Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/db4baa0b-d2db-358c-839a-ab3c2ab3a95e.roa
File:                     db4baa0b-d2db-358c-839a-ab3c2ab3a95e.roa (raw, json)
Hash identifier:          dKw/YebPXLMFQevgqyH0hLfsASlgCWXPzPvCJ6VeQIg=
Subject key identifier:   4A:4E:4D:AB:44:8C:20:8F:B1:97:9E:20:97:ED:80:09:3B:20:CF:60
Certificate issuer:       /CN=73b0221a-01e7-4f40-8f9b-6e4cf92c6efa
Certificate serial:       010D0C9F4328584A8B0B6488CB7DBCC17DC4D9A0
Authority key identifier: F0:F2:15:30:7C:82:D3:64:6E:75:CE:20:B4:CD:E2:32:30:5F:2C:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/db4baa0b-d2db-358c-839a-ab3c2ab3a95e.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     46998
IP address blocks:        23.176.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:64:88:cb:7d:bc:c1:7d:c4:d9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b0221a-01e7-4f40-8f9b-6e4cf92c6efa
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=822ce657-663a-4404-a752-82fe1cca9923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:10:49:46:74:55:92:15:bd:92:d5:4a:34:67:
                    06:cc:66:0f:81:f0:c6:59:3f:90:48:f6:55:71:34:
                    36:43:42:04:72:0b:c9:08:b0:a9:57:52:e9:0a:2a:
                    6c:1b:78:4c:1d:9e:c6:fd:0c:32:00:f7:fb:79:c9:
                    5f:db:36:03:17:79:da:47:78:f9:81:62:61:5b:89:
                    9e:b6:5d:be:56:4f:48:ca:cf:fa:ea:43:37:b5:04:
                    c3:26:c6:18:4f:0e:3d:2a:be:58:d1:98:9a:f5:f3:
                    23:7f:c5:1f:b9:c9:da:d6:b5:9d:f1:54:ba:78:bc:
                    25:e9:a8:0b:ee:ec:e9:f1:6b:c7:6d:b7:ba:9e:de:
                    22:7f:64:89:8f:15:14:b3:50:f6:f5:23:1b:ac:d0:
                    af:b1:1b:fb:7c:59:93:f0:a6:3c:ca:d4:70:ae:5c:
                    c1:83:a3:75:b3:4d:ca:3f:f2:fd:2d:e0:44:cc:8c:
                    d5:8f:93:69:f3:51:30:84:96:e8:8c:df:5b:9f:9c:
                    c6:00:54:10:f5:f1:cb:c2:be:6d:ac:01:0e:79:ab:
                    62:23:41:18:74:41:f9:9e:fc:23:49:4f:3b:f4:e9:
                    fe:a2:ba:c2:a5:79:e8:06:1c:9b:7b:e3:db:06:39:
                    16:11:df:dc:6a:bb:b5:72:23:84:31:99:39:78:3d:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4E:4D:AB:44:8C:20:8F:B1:97:9E:20:97:ED:80:09:3B:20:CF:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/db4baa0b-d2db-358c-839a-ab3c2ab3a95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.crl

            X509v3 Authority Key Identifier:
                keyid:F0:F2:15:30:7C:82:D3:64:6E:75:CE:20:B4:CD:E2:32:30:5F:2C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:16:47:57:33:17:13:f9:3c:5d:32:4b:4c:ad:9c:f8:d2:de:
         f5:d3:49:b7:2d:df:85:0c:8e:c6:c5:46:4e:14:96:ff:84:09:
         52:fa:27:9f:a6:04:55:f0:18:77:d7:ff:9a:2e:5b:cd:dc:0a:
         75:b5:82:41:37:0c:ba:a7:69:8c:9f:94:dc:84:39:ac:10:1d:
         7b:42:bd:be:b6:79:05:03:05:2d:ac:0f:50:4f:18:7e:13:8d:
         b3:7a:65:85:ac:c8:00:49:b6:ad:78:e0:dd:bc:0b:f2:be:7d:
         91:49:47:ba:b3:e1:15:42:ab:3b:cf:1e:c6:36:68:7b:d8:b7:
         60:01:31:db:91:ad:5b:eb:d1:93:7d:be:4f:88:91:0f:08:48:
         85:a8:44:ad:48:ab:d8:95:0d:12:c5:07:6a:ce:db:ac:91:5c:
         bc:f9:59:6a:f1:5b:d4:2c:0e:2e:d7:08:5c:d1:a0:c0:77:e6:
         1e:eb:12:bc:ea:0e:34:08:92:c4:1e:49:ef:50:8d:c7:0a:a6:
         10:34:24:a7:9e:9c:74:66:8e:65:90:49:85:9e:97:4c:f6:fb:
         42:20:68:64:e4:ef:70:7d:68:9a:5b:63:3d:ba:e9:02:a4:74:
         14:94:a1:25:55:a8:49:69:3a:be:b2:bf:67:bd:06:1a:94:f8:
         cc:3c:63:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2SIy328wX3E2aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNiMDIyMWEtMDFlNy00ZjQwLThmOWItNmU0Y2Y5MmM2
ZWZhMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
ODIyY2U2NTctNjYzYS00NDA0LWE3NTItODJmZTFjY2E5OTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBBJRnRVkhW9ktVKNGcGzGYPgfDGWT+QSPZV
cTQ2Q0IEcgvJCLCpV1LpCipsG3hMHZ7G/QwyAPf7eclf2zYDF3naR3j5gWJhW4me
tl2+Vk9Iys/66kM3tQTDJsYYTw49Kr5Y0Zia9fMjf8Ufucna1rWd8VS6eLwl6agL
7uzp8WvHbbe6nt4if2SJjxUUs1D29SMbrNCvsRv7fFmT8KY8ytRwrlzBg6N1s03K
P/L9LeBEzIzVj5Np81EwhJbojN9bn5zGAFQQ9fHLwr5trAEOeatiI0EYdEH5nvwj
SU879On+orrCpXnoBhybe+PbBjkWEd/caru1ciOEMZk5eD0WsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEpOTatEjCCPsZeeIJftgAk7IM9gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83M2Iw
MjIxYS0wMWU3LTRmNDAtOGY5Yi02ZTRjZjkyYzZlZmEvZGI0YmFhMGItZDJkYi0z
NThjLTgzOWEtYWIzYzJhYjNhOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzNiMDIyMWEtMDFlNy00ZjQwLThm
OWItNmU0Y2Y5MmM2ZWZhLzczYjAyMjFhLTAxZTctNGY0MC04ZjliLTZlNGNmOTJj
NmVmYS5jcmwwHwYDVR0jBBgwFoAU8PIVMHyC02Rudc4gtM3iMjBfLAYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83M2IwMjIxYS0wMWU3LTRmNDAtOGY5Yi02ZTRj
ZjkyYzZlZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7AIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkWR1czFxP5PF0yS0ytnPjS3vXTSbct34UMjsbFRk4Ulv+ECVL6J5+m
BFXwGHfX/5ouW83cCnW1gkE3DLqnaYyflNyEOawQHXtCvb62eQUDBS2sD1BPGH4T
jbN6ZYWsyABJtq144N28C/K+fZFJR7qz4RVCqzvPHsY2aHvYt2ABMduRrVvr0ZN9
vk+IkQ8ISIWoRK1Iq9iVDRLFB2rO26yRXLz5WWrxW9QsDi7XCFzRoMB35h7rErzq
DjQIksQeSe9QjccKphA0JKeenHRmjmWQSYWel0z2+0IgaGTk73B9aJpbYz266QKk
dBSUoSVVqElpOr6yv2e9BhqU+Mw8Y6k=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:17 2025 by rpki-client