Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7574274b-bc8c-3868-a2ed-524bb34a4250.roa
File:                     7574274b-bc8c-3868-a2ed-524bb34a4250.roa (raw, json)
Hash identifier:          tUm+BV9Vw+6iB1ORlse+i8qqUtAYqCfb/hyN67pYYr0=
Subject key identifier:   3A:8A:93:1D:0C:A9:C8:B2:FD:0A:73:EB:06:14:0F:71:D5:AB:59:74
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584A2D858D12F221EE18FF03A540
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7574274b-bc8c-3868-a2ed-524bb34a4250.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     30215
IP address blocks:        23.90.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:8d:12:f2:21:ee:18:ff:03:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=51d09378-8d2a-4c87-9141-1cb10ad03c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:85:52:72:64:56:b7:42:44:ea:e3:ad:7f:
                    b2:fa:72:71:0f:bf:c5:65:fa:5e:27:e3:e3:c7:6b:
                    65:a9:98:e4:9a:e2:94:fb:0d:59:c5:35:07:65:8c:
                    f0:d2:3f:4e:be:f9:56:32:14:80:6b:79:20:c2:ff:
                    eb:26:a8:ae:d0:f2:52:1e:d0:ae:43:b5:a4:df:dd:
                    05:85:80:5a:5a:f1:f7:a6:8e:a5:10:78:a7:7c:e0:
                    c8:80:15:a3:a5:12:1c:92:84:5f:44:cc:50:2b:5e:
                    3e:5c:8b:21:ed:ff:74:52:bd:8f:cc:51:51:d4:8a:
                    84:53:0b:d4:9a:a2:86:de:73:de:74:42:c8:9d:5c:
                    bd:c6:e7:51:16:cb:4d:7f:6e:1b:eb:9e:a9:8c:04:
                    41:00:3c:45:ae:7a:0e:a7:80:c5:c4:8b:23:82:df:
                    38:b9:3b:6c:ed:2a:9d:0a:0f:4c:87:95:55:30:b8:
                    68:2d:30:96:32:4c:40:1d:10:d4:d6:60:c4:52:1c:
                    84:c4:af:e7:10:80:6d:7f:7f:11:bb:90:9e:75:16:
                    7a:a0:2a:3b:2e:fb:33:7d:72:32:4b:c2:63:7b:5f:
                    bb:0a:b3:53:c9:c0:41:9f:1c:64:19:9a:15:46:22:
                    ef:3b:72:3d:2c:08:15:0d:41:f2:6c:b3:e6:2c:66:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8A:93:1D:0C:A9:C8:B2:FD:0A:73:EB:06:14:0F:71:D5:AB:59:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7574274b-bc8c-3868-a2ed-524bb34a4250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5d:17:42:67:4f:3b:75:40:8f:e5:1b:29:a7:8f:05:e8:2b:
         7e:77:fe:9e:e2:b3:24:19:85:7e:03:e7:c9:c7:18:42:0a:b0:
         38:23:d9:a4:47:cc:2a:83:f4:c6:44:f9:11:43:eb:2b:16:f9:
         49:54:d8:ec:38:12:1b:e1:d3:31:10:7d:b4:20:27:a5:ef:b9:
         bc:12:2c:5e:ad:ea:30:01:19:46:27:3a:60:6c:d0:e8:14:ed:
         6b:3a:23:e5:d8:75:d3:65:d3:be:21:6c:a8:d5:8b:93:68:de:
         24:56:5e:19:e3:52:55:20:80:6d:55:68:e8:5a:b8:9a:36:3a:
         b4:fe:02:73:2c:8c:1a:c2:da:48:1a:dc:8c:2f:93:86:4f:e8:
         8d:6a:96:85:2c:66:00:ee:98:44:81:be:c8:23:0d:2d:5f:7a:
         91:2a:58:0c:81:b4:8b:0c:7d:08:5d:c3:ec:97:3f:41:94:dc:
         29:6c:22:b9:43:25:cd:de:3a:c6:a1:14:ad:16:81:86:15:40:
         50:09:9b:3c:30:b4:60:9b:ab:ba:0c:d2:76:3f:ed:93:bd:45:
         f6:82:01:12:59:ab:3d:a7:eb:d2:f4:1a:e4:8f:5d:48:a9:9a:
         e0:41:51:14:68:c0:ba:9b:d0:49:1b:5d:a3:77:08:46:bf:b4:
         37:22:79:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothY0S8iHuGP8DpUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk
NTFkMDkzNzgtOGQyYS00Yzg3LTkxNDEtMWNiMTBhZDAzYzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMWFUnJkVrdCROrjrX+y+nJxD7/FZfpeJ+Pj
x2tlqZjkmuKU+w1ZxTUHZYzw0j9OvvlWMhSAa3kgwv/rJqiu0PJSHtCuQ7Wk390F
hYBaWvH3po6lEHinfODIgBWjpRIckoRfRMxQK14+XIsh7f90Ur2PzFFR1IqEUwvU
mqKG3nPedELInVy9xudRFstNf24b656pjARBADxFrnoOp4DFxIsjgt84uTts7Sqd
Cg9Mh5VVMLhoLTCWMkxAHRDU1mDEUhyExK/nEIBtf38Ru5CedRZ6oCo7LvszfXIy
S8Jje1+7CrNTycBBnxxkGZoVRiLvO3I9LAgVDUHybLPmLGbdYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqKkx0Mqciy/Qpz6wYUD3HVq1l0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNzU3NDI3NGItYmM4Yy0z
ODY4LWEyZWQtNTI0YmIzNGE0MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1ptMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtdF0JnTzt1QI/lGymnjwXoK353/p7isyQZhX4D58nHGEIKsDgj2aRH
zCqD9MZE+RFD6ysW+UlU2Ow4Ehvh0zEQfbQgJ6XvubwSLF6t6jABGUYnOmBs0OgU
7Ws6I+XYddNl074hbKjVi5No3iRWXhnjUlUggG1VaOhauJo2OrT+AnMsjBrC2kga
3Iwvk4ZP6I1qloUsZgDumESBvsgjDS1fepEqWAyBtIsMfQhdw+yXP0GU3ClsIrlD
Jc3eOsahFK0WgYYVQFAJmzwwtGCbq7oM0nY/7ZO9RfaCARJZqz2n69L0GuSPXUip
muBBURRowLqb0EkbXaN3CEa/tDcieew=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:16 2025 by rpki-client