2025 20:42:45 +0000
ROA not after:            Tue 06 Jan 2026 21:42:45 +0000
asID:                     402026
IP address blocks:        23.146.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:0c:a3:f2:5e:df:d2:9f:5f:99:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d489668a-f993-4f95-90e5-c584eabef64b
        Validity
            Not Before: Oct  8 20:42:45 2025 GMT
            Not After : Jan  6 21:42:45 2026 GMT
        Subject: CN=de0beade-96ed-484c-9040-2e0469558a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8c:db:60:d7:2f:74:8b:e5:a1:db:ca:60:27:
                    82:49:da:28:51:58:02:fd:7c:0d:e1:eb:5e:f9:2a:
                    98:2a:8e:38:2d:c5:94:9a:a7:75:81:ae:29:b2:f9:
                    55:cf:80:cc:1c:6e:4b:14:0a:51:d3:1a:44:49:8b:
                    94:68:95:05:e1:ca:8b:fb:ce:6b:82:fc:77:af:4a:
                    81:dd:b7:30:27:bf:fa:4e:eb:54:c4:ac:46:4c:0c:
                    9a:18:cd:46:07:6d:ff:e0:f8:e3:34:e8:a6:e2:8a:
                    2a:4c:a6:e5:89:0b:e3:e2:d6:da:34:a9:5d:35:72:
                    a3:80:56:04:3e:74:82:e5:ab:f1:a7:2d:8f:d3:d0:
                    79:e1:ec:f2:d9:4a:5b:8f:88:ae:7b:f6:01:34:77:
                    3d:fc:b1:fa:9f:d9:48:d8:fc:9c:77:c1:9e:5c:42:
                    2f:97:17:96:34:b3:19:e2:7f:67:8c:96:53:6a:a8:
                    f0:b0:86:93:95:0c:41:54:d2:20:f6:60:a2:7d:d3:
                    63:59:d5:44:d1:07:88:f4:60:a8:16:99:c3:a5:c2:
                    d1:ce:e8:6d:78:0f:28:ae:f6:4d:4a:f5:20:d1:bc:
                    9d:aa:36:93:54:c3:c9:3c:e8:39:f0:d3:ef:2c:47:
                    63:49:29:83:d1:73:bc:8e:19:52:50:b1:12:b6:8a:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:F8:F6:E3:35:A5:89:7C:12:69:29:7B:0D:EA:9D:0B:E1:C2:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/0c060746-dfa9-3d36-9473-b896b81420c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.crl

            X509v3 Authority Key Identifier:
                keyid:34:AA:F7:71:65:BB:52:CA:05:49:3E:66:71:5F:18:62:87:72:A0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:7a:59:d6:49:41:77:c9:cc:f4:51:f3:31:9b:98:f7:f7:64:
         77:4b:38:de:76:73:0a:fa:70:9b:4d:7b:8b:df:f2:c9:9b:ff:
         c2:91:b5:4a:fe:e3:20:df:42:7b:05:79:b8:08:af:7e:18:80:
         05:52:9e:8d:10:08:7c:c0:c2:f6:a8:c7:4e:d3:c7:86:d1:92:
         ee:1f:ad:a8:31:66:6f:fd:dd:95:ec:fb:13:04:f6:1b:23:d0:
         49:e1:11:9e:7b:55:ea:ef:e8:f6:fe:4a:3e:79:8c:51:b6:cd:
         72:77:d8:9f:f2:f8:a6:c1:be:3d:bd:95:81:a0:64:8b:21:b3:
         50:6a:f8:c0:25:b7:dc:7d:6c:4b:0e:ac:34:e8:2b:f7:56:d1:
         7e:18:62:a7:e5:00:e4:08:fc:e3:12:70:81:01:b9:85:12:f9:
         84:43:21:2c:dc:31:58:16:92:b3:0c:6d:32:58:d1:59:3a:3e:
         97:30:74:cd:90:6e:3a:77:47:e1:00:bb:c4:ac:aa:15:78:d3:
         e0:26:32:15:46:3d:52:09:a0:ae:92:9e:56:ab:c1:51:78:88:
         fc:0b:57:79:be:db:45:2f:c0:54:99:e3:4e:c6:be:fa:8f:73:
         ec:df:1c:7a:f5:1e:ec:c8:da:5f:e5:92:39:a7:0a:1d:d0:ce:
         ee:dc:c6:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1DKPyXt/Sn1+ZhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ4OTY2OGEtZjk5My00Zjk1LTkwZTUtYzU4NGVhYmVm
NjRiMB4XDTI1MTAwODIwNDI0NVoXDTI2MDEwNjIxNDI0NVowLzEtMCsGA1UEAxMk
ZGUwYmVhZGUtOTZlZC00ODRjLTkwNDAtMmUwNDY5NTU4YTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhozbYNcvdIvlodvKYCeCSdooUVgC/XwN4ete
+SqYKo44LcWUmqd1ga4psvlVz4DMHG5LFApR0xpESYuUaJUF4cqL+85rgvx3r0qB
3bcwJ7/6TutUxKxGTAyaGM1GB23/4PjjNOim4ooqTKbliQvj4tbaNKldNXKjgFYE
PnSC5avxpy2P09B54ezy2Upbj4iue/YBNHc9/LH6n9lI2Pycd8GeXEIvlxeWNLMZ
4n9njJZTaqjwsIaTlQxBVNIg9mCifdNjWdVE0QeI9GCoFpnDpcLRzuhteA8orvZN
SvUg0bydqjaTVMPJPOg58NPvLEdjSSmD0XO8jhlSULEStookMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEG4+PbjNaWJfBJpKXsN6p0L4cIZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNDg5
NjY4YS1mOTkzLTRmOTUtOTBlNS1jNTg0ZWFiZWY2NGIvMGMwNjA3NDYtZGZhOS0z
ZDM2LTk0NzMtYjg5NmI4MTQyMGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDQ4OTY2OGEtZjk5My00Zjk1LTkw
ZTUtYzU4NGVhYmVmNjRiL2Q0ODk2NjhhLWY5OTMtNGY5NS05MGU1LWM1ODRlYWJl
ZjY0Yi5jcmwwHwYDVR0jBBgwFoAUNKr3cWW7UsoFST5mcV8YYodyoBswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kNDg5NjY4YS1mOTkzLTRmOTUtOTBlNS1jNTg0
ZWFiZWY2NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5I8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKN6WdZJQXfJzPRR8zGbmPf3ZHdLON52cwr6cJtNe4vf8smb/8KRtUr+
4yDfQnsFebgIr34YgAVSno0QCHzAwvaox07Tx4bRku4fragxZm/93ZXs+xME9hsj
0EnhEZ57Verv6Pb+Sj55jFG2zXJ32J/y+KbBvj29lYGgZIshs1Bq+MAlt9x9bEsO
rDToK/dW0X4YYqflAOQI/OMScIEBuYUS+YRDISzcMVgWkrMMbTJY0Vk6PpcwdM2Q
bjp3R+EAu8SsqhV40+AmMhVGPVIJoK6SnlarwVF4iPwLV3m+20UvwFSZ407GvvqP
c+zfHHr1HuzI2l/lkjmnCh3Qzu7cxuk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:48:29 2025 by rpki-client