Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e0485bf3-6b5d-3cf6-a7fa-863378649b27.roa
File:                     e0485bf3-6b5d-3cf6-a7fa-863378649b27.roa (raw, json)
Hash identifier:          6QpriXtZf0qngEtAJWx2SKdFCAQvHH1x+D8lPNbyuuY=
Subject key identifier:   2C:71:66:FF:C1:F0:74:66:77:75:76:A0:36:4E:E7:0A:11:77:34:EB
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA7F8E6D82B8DADFCB340
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e0485bf3-6b5d-3cf6-a7fa-863378649b27.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        24.89.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a7:f8:e6:d8:2b:8d:ad:fc:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=d1aab30f-e908-4336-a4e7-7dd8b88c1ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:e9:9b:2f:7c:f6:87:71:4f:66:26:de:1b:
                    37:50:65:23:29:45:37:be:75:05:38:fe:95:f5:e0:
                    bd:e5:76:04:d5:e7:7c:89:bb:bf:08:1a:82:9c:db:
                    d8:79:41:5f:ae:7d:cd:98:57:db:85:27:6c:6c:0c:
                    fe:d6:5f:c8:54:f5:11:23:1f:59:c5:b9:f9:e5:d2:
                    8b:91:4c:bc:3f:0f:ee:f4:7a:57:a1:22:fe:62:fd:
                    e1:51:18:0b:58:43:43:dd:b4:48:76:e1:04:a9:85:
                    02:fe:f8:e9:a1:22:3f:7e:17:3f:60:46:eb:14:87:
                    1d:69:40:43:f8:ba:c9:f6:3a:73:17:7f:48:89:30:
                    72:2d:0b:f9:cb:48:27:f4:d8:0e:73:08:56:56:a3:
                    97:90:e7:4b:72:36:b5:54:67:66:13:5e:61:ec:b9:
                    fd:d9:fa:de:28:cd:42:11:bc:df:9b:dc:4b:d5:b6:
                    a4:8a:9c:4e:a7:f4:e0:cb:d8:9c:14:51:9f:56:81:
                    bc:f9:7e:5f:24:85:0c:e4:ab:ee:57:0a:6c:75:da:
                    7c:92:da:a2:b1:ac:65:91:0b:ea:65:22:24:b8:25:
                    58:df:fe:be:c1:2b:10:9f:6b:e4:b4:61:be:49:90:
                    b8:a9:db:16:1d:3d:2e:fc:be:ea:61:ae:37:66:ab:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:71:66:FF:C1:F0:74:66:77:75:76:A0:36:4E:E7:0A:11:77:34:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e0485bf3-6b5d-3cf6-a7fa-863378649b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c8:bf:93:24:ea:d1:8d:b9:a4:c5:98:f2:a9:51:9b:3a:4b:
         ae:8f:50:07:cc:50:13:cd:8b:16:cc:83:a8:87:4b:f8:e5:f9:
         e0:fa:00:a9:b8:fd:f8:76:6a:b5:65:56:9d:a3:a6:8c:8a:72:
         52:39:d1:5f:b6:e7:90:98:5b:25:7e:96:40:b3:68:89:3e:3f:
         57:49:9d:fe:2c:1a:29:44:04:3f:36:24:66:b8:91:d7:96:97:
         84:47:82:33:85:58:2e:d8:e1:59:0e:bc:05:eb:b7:f0:b7:f3:
         2e:30:9a:02:39:ca:c7:80:c4:02:a2:00:6e:be:a1:73:52:10:
         78:e3:9f:94:31:99:e1:3d:5b:21:9e:f4:ed:1a:e5:74:ee:3f:
         eb:d3:ae:3b:bd:34:da:24:0b:52:6a:55:eb:38:a8:0f:17:9a:
         3b:2b:d2:a3:ff:f2:af:95:f3:d1:85:88:e2:65:1c:98:c0:7d:
         a4:cc:f9:59:be:8d:da:01:a4:51:47:51:f1:ff:04:1c:ff:48:
         5e:9e:ba:80:b2:36:87:1e:49:6c:78:83:57:9f:cb:fb:4c:bb:
         05:b6:8f:a0:52:a9:7a:78:c6:27:f6:d0:23:ad:24:c0:25:29:
         72:27:59:50:50:1e:0c:39:78:da:ff:36:ab:38:74:13:70:2d:
         0d:c1:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:57:08 2025 by rpki-client