Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa
File:                     861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa (raw, json)
Hash identifier:          oxa93O741QsfP424dh97oDd+acDe2xdf39/2z6arbMU=
Subject key identifier:   7F:8C:4E:E8:BB:B3:7C:23:A0:A4:1C:58:42:18:04:5F:09:5C:75:61
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F432858499C59E76A178B24E808D33A00
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     137443
IP address blocks:        23.247.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e7:6a:17:8b:24:e8:08:d3:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=7f2d7d61-9b5c-4b80-9d07-ea99f5c4b465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:a5:23:62:29:97:5e:da:57:8a:3f:f9:ca:
                    7c:f9:8c:d4:95:42:ca:08:45:8e:c2:a9:d0:c5:4e:
                    3c:94:8a:42:da:b3:e3:2c:57:47:c8:1c:13:f4:c5:
                    cb:58:da:07:50:9f:9e:b3:cb:d0:8b:ae:47:b2:70:
                    39:3a:0d:17:0c:5a:64:21:f0:9c:74:df:58:ac:00:
                    3c:c2:40:49:5b:84:6a:f9:55:61:71:b7:bd:dd:bb:
                    9c:15:41:15:65:3f:81:30:6d:96:51:a3:cf:cb:f1:
                    41:3d:41:32:66:96:ce:c1:ea:58:44:fb:b4:79:1b:
                    b7:75:b2:f2:08:61:72:f2:17:ae:5e:46:7d:dd:b5:
                    26:90:b9:03:ed:c5:4c:8d:fd:02:68:9c:79:78:be:
                    45:cd:69:9e:5c:36:ab:97:76:87:4b:d6:fd:97:51:
                    e9:bb:eb:2e:c5:d0:0d:89:6a:16:06:22:0a:99:86:
                    dd:10:c5:f8:71:e9:5f:ff:38:6a:2e:3e:6a:11:b4:
                    b9:2b:1d:56:5f:f7:f9:c4:09:7c:03:66:5a:ed:49:
                    a1:09:32:a8:f4:34:ee:c1:93:1c:61:d8:c5:e9:3c:
                    d2:95:9e:8c:e3:d8:89:9c:2c:76:35:cf:52:27:cd:
                    65:26:cc:f6:4b:82:26:42:a8:7a:aa:6a:93:e2:2a:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8C:4E:E8:BB:B3:7C:23:A0:A4:1C:58:42:18:04:5F:09:5C:75:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ac:65:35:12:4c:f8:1c:54:90:6a:90:d7:b5:78:ee:6d:46:
         45:b1:9e:69:49:41:a1:ec:a0:83:66:50:20:76:23:ab:08:77:
         fd:7b:65:a4:e7:6a:87:b5:8c:0e:39:e4:ce:1f:44:ba:9b:6f:
         e3:02:be:87:4f:3f:ec:0e:d5:d5:4b:0a:dd:6b:c9:c1:6b:c7:
         85:dc:45:17:95:0e:61:cf:ad:0d:6d:62:04:fa:89:45:d4:85:
         48:03:61:b9:24:89:d4:f0:7b:41:b9:ac:f5:3a:35:11:ba:79:
         4c:f8:b4:36:48:8e:97:13:fe:01:fc:41:ce:6a:3f:23:be:bd:
         95:64:25:f8:b0:71:ca:17:ee:f1:e3:f7:06:cf:14:b0:60:39:
         1f:bd:85:f5:a8:00:6c:8b:38:9c:73:3f:b3:a7:8a:20:65:49:
         0c:40:e4:38:a7:d9:f0:c8:56:ba:97:13:a1:ae:67:47:b7:48:
         19:51:73:4d:60:7e:bb:2c:3d:a2:04:ba:d8:a5:a4:c8:17:ee:
         6e:09:6c:18:35:01:07:a0:70:b6:49:ac:c8:ca:b2:dc:85:44:
         37:9b:33:d7:c6:09:93:7f:37:8f:ab:81:08:16:53:84:9f:a5:
         fe:be:0e:16:d4:ac:ae:39:b9:de:88:d7:ea:f7:d8:a8:f0:39:
         bc:82:21:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWedqF4sk6AjTOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2EzYzc0MGMtNjdkMy00N2VkLWI0M2QtOWJkOTFiMzFj
ZGIxMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
N2YyZDdkNjEtOWI1Yy00YjgwLTlkMDctZWE5OWY1YzRiNDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycWlI2Ipl17aV4o/+cp8+YzUlULKCEWOwqnQ
xU48lIpC2rPjLFdHyBwT9MXLWNoHUJ+es8vQi65HsnA5Og0XDFpkIfCcdN9YrAA8
wkBJW4Rq+VVhcbe93bucFUEVZT+BMG2WUaPPy/FBPUEyZpbOwepYRPu0eRu3dbLy
CGFy8heuXkZ93bUmkLkD7cVMjf0CaJx5eL5FzWmeXDarl3aHS9b9l1Hpu+suxdAN
iWoWBiIKmYbdEMX4celf/zhqLj5qEbS5Kx1WX/f5xAl8A2Za7UmhCTKo9DTuwZMc
YdjF6TzSlZ6M49iJnCx2Nc9SJ81lJsz2S4ImQqh6qmqT4iphcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+MTui7s3wjoKQcWEIYBF8JXHVhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYTNj
NzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5MWIzMWNkYjEvODYxZDYwYTMtNTNjOS0z
ZTBiLWI5MjYtNTAzZDhjMGNmZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2EzYzc0MGMtNjdkMy00N2VkLWI0
M2QtOWJkOTFiMzFjZGIxL2NhM2M3NDBjLTY3ZDMtNDdlZC1iNDNkLTliZDkxYjMx
Y2RiMS5jcmwwHwYDVR0jBBgwFoAUV6JH2vWEg5cMTVWgBYJOPoytPCgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYTNjNzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5
MWIzMWNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCsZTUSTPgcVJBqkNe1eO5tRkWxnmlJQaHsoINmUCB2I6sId/17ZaTn
aoe1jA455M4fRLqbb+MCvodPP+wO1dVLCt1rycFrx4XcRReVDmHPrQ1tYgT6iUXU
hUgDYbkkidTwe0G5rPU6NRG6eUz4tDZIjpcT/gH8Qc5qPyO+vZVkJfiwccoX7vHj
9wbPFLBgOR+9hfWoAGyLOJxzP7OniiBlSQxA5Din2fDIVrqXE6GuZ0e3SBlRc01g
frssPaIEutilpMgX7m4JbBg1AQegcLZJrMjKstyFRDebM9fGCZN/N4+rgQgWU4Sf
pf6+DhbUrK45ud6I1+r32KjwObyCIf4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:41:23 2025 by rpki-client