Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa
File:                     33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa (raw, json)
Hash identifier:          6J07PGqiL9DXva4i74V7YRXB+ZGm8Ap3bGx8eZCWem8=
Subject key identifier:   D4:EB:9F:A5:E8:9E:02:F9:6C:6E:4B:C0:B7:BE:B1:95:96:83:D7:B6
Certificate issuer:       /CN=7660ad47-0d47-4fc7-b1cc-1d954b61bac2
Certificate serial:       010D0C9F4328584A82AB52658CD156259146B600
Authority key identifier: 15:5D:E3:65:EC:9A:09:84:15:D2:3B:71:3E:E9:1A:F8:E3:8C:5D:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     10981
IP address blocks:        23.133.188.0/24 maxlen: 24
                          2602:f70d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:52:65:8c:d1:56:25:91:46:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660ad47-0d47-4fc7-b1cc-1d954b61bac2
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=9e30b53f-0071-4690-8c49-90c0d1ce995e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6e:1a:c7:ec:2c:a3:a2:48:97:7c:a8:89:c6:
                    92:73:d0:ab:f0:27:f8:4a:83:45:f7:94:aa:27:94:
                    4b:7a:af:96:6c:2e:72:dd:cf:15:7f:4a:ac:3d:45:
                    a1:ad:21:01:1c:6c:22:75:f3:e3:44:72:f3:5f:9e:
                    3b:09:65:73:d9:a3:27:91:26:84:01:40:5c:16:ea:
                    46:eb:af:77:7c:e0:cb:a8:87:c1:77:8d:af:44:d1:
                    98:83:23:4e:90:0f:b3:61:3c:f8:8e:8d:75:75:d2:
                    b6:28:c7:47:8d:88:21:52:1c:75:cd:2a:16:5d:2f:
                    0c:d5:d3:6a:d1:90:56:f5:bf:06:05:85:eb:0e:72:
                    df:25:5f:ae:21:d3:b6:b1:e5:a4:3c:9a:9b:ed:ce:
                    4f:0e:85:07:41:a3:d4:10:cc:47:fc:46:47:69:1b:
                    29:f0:71:04:6b:36:f7:ab:56:43:1c:41:c6:02:25:
                    0d:bb:d6:19:47:df:fd:10:d1:b3:ed:a9:32:15:7a:
                    a9:06:6f:b0:77:98:63:e0:74:8a:3f:37:d0:89:b8:
                    53:b7:91:63:b1:a2:19:a6:0f:9e:f6:bc:27:ee:30:
                    36:8c:a2:79:1a:b2:bd:75:7d:ec:a5:c3:7e:fc:05:
                    fb:fa:8d:af:67:90:ae:87:7e:6f:0e:81:fa:7f:33:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EB:9F:A5:E8:9E:02:F9:6C:6E:4B:C0:B7:BE:B1:95:96:83:D7:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.crl

            X509v3 Authority Key Identifier:
                keyid:15:5D:E3:65:EC:9A:09:84:15:D2:3B:71:3E:E9:1A:F8:E3:8C:5D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.188.0/24
                IPv6:
                  2602:f70d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b4:d0:22:86:4b:df:72:58:51:91:97:0d:11:8a:55:ad:90:
         40:7e:e5:6a:2d:a5:90:d3:f6:3c:28:64:be:9d:41:8a:a2:bb:
         0c:c9:54:cd:f3:37:95:17:7f:dc:b2:0b:84:6d:09:54:1f:d9:
         c7:73:72:ae:66:ad:a3:1d:60:b0:59:22:9f:e6:56:4f:95:0a:
         af:4b:37:0b:96:86:bd:93:12:5a:68:c5:c6:66:45:72:64:38:
         bd:f5:e7:5c:60:18:e0:ce:5f:7f:19:19:18:a5:bc:0a:a0:8c:
         ea:3d:81:2f:5a:47:2c:2b:ab:b3:73:d3:87:65:b7:01:2d:1f:
         89:d6:c0:d9:56:d7:16:d0:4c:c0:d7:ba:71:2a:04:b0:ef:7d:
         db:a2:50:9e:89:48:6c:88:e3:d6:c8:95:ec:df:50:7a:ad:92:
         de:02:7b:73:88:80:64:69:23:07:58:62:99:e1:b2:2c:e5:e1:
         9f:5b:e2:36:d4:ee:9a:ba:ba:d9:18:e9:bc:a7:34:5f:27:43:
         91:5a:21:57:ed:c0:90:83:2c:35:07:2c:f1:4d:70:4a:fb:47:
         ca:18:7f:af:5d:d7:54:37:d7:a8:ea:41:ea:d3:3f:5a:31:08:
         d7:5d:51:75:37:49:eb:6d:dd:39:92:fa:46:93:7d:65:2d:b6:
         f1:83:d8:2f
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqCq1JljNFWJZFGtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY2MGFkNDctMGQ0Ny00ZmM3LWIxY2MtMWQ5NTRiNjFi
YWMyMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk
OWUzMGI1M2YtMDA3MS00NjkwLThjNDktOTBjMGQxY2U5OTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG4ax+wso6JIl3yoicaSc9Cr8Cf4SoNF95Sq
J5RLeq+WbC5y3c8Vf0qsPUWhrSEBHGwidfPjRHLzX547CWVz2aMnkSaEAUBcFupG
6693fODLqIfBd42vRNGYgyNOkA+zYTz4jo11ddK2KMdHjYghUhx1zSoWXS8M1dNq
0ZBW9b8GBYXrDnLfJV+uIdO2seWkPJqb7c5PDoUHQaPUEMxH/EZHaRsp8HEEazb3
q1ZDHEHGAiUNu9YZR9/9ENGz7akyFXqpBm+wd5hj4HSKPzfQibhTt5FjsaIZpg+e
9rwn7jA2jKJ5GrK9dX3spcN+/AX7+o2vZ5Cuh35vDoH6fzMeVQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFNTrn6XongL5bG5LwLe+sZWWg9e2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NjYw
YWQ0Ny0wZDQ3LTRmYzctYjFjYy0xZDk1NGI2MWJhYzIvMzNlMmVkNTEtY2ZiMy0z
OWJlLWFjM2EtMmU1ZWZmY2Q4ZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzY2MGFkNDctMGQ0Ny00ZmM3LWIx
Y2MtMWQ5NTRiNjFiYWMyLzc2NjBhZDQ3LTBkNDctNGZjNy1iMWNjLTFkOTU0YjYx
YmFjMi5jcmwwHwYDVR0jBBgwFoAUFV3jZeyaCYQV0jtxPuka+OOMXSAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NjYwYWQ0Ny0wZDQ3LTRmYzctYjFjYy0xZDk1
NGI2MWJhYzIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4W8MA4E
AgACMAgDBgQmAvcNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHtNAihkvfclhRkZcNEYpVrZBAfuVqLaWQ
0/Y8KGS+nUGKorsMyVTN8zeVF3/csguEbQlUH9nHc3KuZq2jHWCwWSKf5lZPlQqv
SzcLloa9kxJaaMXGZkVyZDi99edcYBjgzl9/GRkYpbwKoIzqPYEvWkcsK6uzc9OH
ZbcBLR+J1sDZVtcW0EzA17pxKgSw733bolCeiUhsiOPWyJXs31B6rZLeAntziIBk
aSMHWGKZ4bIs5eGfW+I21O6aurrZGOm8pzRfJ0ORWiFX7cCQgyw1ByzxTXBK+0fK
GH+vXddUN9eo6kHq0z9aMQjXXVF1N0nrbd05kvpGk31lLbbxg9gv
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:41 2025 by rpki-client