Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/c954a732-c39c-36a3-8163-446a2e43cfb7.roa
File:                     c954a732-c39c-36a3-8163-446a2e43cfb7.roa (raw, json)
Hash identifier:          Nlkpfc9YfypeX9X/oPVu1xEvCxfUJiiuzYlzwtgDbR4=
Subject key identifier:   4D:51:89:8B:7E:C0:B2:16:4B:C5:A4:98:6A:9C:B9:80:33:3B:0E:67
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584A348023C10CFBFF3BEB8960C0
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/c954a732-c39c-36a3-8163-446a2e43cfb7.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     23520
IP address blocks:        67.230.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:23:c1:0c:fb:ff:3b:eb:89:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=b3cbc101-982d-41d1-9b4d-5cdc9bc238c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:fd:25:c3:1c:71:70:55:c0:97:f3:0c:b5:
                    97:99:34:36:bf:e5:7b:7a:64:72:26:64:df:2b:44:
                    36:e3:6c:f0:39:fe:fe:f1:4f:ed:2e:ec:68:0d:01:
                    a8:61:a0:94:e6:06:6e:87:d0:6b:37:c9:ca:01:fb:
                    36:6c:f8:72:63:c9:6a:78:ab:bc:24:d9:c4:0f:6f:
                    08:49:ca:30:7a:0c:d2:17:83:21:6c:02:78:11:ca:
                    a1:9f:05:c5:66:72:65:43:d8:81:6d:8a:f4:f8:09:
                    e1:89:c6:3a:fe:80:f3:42:ab:6d:49:d2:1f:b1:be:
                    71:2e:db:ab:08:c0:7a:d3:de:37:b8:a3:18:84:95:
                    98:17:93:b5:f7:84:de:69:38:4a:dc:d3:9a:6c:fc:
                    83:5e:66:d1:6c:cd:a3:6e:c1:22:c0:97:a1:62:de:
                    bb:35:97:82:25:da:be:bb:2c:46:55:91:3d:e1:a1:
                    9e:79:cf:de:25:49:42:48:e4:ec:11:cf:70:5f:04:
                    76:1f:bf:2c:ce:d4:0f:4c:5c:a1:37:9a:e6:26:19:
                    a3:a9:bd:d0:7e:d9:fd:4e:cb:6c:e6:d5:cd:53:17:
                    06:e5:4e:87:e2:f9:d2:89:f6:c1:76:e8:fd:67:8e:
                    9a:e5:51:0e:11:aa:12:f1:fc:66:51:63:27:ac:94:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:51:89:8B:7E:C0:B2:16:4B:C5:A4:98:6A:9C:B9:80:33:3B:0E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/c954a732-c39c-36a3-8163-446a2e43cfb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.230.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:a6:b7:5e:29:49:d2:ad:ea:f7:d6:41:f6:63:72:e3:dd:
         69:e1:df:15:d6:15:3a:2e:40:2b:04:6a:0b:63:1a:f2:ed:e4:
         62:a5:f7:49:b3:54:6a:b3:35:83:f0:54:42:21:60:cf:79:47:
         43:52:fc:8f:e0:ae:aa:2f:3b:c1:77:e3:63:fa:f5:3a:68:bf:
         56:30:d7:6b:3e:af:e4:e5:63:46:b4:e3:17:f6:03:57:ee:02:
         04:84:64:2f:b5:05:3b:31:72:69:5f:79:89:16:bc:f1:66:86:
         3b:d3:ed:23:65:b6:83:ed:2e:ea:84:c3:94:8c:44:aa:13:6c:
         d4:25:56:33:fb:ec:6a:45:e5:76:6c:f8:31:33:37:ec:42:7a:
         bd:de:59:07:63:b8:2e:f8:0f:6e:4a:74:29:d6:2d:5f:0a:7d:
         ca:e9:b7:9b:e9:bd:9f:17:c5:c5:70:21:37:e2:0e:d0:10:1a:
         8a:47:fe:2a:90:92:cc:0e:bb:fe:2d:cc:23:45:92:8e:63:3d:
         9b:7b:de:ca:ee:16:d5:46:19:e3:de:06:74:a7:a7:10:f5:00:
         50:1e:5f:0c:b7:ce:d9:56:ac:27:65:d8:06:ab:87:4d:54:51:
         43:6a:c5:dc:9d:f6:ef:96:e9:93:f3:1f:f5:82:8e:61:92:0a:
         9f:52:4d:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gCPBDPv/O+uJYMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk
YjNjYmMxMDEtOTgyZC00MWQxLTliNGQtNWNkYzliYzIzOGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3L9JcMccXBVwJfzDLWXmTQ2v+V7emRyJmTf
K0Q242zwOf7+8U/tLuxoDQGoYaCU5gZuh9BrN8nKAfs2bPhyY8lqeKu8JNnED28I
ScowegzSF4MhbAJ4EcqhnwXFZnJlQ9iBbYr0+AnhicY6/oDzQqttSdIfsb5xLtur
CMB60943uKMYhJWYF5O194TeaThK3NOabPyDXmbRbM2jbsEiwJehYt67NZeCJdq+
uyxGVZE94aGeec/eJUlCSOTsEc9wXwR2H78sztQPTFyhN5rmJhmjqb3Qftn9Tsts
5tXNUxcG5U6H4vnSifbBduj9Z46a5VEOEaoS8fxmUWMnrJRnsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1RiYt+wLIWS8WkmGqcuYAzOw5nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvYzk1NGE3MzItYzM5Yy0z
NmEzLTgxNjMtNDQ2YTJlNDNjZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+ZlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvdprdeKUnSrer31kH2Y3Lj3Wnh3xXWFTouQCsEagtjGvLt5GKl90mz
VGqzNYPwVEIhYM95R0NS/I/grqovO8F342P69Tpov1Yw12s+r+TlY0a04xf2A1fu
AgSEZC+1BTsxcmlfeYkWvPFmhjvT7SNltoPtLuqEw5SMRKoTbNQlVjP77GpF5XZs
+DEzN+xCer3eWQdjuC74D25KdCnWLV8Kfcrpt5vpvZ8XxcVwITfiDtAQGopH/iqQ
kswOu/4tzCNFko5jPZt73sruFtVGGePeBnSnpxD1AFAeXwy3ztlWrCdl2Aarh01U
UUNqxdyd9u+W6ZPzH/WCjmGSCp9STX8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:45:53 2025 by rpki-client