Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/006fd0a7-9256-4454-93a2-2c0167d518bc/73159c49-65e9-387f-8a70-6196d785dd56.roa
File:                     73159c49-65e9-387f-8a70-6196d785dd56.roa (raw, json)
Hash identifier:          FNaGXjWPGpqeHSE4bvkT9IcpUQrUYxw359Ngy1gbHas=
Subject key identifier:   DD:CA:8A:2B:A5:12:AE:6E:A2:F9:C4:56:72:11:0B:0F:2B:7A:95:EB
Certificate issuer:       /CN=006fd0a7-9256-4454-93a2-2c0167d518bc
Certificate serial:       010D0C9F4328584A1F90175C52CF8E6D244A2080
Authority key identifier: 4B:5D:4E:6F:CA:F6:4F:2A:F0:C9:20:E5:BE:C6:9E:C5:43:00:2E:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/006fd0a7-9256-4454-93a2-2c0167d518bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/006fd0a7-9256-4454-93a2-2c0167d518bc/73159c49-65e9-387f-8a70-6196d785dd56.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     30077
IP address blocks:        23.135.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/006fd0a7-9256-4454-93a2-2c0167d518bc/006fd0a7-9256-4454-93a2-2c0167d518bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/006fd0a7-9256-4454-93a2-2c0167d518bc/006fd0a7-9256-4454-93a2-2c0167d518bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/006fd0a7-9256-4454-93a2-2c0167d518bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:17:5c:52:cf:8e:6d:24:4a:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006fd0a7-9256-4454-93a2-2c0167d518bc
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=962aa2da-cae8-4e6b-898f-54d3babd7211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:b1:ee:02:91:4c:b1:f9:da:f7:9e:12:3a:
                    b8:69:6d:dd:7c:12:8e:24:16:09:25:c2:aa:77:b2:
                    79:db:d2:25:4d:a7:b5:42:85:bc:b2:6c:7e:a9:2c:
                    81:f8:69:8f:7c:95:ca:af:42:87:43:2e:df:0f:15:
                    eb:40:c8:f8:56:79:e1:19:56:79:8e:51:46:3c:1b:
                    7e:41:ab:ea:35:e0:bf:ae:31:ae:29:9c:3c:53:77:
                    26:28:2d:59:b2:dd:02:69:2d:87:ad:a0:c6:9b:56:
                    8f:44:82:91:a9:46:d7:1b:dd:a2:f4:c6:dd:cb:1a:
                    be:4d:fd:be:11:1c:80:9d:df:e3:f9:24:6b:14:d0:
                    7c:be:8b:7b:20:84:de:60:10:43:0c:cf:9e:20:31:
                    9e:c6:cf:7a:90:5d:fd:bd:1e:2c:53:4b:53:7a:54:
                    53:00:57:c5:97:86:58:10:0f:af:41:e0:4a:6e:e2:
                    f8:17:0d:d9:97:79:d4:65:3a:45:44:4d:71:a6:28:
                    a1:0e:3c:66:71:14:2d:cb:19:ac:e0:65:63:43:cd:
                    19:67:73:46:a2:78:ab:9b:f1:7c:75:a1:a0:ce:16:
                    ff:d3:19:2f:c8:00:2c:0b:1d:7c:8b:49:f6:7b:d8:
                    f9:c9:5d:5e:10:5f:95:56:f8:d2:d1:5f:db:f0:97:
                    9b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CA:8A:2B:A5:12:AE:6E:A2:F9:C4:56:72:11:0B:0F:2B:7A:95:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/006fd0a7-9256-4454-93a2-2c0167d518bc/73159c49-65e9-387f-8a70-6196d785dd56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/006fd0a7-9256-4454-93a2-2c0167d518bc/006fd0a7-9256-4454-93a2-2c0167d518bc.crl

            X509v3 Authority Key Identifier:
                keyid:4B:5D:4E:6F:CA:F6:4F:2A:F0:C9:20:E5:BE:C6:9E:C5:43:00:2E:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/006fd0a7-9256-4454-93a2-2c0167d518bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:52:4f:60:26:1d:db:65:6e:74:a8:4b:cc:2d:7d:e7:5d:5d:
         ed:86:fd:2d:9d:c2:7e:cc:66:bb:91:d4:d7:6a:34:db:df:7d:
         fa:96:93:11:e7:03:53:4d:37:0b:8a:00:64:15:8f:28:40:53:
         ae:5e:3f:9a:55:8b:17:5a:24:f6:f8:2e:a2:af:90:cf:26:ba:
         94:86:2e:91:11:32:97:eb:0c:7d:41:ef:8a:cd:92:dc:28:94:
         b3:12:69:b7:58:43:0f:4d:3a:59:00:b7:74:bc:fd:1c:10:68:
         33:f6:4f:54:f3:5a:30:0b:54:37:f6:23:ad:27:6c:f4:6d:48:
         81:b6:50:81:71:a3:70:84:db:be:9d:07:f0:08:e0:1b:b0:04:
         bf:34:e8:04:51:1c:76:54:46:b3:19:fa:30:43:e9:71:63:2b:
         2c:f2:95:06:58:ad:38:2c:f3:e6:ef:90:4a:48:cc:df:a2:8a:
         be:4f:ef:36:47:36:71:13:c8:25:22:ef:59:d6:46:5b:7c:6f:
         17:d3:4b:09:33:89:1f:e2:b2:75:7e:35:b1:a6:fc:7d:a6:a3:
         fd:c5:f8:4c:f5:9f:cb:d4:17:5e:a5:ae:3e:b5:7e:8b:43:72:
         3a:45:c0:f6:fc:3b:a1:3d:08:32:d4:c9:b0:e0:eb:d0:bb:87:
         82:b9:a2:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkBdcUs+ObSRKIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA2ZmQwYTctOTI1Ni00NDU0LTkzYTItMmMwMTY3ZDUx
OGJjMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
OTYyYWEyZGEtY2FlOC00ZTZiLTg5OGYtNTRkM2JhYmQ3MjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQCx7gKRTLH52veeEjq4aW3dfBKOJBYJJcKq
d7J529IlTae1QoW8smx+qSyB+GmPfJXKr0KHQy7fDxXrQMj4VnnhGVZ5jlFGPBt+
QavqNeC/rjGuKZw8U3cmKC1Zst0CaS2HraDGm1aPRIKRqUbXG92i9Mbdyxq+Tf2+
ERyAnd/j+SRrFNB8vot7IITeYBBDDM+eIDGexs96kF39vR4sU0tTelRTAFfFl4ZY
EA+vQeBKbuL4Fw3Zl3nUZTpFRE1xpiihDjxmcRQtyxms4GVjQ80ZZ3NGonirm/F8
daGgzhb/0xkvyAAsCx18i0n2e9j5yV1eEF+VVvjS0V/b8JebYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3KiiulEq5uovnEVnIRCw8repXrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMDZm
ZDBhNy05MjU2LTQ0NTQtOTNhMi0yYzAxNjdkNTE4YmMvNzMxNTljNDktNjVlOS0z
ODdmLThhNzAtNjE5NmQ3ODVkZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDA2ZmQwYTctOTI1Ni00NDU0LTkz
YTItMmMwMTY3ZDUxOGJjLzAwNmZkMGE3LTkyNTYtNDQ1NC05M2EyLTJjMDE2N2Q1
MThiYy5jcmwwHwYDVR0jBBgwFoAUS11Ob8r2TyrwySDlvsaexUMALmcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMDZmZDBhNy05MjU2LTQ0NTQtOTNhMi0yYzAx
NjdkNTE4YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4foMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBST2AmHdtlbnSoS8wtfeddXe2G/S2dwn7MZruR1NdqNNvfffqWkxHn
A1NNNwuKAGQVjyhAU65eP5pVixdaJPb4LqKvkM8mupSGLpERMpfrDH1B74rNktwo
lLMSabdYQw9NOlkAt3S8/RwQaDP2T1TzWjALVDf2I60nbPRtSIG2UIFxo3CE276d
B/AI4BuwBL806ARRHHZURrMZ+jBD6XFjKyzylQZYrTgs8+bvkEpIzN+iir5P7zZH
NnETyCUi71nWRlt8bxfTSwkziR/isnV+NbGm/H2mo/3F+Ez1n8vUF16lrj61fotD
cjpFwPb8O6E9CDLUybDg69C7h4K5orM=
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:37:46 2025 by rpki-client