Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1470f452-067d-3623-a28e-75a87cb5b5fd.roa
File:                     1470f452-067d-3623-a28e-75a87cb5b5fd.roa (raw, json)
Hash identifier:          YBGfWjUxuwoE4M6d7aqVn5VNdqbcjITgO1CK0Hi6MQE=
Subject key identifier:   BD:07:C1:41:6F:F6:72:CC:A5:4B:56:26:E9:5D:8C:1E:D2:E6:B8:9E
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584AC2E0D6DF926D36635873DA80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1470f452-067d-3623-a28e-75a87cb5b5fd.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     40139
IP address blocks:        69.44.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:d6:df:92:6d:36:63:58:73:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=63924db6-7a69-4300-ab23-11e6c47b1126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:a3:b1:0b:28:1f:37:0e:38:1e:7f:2e:59:
                    0e:44:a4:6f:75:fd:73:21:18:0b:27:18:2b:a7:4c:
                    98:ea:dd:65:b3:65:13:a8:53:fe:8a:5b:43:5c:13:
                    c1:5d:80:f8:c9:2f:fe:aa:7d:16:11:9b:c5:e2:8d:
                    ae:d2:fa:3e:ca:b3:c5:2d:3b:ad:5e:3a:7d:2e:b4:
                    6d:74:e7:ba:6d:af:eb:34:2f:89:fe:66:1d:8c:1f:
                    1a:4e:61:86:50:2c:98:9d:12:89:e5:9e:e8:06:06:
                    ee:37:93:e8:dc:3e:37:80:11:16:30:90:f1:a3:18:
                    2f:be:ca:c1:45:f4:ad:ab:3a:4b:71:90:58:8c:4c:
                    7b:eb:d7:f6:20:ab:db:99:37:6a:53:9a:a4:0d:ca:
                    e9:1b:8a:77:e3:bf:9e:92:40:2f:e1:50:09:ec:de:
                    a0:8c:0b:e8:7e:3b:05:4c:9b:81:cf:dc:8c:6b:9a:
                    e9:0a:69:a5:e7:b0:0c:e3:7a:fa:9a:68:a2:5d:b5:
                    ff:0c:fd:a4:0a:6e:16:0b:a2:de:36:2e:b6:b3:80:
                    b4:26:f5:ae:96:d3:48:1f:e5:26:da:9f:13:c1:db:
                    69:0a:f1:c8:3c:2c:e4:0e:4b:50:99:0c:7e:13:2c:
                    68:a5:65:f5:c2:18:ce:76:07:7a:53:89:87:14:28:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:07:C1:41:6F:F6:72:CC:A5:4B:56:26:E9:5D:8C:1E:D2:E6:B8:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1470f452-067d-3623-a28e-75a87cb5b5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.44.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:62:dd:21:dd:c9:7e:f5:83:8d:c6:91:cc:03:3d:c2:0a:a3:
         ac:75:d8:c9:6b:eb:ce:ce:5c:e0:6a:be:63:23:aa:33:f6:cd:
         76:82:99:a8:82:9b:c6:7a:23:8d:ca:de:d3:20:d5:27:1f:d2:
         51:b0:45:c7:17:f6:5a:32:ad:d4:21:2f:3d:17:6b:c4:14:20:
         90:eb:c1:b8:c9:e5:94:dd:f2:6e:4b:0d:f8:e9:0a:34:30:8c:
         d4:c5:45:09:9c:ed:f5:e9:35:a4:8b:df:7d:3e:17:1a:b6:75:
         8a:98:33:99:ee:1f:ac:10:ca:d0:06:49:bb:32:cd:80:ca:12:
         10:31:39:da:2a:72:6a:c0:87:ef:79:b8:60:9b:8c:9d:57:61:
         84:d0:d5:d1:d5:cd:2d:5d:6c:e6:02:d9:b0:a4:21:f3:32:e1:
         e2:b9:40:0f:b7:19:6b:a1:64:3a:e6:d3:59:5f:d9:89:d7:a1:
         f6:3b:4b:8f:f5:c0:33:8c:cf:87:4b:1f:28:ac:94:20:85:ec:
         a4:39:c2:4d:ce:b5:86:88:7f:5a:ba:87:d7:f2:ba:b1:a4:69:
         48:4f:5b:e1:02:91:00:be:c1:d7:b1:fd:90:27:34:d3:af:16:
         bf:69:28:88:81:09:31:3f:cd:83:8a:c6:b7:af:3e:bf:a8:f4:
         90:c2:9d:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Nbfkm02Y1hz2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
NjM5MjRkYjYtN2E2OS00MzAwLWFiMjMtMTFlNmM0N2IxMTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGOjsQsoHzcOOB5/LlkORKRvdf1zIRgLJxgr
p0yY6t1ls2UTqFP+iltDXBPBXYD4yS/+qn0WEZvF4o2u0vo+yrPFLTutXjp9LrRt
dOe6ba/rNC+J/mYdjB8aTmGGUCyYnRKJ5Z7oBgbuN5Po3D43gBEWMJDxoxgvvsrB
RfStqzpLcZBYjEx769f2IKvbmTdqU5qkDcrpG4p347+ekkAv4VAJ7N6gjAvofjsF
TJuBz9yMa5rpCmml57AM43r6mmiiXbX/DP2kCm4WC6LeNi62s4C0JvWultNIH+Um
2p8TwdtpCvHIPCzkDktQmQx+EyxopWX1whjOdgd6U4mHFCjpbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0HwUFv9nLMpUtWJuldjB7S5rieMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMTQ3MGY0NTItMDY3ZC0z
NjIzLWEyOGUtNzVhODdjYjViNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRSwsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhi3SHdyX71g43GkcwDPcIKo6x12Mlr687OXOBqvmMjqjP2zXaCmaiC
m8Z6I43K3tMg1Scf0lGwRccX9loyrdQhLz0Xa8QUIJDrwbjJ5ZTd8m5LDfjpCjQw
jNTFRQmc7fXpNaSL330+Fxq2dYqYM5nuH6wQytAGSbsyzYDKEhAxOdoqcmrAh+95
uGCbjJ1XYYTQ1dHVzS1dbOYC2bCkIfMy4eK5QA+3GWuhZDrm01lf2YnXofY7S4/1
wDOMz4dLHyislCCF7KQ5wk3OtYaIf1q6h9fyurGkaUhPW+ECkQC+wdex/ZAnNNOv
Fr9pKIiBCTE/zYOKxrevPr+o9JDCnfk=
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:41:31 2025 by rpki-client