Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa
File:                     3a603485-8119-3bb4-9449-4eb447f559ba.roa (raw, json)
Hash identifier:          0abUUpviI/YBhKQ4YwvgmBAWrGK6+jdgW4rNoIRobrE=
Subject key identifier:   6A:4A:4B:93:40:34:72:81:AA:79:48:21:B7:49:82:3C:0A:AF:87:AF
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285849D594F1A3BD67B26190D0C380
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     59253
IP address blocks:        23.19.197.0/24 maxlen: 24
                          2607:f5b5:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:f1:a3:bd:67:b2:61:90:d0:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=04dd454b-d8ab-4e6a-b0a8-eb7791aceddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:33:1b:22:46:33:63:90:82:b1:58:82:98:
                    68:3f:b5:e3:5c:f6:7a:43:1d:ac:e1:63:ba:64:8f:
                    1b:45:6b:5d:6f:e7:62:6d:fb:5e:8e:70:80:ff:66:
                    c5:df:33:6d:50:73:3a:c8:80:85:52:00:e7:8a:c5:
                    40:cb:59:4d:17:ed:53:98:8d:16:dd:bd:a7:67:d5:
                    75:dc:23:f5:85:64:4e:03:19:e1:ed:c3:2c:ec:86:
                    bc:1a:86:b6:39:20:30:cc:a9:a6:62:0d:a5:8f:f5:
                    45:b4:bb:2e:25:25:2d:88:bd:c0:46:b4:f0:01:68:
                    60:75:85:28:21:e4:5c:03:1e:99:69:31:43:67:e2:
                    44:5d:db:3d:2d:60:13:61:3a:7c:a8:c4:50:81:e5:
                    b3:9b:e6:f1:1f:40:35:a1:20:e1:ed:81:ce:04:1c:
                    a4:50:fd:1b:ac:d7:63:6e:39:19:91:48:82:16:cc:
                    18:76:79:d8:4f:70:f2:73:06:b0:95:74:f9:01:38:
                    bc:df:03:46:d4:a6:75:a4:d4:06:96:b5:df:aa:d2:
                    fb:75:79:e5:e5:1d:cf:77:2e:a3:4c:bf:80:7c:4f:
                    ec:61:d9:70:f3:95:29:76:3d:eb:c9:c3:3f:5c:62:
                    0a:45:4a:e1:9c:40:9a:da:95:ad:61:70:29:27:9b:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4A:4B:93:40:34:72:81:AA:79:48:21:B7:49:82:3C:0A:AF:87:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.197.0/24
                IPv6:
                  2607:f5b5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:2a:fb:97:9a:9e:7d:b1:af:03:4f:a3:64:0d:6c:5c:f7:
         67:f3:62:14:10:08:ae:9d:e1:8f:c8:24:15:ef:1d:f7:c7:26:
         77:61:0e:60:10:16:e0:f3:e6:4c:02:6c:2a:dc:73:0c:52:41:
         68:1c:2e:e3:ba:c5:af:b8:14:1a:48:fc:02:b1:f3:2b:a8:11:
         ed:81:68:a3:7c:b8:b0:a2:8a:78:44:52:89:8f:71:ba:98:c2:
         6c:8c:dd:e5:06:21:17:a1:26:f5:4c:2a:a8:0a:ff:24:69:29:
         ad:ae:27:aa:3a:cd:5c:fb:47:4d:a9:da:a9:ec:bb:9e:5b:2a:
         83:0d:cd:a4:08:b6:50:df:e7:1f:27:25:23:f3:d7:65:97:49:
         1d:9a:67:5b:71:9f:5b:ea:d7:40:9c:64:36:ef:24:84:98:b0:
         7c:cb:be:c7:df:05:ba:88:e9:c6:1e:b9:5e:6f:ab:38:40:15:
         39:ad:86:e1:a2:40:1c:58:69:98:b0:46:3f:5b:c1:fb:8b:04:
         b5:62:72:ae:fb:11:e3:a6:61:be:bb:2b:76:a6:5c:0d:6d:64:
         61:9d:3d:d6:62:47:a4:18:57:55:56:51:fb:8d:61:24:57:c8:
         cd:dc:30:4f:2f:0a:2d:86:9e:2c:79:8e:3c:3a:95:2d:89:df:
         f8:f8:60:87
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnVlPGjvWeyYZDQw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
MDRkZDQ1NGItZDhhYi00ZTZhLWIwYTgtZWI3NzkxYWNlZGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAYzGyJGM2OQgrFYgphoP7XjXPZ6Qx2s4WO6
ZI8bRWtdb+dibftejnCA/2bF3zNtUHM6yICFUgDnisVAy1lNF+1TmI0W3b2nZ9V1
3CP1hWROAxnh7cMs7Ia8Goa2OSAwzKmmYg2lj/VFtLsuJSUtiL3ARrTwAWhgdYUo
IeRcAx6ZaTFDZ+JEXds9LWATYTp8qMRQgeWzm+bxH0A1oSDh7YHOBBykUP0brNdj
bjkZkUiCFswYdnnYT3DycwawlXT5ATi83wNG1KZ1pNQGlrXfqtL7dXnl5R3Pdy6j
TL+AfE/sYdlw85Updj3rycM/XGIKRUrhnECa2pWtYXApJ5tHHwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFGpKS5NANHKBqnlIIbdJgjwKr4evMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2E2MDM0ODUtODExOS0z
YmI0LTk0NDktNGViNDQ3ZjU1OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E
AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVwsq+5eann2xrwNPo2QNbFz3Z/NiFBAI
rp3hj8gkFe8d98cmd2EOYBAW4PPmTAJsKtxzDFJBaBwu47rFr7gUGkj8ArHzK6gR
7YFoo3y4sKKKeERSiY9xupjCbIzd5QYhF6Em9UwqqAr/JGkpra4nqjrNXPtHTana
qey7nlsqgw3NpAi2UN/nHyclI/PXZZdJHZpnW3GfW+rXQJxkNu8khJiwfMu+x98F
uojpxh65Xm+rOEAVOa2G4aJAHFhpmLBGP1vB+4sEtWJyrvsR46ZhvrsrdqZcDW1k
YZ091mJHpBhXVVZR+41hJFfIzdwwTy8KLYaeLHmOPDqVLYnf+Phghw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:00:15 2025 by rpki-client