Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1eff2257-7ea5-3bda-a026-47feb9fc5c6b.roa
File:                     1eff2257-7ea5-3bda-a026-47feb9fc5c6b.roa (raw, json)
Hash identifier:          q6mjLfzipvvUtE2x9QGN186fEniyFJHOCx6LkZmWMBg=
Subject key identifier:   8B:49:20:5D:8D:64:71:7C:2F:63:9E:97:48:FB:04:7A:82:8F:7E:FB
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA80B587256161BFB77C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1eff2257-7ea5-3bda-a026-47feb9fc5c6b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        24.244.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a8:0b:58:72:56:16:1b:fb:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=acda65ec-6ff5-4493-8770-a9b236313057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:ff:21:ba:85:cf:21:af:f9:e1:83:d4:44:
                    2b:21:cf:15:5b:a1:14:85:9f:10:93:90:28:6a:2d:
                    14:f4:86:1c:e1:e8:ae:c1:6e:8c:04:e9:8d:c6:93:
                    56:eb:ca:24:1e:b5:48:23:b7:83:dd:84:41:8a:23:
                    a9:aa:63:8b:85:fd:b9:a0:57:20:a1:f4:ad:08:7d:
                    42:61:3d:dc:28:23:cf:74:76:ae:a6:95:c8:3c:b0:
                    3c:e2:39:6f:03:f5:5a:85:34:85:63:a0:8c:a7:66:
                    d0:de:f6:e6:21:0e:f9:59:2a:ca:95:f6:1c:9c:bb:
                    b3:f3:44:60:0f:71:89:50:e4:61:7d:38:ac:15:60:
                    eb:ac:12:37:89:61:71:e1:d0:d2:52:04:6d:a2:24:
                    41:10:4e:e1:e4:61:24:74:97:ef:d6:af:66:1c:9c:
                    5a:2e:f7:94:65:bf:e0:10:d6:5e:8a:a1:1f:7c:97:
                    30:f6:9e:c6:71:1b:dc:77:ad:a2:8e:4b:f4:ee:53:
                    01:0b:39:3d:61:d3:dc:46:f7:a3:cc:1a:f9:e3:c4:
                    2c:04:87:ea:f7:48:95:16:f3:f4:f1:86:1d:51:40:
                    5e:fd:28:32:8f:ca:cc:3d:88:da:63:9a:78:b1:9c:
                    0b:ac:28:0e:0d:7a:15:a4:d2:ac:c8:c5:40:ec:4f:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:49:20:5D:8D:64:71:7C:2F:63:9E:97:48:FB:04:7A:82:8F:7E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1eff2257-7ea5-3bda-a026-47feb9fc5c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:02:33:9c:e3:a4:2c:d9:19:53:53:f1:9d:85:3d:9f:ff:
         3d:55:43:bf:f6:e6:9e:ad:56:63:4f:30:17:5a:70:47:94:30:
         08:07:b4:ec:bb:40:b4:f1:c4:69:1d:1b:02:ee:e7:02:44:65:
         21:ba:fe:f5:d2:82:7b:c3:e0:12:93:79:d0:d8:d2:ea:0d:82:
         4a:0f:02:73:6a:0a:29:57:88:0c:80:15:38:d8:27:f8:60:2b:
         f3:e1:a5:ee:a0:43:ca:42:1a:dc:d3:67:ba:fc:41:42:de:95:
         7d:63:d1:6d:1c:c2:98:9c:cc:f8:e1:14:97:47:70:6f:e8:09:
         5f:49:6b:58:6d:e0:5b:22:be:ef:93:86:a2:9a:7a:7c:2d:64:
         ee:d6:d8:bf:25:ed:6c:58:9b:d2:0e:56:d4:7e:9d:98:ea:89:
         20:c1:88:5d:34:0b:6f:e4:bd:02:a0:19:70:ec:e1:31:d7:29:
         b4:b1:6f:f8:6c:60:8c:75:18:83:50:b3:32:3a:e0:43:42:7c:
         73:b6:16:ff:79:b3:16:18:e3:e6:f6:0b:1c:c9:0c:f6:f3:12:
         e5:26:44:2c:f6:29:64:a7:f7:ba:b9:aa:a5:1f:01:32:f5:e5:
         ba:8d:b1:0f:9a:64:22:59:45:58:28:f8:a6:4d:4e:7c:60:e2:
         e0:42:06:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6gLWHJWFhv7d8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
YWNkYTY1ZWMtNmZmNS00NDkzLTg3NzAtYTliMjM2MzEzMDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9f/IbqFzyGv+eGD1EQrIc8VW6EUhZ8Qk5Ao
ai0U9IYc4eiuwW6MBOmNxpNW68okHrVII7eD3YRBiiOpqmOLhf25oFcgofStCH1C
YT3cKCPPdHauppXIPLA84jlvA/VahTSFY6CMp2bQ3vbmIQ75WSrKlfYcnLuz80Rg
D3GJUORhfTisFWDrrBI3iWFx4dDSUgRtoiRBEE7h5GEkdJfv1q9mHJxaLveUZb/g
ENZeiqEffJcw9p7GcRvcd62ijkv07lMBCzk9YdPcRvejzBr548QsBIfq90iVFvP0
8YYdUUBe/Sgyj8rMPYjaY5p4sZwLrCgODXoVpNKsyMVA7E8YOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItJIF2NZHF8L2Oel0j7BHqCj377MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMWVmZjIyNTctN2VhNS0z
YmRhLWEwMjYtNDdmZWI5ZmM1YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPRoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqWAjOc46Qs2RlTU/GdhT2f/z1VQ7/25p6tVmNPMBdacEeUMAgHtOy7
QLTxxGkdGwLu5wJEZSG6/vXSgnvD4BKTedDY0uoNgkoPAnNqCilXiAyAFTjYJ/hg
K/Phpe6gQ8pCGtzTZ7r8QULelX1j0W0cwpiczPjhFJdHcG/oCV9Ja1ht4Fsivu+T
hqKaenwtZO7W2L8l7WxYm9IOVtR+nZjqiSDBiF00C2/kvQKgGXDs4THXKbSxb/hs
YIx1GINQszI64ENCfHO2Fv95sxYY4+b2CxzJDPbzEuUmRCz2KWSn97q5qqUfATL1
5bqNsQ+aZCJZRVgo+KZNTnxg4uBCBrg=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:20 2025 by rpki-client