Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0b59db18-9852-39c0-b31b-8a05a0f04091.roa
File:                     0b59db18-9852-39c0-b31b-8a05a0f04091.roa (raw, json)
Hash identifier:          A0cCx+3YgIu6k4idoU44o1mVeE2gon6XXdS/DgE7cys=
Subject key identifier:   B4:FB:85:68:E6:67:19:9A:5A:D2:85:1A:20:8C:49:50:94:C4:EE:56
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584ABE32F4744FA4FD0F2148ED80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0b59db18-9852-39c0-b31b-8a05a0f04091.roa
Signing time:             Mon 04 Aug 2025 08:47:01 +0000
ROA not before:           Mon 04 Aug 2025 08:47:01 +0000
ROA not after:            Sun 02 Nov 2025 09:47:01 +0000
asID:                     62610
IP address blocks:        23.251.33.0/24 maxlen: 24
                          23.251.36.0/24 maxlen: 24
                          23.251.37.0/24 maxlen: 24
                          23.251.38.0/24 maxlen: 24
                          23.251.43.0/24 maxlen: 24
                          23.251.44.0/24 maxlen: 24
                          23.251.45.0/24 maxlen: 24
                          23.251.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:32:f4:74:4f:a4:fd:0f:21:48:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Aug  4 08:47:01 2025 GMT
            Not After : Nov  2 09:47:01 2025 GMT
        Subject: CN=f14eff77-9e53-448a-819d-0b38e19ec9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:84:38:21:d2:9e:29:37:62:81:4e:21:6c:
                    ec:cb:7a:1c:81:b3:a3:13:be:c7:2d:8c:af:5b:ff:
                    78:30:94:8c:c9:4a:fd:1b:1a:27:b5:f3:8b:1b:b0:
                    45:0f:67:c5:88:b3:11:be:5c:56:63:25:1d:e9:b2:
                    c8:e8:01:a4:e4:78:c0:85:f8:a7:ef:1a:a7:48:e6:
                    36:5b:4b:4d:d6:21:16:ac:6a:2c:86:9c:c6:53:1e:
                    21:8a:ad:fc:18:63:a8:2e:bf:49:ce:22:d1:57:56:
                    af:42:74:f7:7a:b9:9a:32:ba:13:50:c5:fc:20:8b:
                    95:ec:97:eb:05:ea:27:dc:5c:10:6a:99:d1:33:6b:
                    1b:e5:56:57:3c:61:0a:5b:93:be:92:5c:c1:6a:da:
                    5f:04:f2:60:23:34:26:67:54:a3:97:ca:a4:1d:e9:
                    9b:c9:15:24:17:9e:4c:95:07:a9:d6:eb:b0:06:76:
                    10:62:09:46:5c:79:4c:ec:0e:91:97:c4:11:1d:64:
                    9e:f3:ca:d7:ce:aa:d3:dc:91:33:13:54:74:d1:42:
                    ca:40:8c:d3:26:2d:b2:13:29:f0:38:4c:55:92:ae:
                    58:60:5c:d6:13:3f:e9:0f:50:d3:e4:8c:e9:9d:2c:
                    f4:07:b8:19:91:a4:82:58:d0:d5:1d:a3:fc:ac:65:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FB:85:68:E6:67:19:9A:5A:D2:85:1A:20:8C:49:50:94:C4:EE:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0b59db18-9852-39c0-b31b-8a05a0f04091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.33.0/24
                  23.251.36.0-23.251.38.255
                  23.251.43.0-23.251.46.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5b:ed:f3:8a:1f:c3:8a:36:98:a2:1f:e3:f7:7a:70:d1:0c:
         18:db:8b:89:14:fc:4e:90:b5:d0:c3:77:77:b0:23:1f:f7:9a:
         2c:6e:5c:6a:c6:08:be:36:59:94:b4:e9:97:02:d9:2c:3a:5d:
         50:f2:ce:a0:ba:d1:81:b1:21:02:90:4c:0a:19:ac:e6:8a:ba:
         8c:c6:09:37:69:b7:98:bf:80:6e:19:4e:b4:07:28:4b:f5:2b:
         43:f8:7d:ab:ab:07:db:6d:43:fb:74:1f:e3:99:37:d4:4b:b8:
         3c:1c:80:8b:36:6b:a7:b1:cd:1f:12:c6:15:e0:38:38:5f:30:
         7d:8a:37:96:07:a0:02:00:74:1a:20:05:b4:6d:59:79:82:1a:
         f8:2c:47:3e:8e:58:84:b4:d0:cb:1b:9b:1b:d8:38:0d:ab:1f:
         33:5c:61:fb:fb:9c:81:d3:66:01:5a:94:02:36:e2:7b:9f:18:
         2b:c1:97:04:ac:3f:52:01:a7:0f:9c:12:24:d2:fc:51:45:a1:
         40:a6:9d:1f:3f:63:13:ec:be:04:6d:da:79:17:d8:da:d2:66:
         4b:f6:c7:27:cd:b9:24:68:0a:ee:9f:53:f1:e2:d3:b7:00:8a:
         be:8d:70:25:8d:7a:d7:0d:c0:27:66:1b:60:b6:4e:86:92:ee:
         56:50:f1:94
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEq+MvR0T6T9DyFI7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI1MDgwNDA4NDcwMVoXDTI1MTEwMjA5NDcwMVowLzEtMCsGA1UEAxMk
ZjE0ZWZmNzctOWU1My00NDhhLTgxOWQtMGIzOGUxOWVjOWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZiEOCHSnik3YoFOIWzsy3ocgbOjE77HLYyv
W/94MJSMyUr9GxontfOLG7BFD2fFiLMRvlxWYyUd6bLI6AGk5HjAhfin7xqnSOY2
W0tN1iEWrGoshpzGUx4hiq38GGOoLr9JziLRV1avQnT3ermaMroTUMX8IIuV7Jfr
Beon3FwQapnRM2sb5VZXPGEKW5O+klzBatpfBPJgIzQmZ1Sjl8qkHembyRUkF55M
lQep1uuwBnYQYglGXHlM7A6Rl8QRHWSe88rXzqrT3JEzE1R00ULKQIzTJi2yEynw
OExVkq5YYFzWEz/pD1DT5IzpnSz0B7gZkaSCWNDVHaP8rGV2qwIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFLT7hWjmZxmaWtKFGiCMSVCUxO5WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMGI1OWRiMTgtOTg1Mi0z
OWMwLWIzMWItOGEwNWEwZjA0MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAF/shMAwD
BAIX+yQDBAAX+yYwDAMEABf7KwMEABf7LjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4W+3zih/DijaYoh/j
93pw0QwY24uJFPxOkLXQw3d3sCMf95osblxqxgi+NlmUtOmXAtksOl1Q8s6gutGB
sSECkEwKGazmirqMxgk3abeYv4BuGU60ByhL9StD+H2rqwfbbUP7dB/jmTfUS7g8
HICLNmunsc0fEsYV4Dg4XzB9ijeWB6ACAHQaIAW0bVl5ghr4LEc+jliEtNDLG5sb
2DgNqx8zXGH7+5yB02YBWpQCNuJ7nxgrwZcErD9SAacPnBIk0vxRRaFApp0fP2MT
7L4Ebdp5F9ja0mZL9scnzbkkaArun1Px4tO3AIq+jXAljXrXDcAnZhtgtk6Gku5W
UPGU
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:24 2025 by rpki-client