Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/4edd6181-8c9e-3c63-a4af-613ef8e2b06b.roa
File:                     4edd6181-8c9e-3c63-a4af-613ef8e2b06b.roa (raw, json)
Hash identifier:          v/1H0xUUjStcsT3fDvNgwpFLpeU1GzP2KMWqlBQjCvA=
Subject key identifier:   D7:8B:51:5C:2B:CF:15:E2:C9:69:03:6A:1B:E4:F9:C4:D1:38:59:95
Certificate issuer:       /CN=75c2d703-b68a-47d9-8657-d65247155419
Certificate serial:       010D0C9F4328584A88409D58E6C74041AFD52A00
Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/4edd6181-8c9e-3c63-a4af-613ef8e2b06b.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     11776
IP address blocks:        23.175.40.0/24 maxlen: 24
                          23.175.41.0/24 maxlen: 24
                          149.112.109.0/24 maxlen: 24
                          2602:f926::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:9d:58:e6:c7:40:41:af:d5:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=60736f9e-515e-4072-b597-6b9aef104a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:71:a0:23:0b:a8:ee:51:54:c1:26:6c:99:
                    85:f7:ca:d8:82:00:10:60:00:6c:74:70:0b:0b:87:
                    3f:b3:96:09:c9:ec:f6:90:19:cd:7e:42:d7:d9:2d:
                    fb:c9:9f:6c:34:1e:17:41:8e:91:b0:39:a6:ca:c5:
                    12:cb:e0:ee:7c:97:b9:38:8a:9f:47:9c:7d:fa:5d:
                    66:75:73:41:51:73:bc:30:08:da:1c:e7:66:a4:f6:
                    0c:72:2c:41:10:62:10:4e:04:ad:13:56:86:04:3d:
                    66:d0:cb:68:ac:dd:6d:de:66:90:fc:a6:0a:8c:f6:
                    dd:68:cc:4a:05:08:40:00:18:49:70:86:62:03:3f:
                    34:24:35:7d:ff:03:58:91:10:0d:86:69:a0:02:20:
                    ab:3b:50:c2:6d:3c:fb:02:a3:44:ad:c9:1f:3c:ce:
                    71:f1:ff:0e:a9:d9:4e:77:82:c6:78:ca:7e:62:cd:
                    a2:27:b5:61:6e:df:e3:cb:08:c6:c3:0c:51:07:e2:
                    3d:4f:9a:59:1c:e9:3e:f0:f0:cc:7e:24:70:97:fe:
                    c8:db:de:a7:ac:4b:b7:ee:14:b7:f8:97:6e:51:f5:
                    d5:40:99:4a:74:a0:63:5c:8f:77:30:11:5e:f7:66:
                    c0:37:e2:42:3a:e6:70:ac:db:47:4b:ca:1a:2f:ea:
                    b1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:51:5C:2B:CF:15:E2:C9:69:03:6A:1B:E4:F9:C4:D1:38:59:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/4edd6181-8c9e-3c63-a4af-613ef8e2b06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl

            X509v3 Authority Key Identifier:
                keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.40.0/23
                  149.112.109.0/24
                IPv6:
                  2602:f926::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:89:71:92:9f:ef:1f:58:84:ae:b1:f2:90:3a:fd:d0:c4:
         ad:01:7e:8d:04:c1:03:4a:5b:63:a4:35:19:a4:be:d0:18:15:
         49:60:96:06:c3:f1:d7:a9:80:0f:ac:01:da:68:5e:72:1c:fe:
         54:c3:93:da:0a:57:98:49:a9:87:b4:65:4d:ca:e2:80:2e:2b:
         c9:e4:e5:65:39:68:99:d3:e0:a2:67:38:f2:56:82:47:bb:98:
         65:37:34:84:64:19:a4:2c:b6:2f:fa:4f:73:4e:b5:b3:fb:09:
         32:30:46:18:ad:fa:9b:b0:5e:af:3f:c8:9e:08:21:33:19:4f:
         d4:ac:6d:88:fc:ec:49:8c:8b:46:62:c8:3a:7c:6f:24:f3:11:
         1f:46:b1:2c:63:2a:ff:ec:05:7e:de:fd:45:be:b2:ab:89:76:
         7d:b4:79:17:d7:71:a6:49:7b:c7:39:a2:1d:93:82:af:0e:6c:
         e3:09:e5:f7:62:70:b4:1c:4c:4a:d7:de:de:23:34:e3:cb:f4:
         c7:0a:ee:37:8a:f7:bc:ab:61:a3:80:9a:32:89:0b:0c:00:ab:
         db:89:4b:45:76:b1:5a:8c:46:4b:8f:df:2e:69:32:22:b3:52:
         92:e2:2f:9b:e9:6d:66:1d:20:fb:d2:4b:34:9e:eb:10:50:ac:
         4f:dc:3a:98
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEqIQJ1Y5sdAQa/VKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVjMmQ3MDMtYjY4YS00N2Q5LTg2NTctZDY1MjQ3MTU1
NDE5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk
NjA3MzZmOWUtNTE1ZS00MDcyLWI1OTctNmI5YWVmMTA0YTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsBxoCMLqO5RVMEmbJmF98rYggAQYABsdHAL
C4c/s5YJyez2kBnNfkLX2S37yZ9sNB4XQY6RsDmmysUSy+DufJe5OIqfR5x9+l1m
dXNBUXO8MAjaHOdmpPYMcixBEGIQTgStE1aGBD1m0MtorN1t3maQ/KYKjPbdaMxK
BQhAABhJcIZiAz80JDV9/wNYkRANhmmgAiCrO1DCbTz7AqNErckfPM5x8f8OqdlO
d4LGeMp+Ys2iJ7Vhbt/jywjGwwxRB+I9T5pZHOk+8PDMfiRwl/7I296nrEu37hS3
+JduUfXVQJlKdKBjXI93MBFe92bAN+JCOuZwrNtHS8oaL+qxiwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFNeLUVwrzxXiyWkDahvk+cTROFmVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83NWMy
ZDcwMy1iNjhhLTQ3ZDktODY1Ny1kNjUyNDcxNTU0MTkvNGVkZDYxODEtOGM5ZS0z
YzYzLWE0YWYtNjEzZWY4ZTJiMDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzVjMmQ3MDMtYjY4YS00N2Q5LTg2
NTctZDY1MjQ3MTU1NDE5Lzc1YzJkNzAzLWI2OGEtNDdkOS04NjU3LWQ2NTI0NzE1
NTQxOS5jcmwwHwYDVR0jBBgwFoAUBp6HUUBycAS0WuwnVZI9zxaiKAowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83NWMyZDcwMy1iNjhhLTQ3ZDktODY1Ny1kNjUy
NDcxNTU0MTkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBF68oAwQA
lXBtMA4EAgACMAgDBgQmAvkmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpWolxkp/vH1iErrHykDr90MSt
AX6NBMEDSltjpDUZpL7QGBVJYJYGw/HXqYAPrAHaaF5yHP5Uw5PaCleYSamHtGVN
yuKALivJ5OVlOWiZ0+CiZzjyVoJHu5hlNzSEZBmkLLYv+k9zTrWz+wkyMEYYrfqb
sF6vP8ieCCEzGU/UrG2I/OxJjItGYsg6fG8k8xEfRrEsYyr/7AV+3v1FvrKriXZ9
tHkX13GmSXvHOaIdk4KvDmzjCeX3YnC0HExK197eIzTjy/THCu43ive8q2GjgJoy
iQsMAKvbiUtFdrFajEZLj98uaTIis1KS4i+b6W1mHSD70ks0nusQUKxP3DqY
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:15 2025 by rpki-client