Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa
File:                     401985a3-82fb-38a4-a3a9-2b894ca2670e.roa (raw, json)
Hash identifier:          oKjsiDvdK8CuFdZc7e9XECJS8USU4j2dZTrgC0lTdCU=
Subject key identifier:   14:13:D8:35:51:77:DB:45:B1:5E:92:08:10:D0:F2:F5:BC:FD:20:F0
Certificate issuer:       /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
Certificate serial:       010D0C9F4328584AB3666AD08AB32668E9C62640
Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa
Signing time:             Thu 31 Jul 2025 11:56:49 +0000
ROA not before:           Thu 31 Jul 2025 11:56:49 +0000
ROA not after:            Wed 29 Oct 2025 11:56:49 +0000
asID:                     401833
IP address blocks:        23.141.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:66:6a:d0:8a:b3:26:68:e9:c6:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
        Validity
            Not Before: Jul 31 11:56:49 2025 GMT
            Not After : Oct 29 11:56:49 2025 GMT
        Subject: CN=0c3e78db-2707-4cb5-a446-e84d8ff011d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:04:62:38:bf:47:1d:21:5f:c8:cb:4d:be:
                    8f:10:63:51:43:d3:8f:b2:fd:a2:28:f7:31:29:94:
                    75:93:2b:6d:97:2b:7f:d5:5f:33:9f:93:a0:55:9d:
                    ba:82:66:f3:a4:d9:6d:e1:67:35:59:96:79:99:d1:
                    f9:ad:c2:65:f5:8b:7e:fb:3f:90:ec:fd:1f:94:e1:
                    a3:5e:79:ce:9e:1b:34:78:db:f9:84:e9:d8:f3:6b:
                    c3:c7:48:d6:4c:49:7c:1e:6c:20:9d:87:47:a2:7f:
                    6d:d5:a4:72:f8:00:6a:1e:9e:3d:47:57:d7:18:36:
                    86:90:8e:00:c3:34:65:34:5a:ed:f7:fe:7b:b9:a0:
                    9c:4d:47:05:74:84:f7:44:11:28:d4:d3:6c:e8:ad:
                    3e:c3:01:70:29:28:54:9d:58:5a:e5:40:e8:d7:8a:
                    7a:62:1d:70:60:fd:57:96:b2:84:0c:5a:d5:46:2e:
                    c1:53:b3:f4:c4:16:19:6f:ba:59:77:92:af:00:26:
                    dd:bd:0f:76:9a:89:95:05:3c:e4:41:5f:f2:77:07:
                    70:72:a2:8f:70:67:02:c0:81:d9:a4:e1:46:76:22:
                    c1:cb:b4:81:53:84:b5:eb:ff:92:74:e1:ce:3a:bb:
                    1d:f9:60:18:d4:bb:bc:c5:ca:75:95:b0:3f:1a:8b:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:13:D8:35:51:77:DB:45:B1:5E:92:08:10:D0:F2:F5:BC:FD:20:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7e:7a:03:83:0f:f5:c5:29:28:87:ac:a5:52:e0:8f:17:35:
         dc:bc:a0:0b:52:f9:41:50:63:10:c2:86:8d:49:ff:c6:c4:64:
         40:12:c4:b6:f8:1e:b8:27:c6:ab:2d:8c:01:81:1c:45:af:f2:
         9d:24:68:81:f6:1c:78:b5:86:85:c7:f5:6c:9c:0c:3c:0e:2d:
         56:1a:2e:9b:e4:8e:20:d8:ef:56:8f:b3:c0:a3:a6:f3:47:e7:
         1a:76:9d:ed:a1:e8:93:f3:1f:7b:6b:e8:1b:2d:9b:b3:b9:7a:
         1b:9b:ae:be:62:71:63:ca:69:f6:c2:64:57:4c:5e:9a:95:5c:
         bd:8f:f6:b8:32:46:af:dd:70:6e:2a:57:14:bb:f8:c2:8f:85:
         62:50:0e:21:9f:0d:87:0d:4e:a4:ae:63:ea:a6:71:9d:40:b6:
         67:03:fd:fb:76:b1:7b:7b:ef:c9:d5:d7:c4:b8:b5:d6:c5:43:
         4b:fa:19:98:be:4e:bd:84:14:c4:25:30:bc:4e:b3:73:d3:34:
         cc:18:a8:9a:67:36:93:90:a3:81:c8:37:fd:d4:50:c3:8d:13:
         65:14:e5:84:3f:06:d6:73:e6:b1:78:e9:fe:b4:ac:f0:0f:58:
         7c:52:9b:c7:a8:87:16:fa:41:15:3e:b9:47:70:80:9e:55:01:
         f1:5f:fa:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzZmrQirMmaOnGJkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2E4MWUzOTEtMmY5Zi00M2FjLWE3M2UtZTAxOGUyNzlj
MmQ0MB4XDTI1MDczMTExNTY0OVoXDTI1MTAyOTExNTY0OVowLzEtMCsGA1UEAxMk
MGMzZTc4ZGItMjcwNy00Y2I1LWE0NDYtZTg0ZDhmZjAxMWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLgEYji/Rx0hX8jLTb6PEGNRQ9OPsv2iKPcx
KZR1kyttlyt/1V8zn5OgVZ26gmbzpNlt4Wc1WZZ5mdH5rcJl9Yt++z+Q7P0flOGj
XnnOnhs0eNv5hOnY82vDx0jWTEl8HmwgnYdHon9t1aRy+ABqHp49R1fXGDaGkI4A
wzRlNFrt9/57uaCcTUcFdIT3RBEo1NNs6K0+wwFwKShUnVha5UDo14p6Yh1wYP1X
lrKEDFrVRi7BU7P0xBYZb7pZd5KvACbdvQ92momVBTzkQV/ydwdwcqKPcGcCwIHZ
pOFGdiLBy7SBU4S16/+SdOHOOrsd+WAY1Lu8xcp1lbA/GovJ3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQT2DVRd9tFsV6SCBDQ8vW8/SDwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YTgx
ZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4ZTI3OWMyZDQvNDAxOTg1YTMtODJmYi0z
OGE0LWEzYTktMmI4OTRjYTI2NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2E4MWUzOTEtMmY5Zi00M2FjLWE3
M2UtZTAxOGUyNzljMmQ0LzdhODFlMzkxLTJmOWYtNDNhYy1hNzNlLWUwMThlMjc5
YzJkNC5jcmwwHwYDVR0jBBgwFoAUs7QcrwOOl+lOWy/V0e9YnCntD0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC83YTgxZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4
ZTI3OWMyZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF428MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9+egODD/XFKSiHrKVS4I8XNdy8oAtS+UFQYxDCho1J/8bEZEASxLb4
HrgnxqstjAGBHEWv8p0kaIH2HHi1hoXH9WycDDwOLVYaLpvkjiDY71aPs8CjpvNH
5xp2ne2h6JPzH3tr6Bstm7O5ehubrr5icWPKafbCZFdMXpqVXL2P9rgyRq/dcG4q
VxS7+MKPhWJQDiGfDYcNTqSuY+qmcZ1AtmcD/ft2sXt778nV18S4tdbFQ0v6GZi+
Tr2EFMQlMLxOs3PTNMwYqJpnNpOQo4HIN/3UUMONE2UU5YQ/BtZz5rF46f60rPAP
WHxSm8eohxb6QRU+uUdwgJ5VAfFf+sc=
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:11:07 2025 by rpki-client