Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/652c3166-1817-3351-bd18-7f5784643db9.roa
File:                     652c3166-1817-3351-bd18-7f5784643db9.roa (raw, json)
Hash identifier:          kt5B9PJMGxba6u7NxbZ2QJkUCXsnYK59o7+OPdRuL+s=
Subject key identifier:   F7:5C:FC:94:97:99:8F:37:6A:C4:26:50:74:3D:3C:6D:8C:01:DC:68
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A66C090503954D0E374DEE680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/652c3166-1817-3351-bd18-7f5784643db9.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     16625
IP address blocks:        23.201.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:90:50:39:54:d0:e3:74:de:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=8ee0f0ed-53fc-46fd-b26c-0c0d99036e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:c9:ef:eb:45:3d:7d:d4:70:c9:13:8a:73:
                    45:7d:f2:b6:8c:6f:68:05:43:e9:8e:72:8e:2e:e3:
                    c2:c2:e4:7a:81:de:3e:f2:af:1f:c3:20:5b:a8:7f:
                    0f:9f:76:f0:62:48:dc:ed:bc:db:cd:4b:81:5a:0a:
                    8e:17:fc:a1:64:3b:33:fc:e5:82:65:c5:b8:b5:2d:
                    83:22:d7:12:9f:05:e4:5a:74:cd:e4:83:19:11:ce:
                    d3:7b:37:2d:ac:74:f4:21:59:e6:fc:14:0d:02:79:
                    af:c5:d2:26:ae:16:ab:50:c3:f1:8b:72:19:53:69:
                    7b:be:70:e6:d2:8d:e2:48:05:3e:10:8c:52:f3:6c:
                    15:cc:7a:7a:b6:78:22:ef:76:17:44:56:02:f1:73:
                    3e:8e:0a:ac:49:28:95:70:3d:41:c7:0d:ff:00:78:
                    85:b4:d0:4d:fd:49:e7:82:b9:7a:65:35:fa:bf:c6:
                    e8:7a:d0:ca:f0:ad:c8:7d:21:82:6c:fb:8d:1a:1a:
                    b2:8d:d7:09:64:c5:a9:a4:74:b2:fe:2a:9e:7c:90:
                    49:ec:dc:fc:30:2b:1d:52:04:46:6e:28:fe:a7:27:
                    9d:ae:03:14:8f:55:21:b6:4a:ec:37:e8:24:d4:03:
                    8f:72:94:03:53:42:a2:af:5d:bc:37:37:e3:65:39:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5C:FC:94:97:99:8F:37:6A:C4:26:50:74:3D:3C:6D:8C:01:DC:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/652c3166-1817-3351-bd18-7f5784643db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:67:0f:df:ad:56:54:3f:e5:80:b8:8f:76:a7:55:db:10:ba:
         dc:8c:7f:20:f9:61:94:a5:3e:a0:8c:75:78:00:21:50:04:8e:
         df:1e:ed:81:ad:96:34:a9:1c:9f:e6:f1:50:df:5c:8f:91:e9:
         91:43:97:12:1e:6e:8c:08:e7:83:4f:3b:fe:ab:41:39:42:de:
         05:ab:16:43:d2:2e:59:6f:f7:ae:eb:d2:b2:38:fc:0e:5f:2b:
         62:0c:f2:34:e3:c0:a7:5d:d8:5c:0c:19:9a:85:bf:db:4d:c5:
         0d:be:e2:cd:5e:e0:64:25:30:54:d4:96:9f:d0:a9:1b:c4:ca:
         4b:e2:8b:8a:8c:f3:8f:7d:f1:c9:bc:61:5f:24:f8:cc:1a:1c:
         93:81:7b:9f:22:34:7d:4c:c8:03:c0:8d:d1:d7:63:f9:63:d7:
         f5:91:00:ad:39:52:45:0b:83:2d:26:fb:19:6c:ff:2a:0c:e4:
         96:f3:e5:f1:c6:a9:5a:49:18:e3:32:25:82:36:f3:8b:fb:a4:
         e0:a0:dd:82:ab:df:7e:fa:55:43:6a:08:66:75:27:48:6c:cb:
         08:c1:08:6c:cd:9b:03:d1:c4:af:92:09:df:03:79:8d:40:ac:
         92:30:cb:a0:57:36:74:92:e3:84:f8:40:c6:a8:f6:4d:c8:10:
         55:27:c8:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwJBQOVTQ43Te5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
OGVlMGYwZWQtNTNmYy00NmZkLWIyNmMtMGMwZDk5MDM2ZTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi47J7+tFPX3UcMkTinNFffK2jG9oBUPpjnKO
LuPCwuR6gd4+8q8fwyBbqH8Pn3bwYkjc7bzbzUuBWgqOF/yhZDsz/OWCZcW4tS2D
ItcSnwXkWnTN5IMZEc7TezctrHT0IVnm/BQNAnmvxdImrharUMPxi3IZU2l7vnDm
0o3iSAU+EIxS82wVzHp6tngi73YXRFYC8XM+jgqsSSiVcD1Bxw3/AHiFtNBN/Unn
grl6ZTX6v8boetDK8K3IfSGCbPuNGhqyjdcJZMWppHSy/iqefJBJ7Nz8MCsdUgRG
bij+pyedrgMUj1UhtkrsN+gk1AOPcpQDU0Kir128NzfjZTl+GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdc/JSXmY83asQmUHQ9PG2MAdxoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjUyYzMxNjYtMTgxNy0z
MzUxLWJkMTgtN2Y1Nzg0NjQzZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8nYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABnD9+tVlQ/5YC4j3anVdsQutyMfyD5YZSlPqCMdXgAIVAEjt8e7YGt
ljSpHJ/m8VDfXI+R6ZFDlxIebowI54NPO/6rQTlC3gWrFkPSLllv967r0rI4/A5f
K2IM8jTjwKdd2FwMGZqFv9tNxQ2+4s1e4GQlMFTUlp/QqRvEykvii4qM84998cm8
YV8k+MwaHJOBe58iNH1MyAPAjdHXY/lj1/WRAK05UkULgy0m+xls/yoM5Jbz5fHG
qVpJGOMyJYI284v7pOCg3YKr3376VUNqCGZ1J0hsywjBCGzNmwPRxK+SCd8DeY1A
rJIwy6BXNnSS44T4QMao9k3IEFUnyKw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:21:32 2025 by rpki-client