Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa
File:                     a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa (raw, json)
Hash identifier:          9cEp3ORpcHU92T8iA/QJd/rPC82o1++Kput1Yt2k3Eg=
Subject key identifier:   CE:5D:EA:F8:37:FA:4D:E3:C0:4B:C0:C1:CF:EC:F9:42:14:9C:FC:1D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1618DF02C212FE0956B6F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        24.123.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:8d:f0:2c:21:2f:e0:95:6b:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=d877f5f1-8199-4eaa-b3e1-2c9195f94dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:f5:e9:ae:11:2c:7b:d1:26:40:ad:18:5e:
                    e9:6e:24:f2:a9:a7:16:15:52:22:12:1d:c4:b3:27:
                    60:e0:4e:d5:90:1f:0b:86:8c:04:0f:08:56:ee:6f:
                    dd:b4:e4:2b:7e:d6:b5:b5:d1:15:8a:a2:33:93:cf:
                    d5:16:79:ab:84:e2:46:03:37:e8:f2:7f:6c:17:92:
                    b0:67:a7:1b:29:be:32:c2:74:08:d4:3e:20:01:e5:
                    27:84:d3:5a:da:a1:dd:58:e4:a3:74:2e:3c:23:bb:
                    90:45:84:04:16:6d:c9:44:af:63:c4:7b:26:97:8a:
                    56:c1:c6:41:33:d1:1a:6e:9c:3c:42:b1:fe:79:05:
                    b7:07:f9:a0:e1:47:05:e4:d0:34:b6:4e:2b:fc:da:
                    a0:15:7d:e2:d3:18:f9:c5:85:65:99:89:bf:55:0e:
                    b2:8e:8c:e2:c4:34:55:42:d6:40:d6:b3:ea:9b:04:
                    71:f8:3a:a2:4d:c8:2d:62:6c:86:d0:4a:96:15:a8:
                    dd:33:bd:71:86:03:39:72:8b:19:69:83:84:c7:78:
                    d3:64:de:b3:52:bb:e3:ab:2c:ee:12:b3:d0:16:98:
                    cb:6f:44:ea:73:bb:15:f4:21:00:a1:bb:b5:89:49:
                    90:1c:e4:47:b6:88:cc:d4:37:59:8c:8e:03:a3:71:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5D:EA:F8:37:FA:4D:E3:C0:4B:C0:C1:CF:EC:F9:42:14:9C:FC:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a8:a5:c8:7d:80:dc:d9:65:f8:75:29:3a:84:4b:18:f7:29:
         ac:6e:6a:b1:d1:59:64:d8:7b:3a:14:34:7e:47:9d:84:51:6d:
         4b:43:53:8e:6a:ed:15:a7:d3:2a:32:e4:af:4b:91:a9:85:01:
         8d:f1:22:ac:66:88:36:00:94:3e:9d:1e:01:0a:dd:4a:9a:a3:
         34:73:c0:b6:d3:1a:62:2a:7a:5f:89:33:59:f7:d9:ab:8a:a8:
         3e:44:48:a7:c2:00:1d:c2:b0:45:66:b4:09:15:b6:ea:96:7c:
         8f:fb:80:2e:bf:d4:19:21:d3:ed:ee:e7:47:ef:0e:f4:97:cd:
         c9:d1:8d:b7:77:9b:65:2a:a2:b2:28:d1:6e:da:b0:8a:ce:b7:
         05:02:a1:d6:32:92:ab:5e:59:d3:ba:87:9d:62:52:ef:4e:0e:
         65:ca:d8:46:6f:d2:3c:d5:2e:29:6a:40:14:5c:7b:f2:68:78:
         22:63:1d:ee:5b:d2:22:a5:d3:dd:b0:6f:4c:19:d7:2f:48:74:
         de:60:cb:8d:96:9c:a7:a1:f2:36:20:f9:c0:d5:82:00:ac:52:
         30:2d:9d:be:26:3f:9e:2e:c9:76:50:6a:e2:64:59:83:b5:2d:
         4c:1f:f3:56:23:a8:77:d2:4c:eb:8b:86:a5:d9:d4:9e:1c:ad:
         62:52:15:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYY3wLCEv4JVrbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
ZDg3N2Y1ZjEtODE5OS00ZWFhLWIzZTEtMmM5MTk1Zjk0ZGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWD16a4RLHvRJkCtGF7pbiTyqacWFVIiEh3E
sydg4E7VkB8LhowEDwhW7m/dtOQrfta1tdEViqIzk8/VFnmrhOJGAzfo8n9sF5Kw
Z6cbKb4ywnQI1D4gAeUnhNNa2qHdWOSjdC48I7uQRYQEFm3JRK9jxHsml4pWwcZB
M9Eabpw8QrH+eQW3B/mg4UcF5NA0tk4r/NqgFX3i0xj5xYVlmYm/VQ6yjozixDRV
QtZA1rPqmwRx+DqiTcgtYmyG0EqWFajdM71xhgM5cosZaYOEx3jTZN6zUrvjqyzu
ErPQFpjLb0Tqc7sV9CEAobu1iUmQHORHtojM1DdZjI4Do3EkuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5d6vg3+k3jwEvAwc/s+UIUnPwdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYThiY2YwZTktMmRlNi0z
ODE4LTkxZGMtOTMxZmEwMTY4MmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGHuYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2opch9gNzZZfh1KTqESxj3KaxuarHRWWTYezoUNH5HnYRRbUtDU45q
7RWn0yoy5K9LkamFAY3xIqxmiDYAlD6dHgEK3UqaozRzwLbTGmIqel+JM1n32auK
qD5ESKfCAB3CsEVmtAkVtuqWfI/7gC6/1Bkh0+3u50fvDvSXzcnRjbd3m2UqorIo
0W7asIrOtwUCodYykqteWdO6h51iUu9ODmXK2EZv0jzVLilqQBRce/JoeCJjHe5b
0iKl092wb0wZ1y9IdN5gy42WnKeh8jYg+cDVggCsUjAtnb4mP54uyXZQauJkWYO1
LUwf81YjqHfSTOuLhqXZ1J4crWJSFZ4=
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:24 2025 by rpki-client