Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/274ddee4-3c40-36e7-b9f1-9d834206846a.roa
File:                     274ddee4-3c40-36e7-b9f1-9d834206846a.roa (raw, json)
Hash identifier:          3A/K8bUo9HN+8pNqOO+jZn80qsGGeu1pmMxCPFfp/+A=
Subject key identifier:   A9:70:56:C9:86:35:C9:3B:49:BF:73:71:21:98:75:39:E0:E4:C9:B6
Certificate issuer:       /CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3
Certificate serial:       010D0C9F4328584A305031EF7266DA43A793A380
Authority key identifier: 73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/274ddee4-3c40-36e7-b9f1-9d834206846a.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     20398
IP address blocks:        23.235.48.0/24 maxlen: 24
                          23.235.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:31:ef:72:66:da:43:a7:93:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=0dff6b69-3413-4a40-a84f-2b0617d0bc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:de:1b:e1:de:2e:96:00:76:df:09:61:dd:e5:
                    cc:ff:70:50:ed:ed:30:0d:9e:66:98:25:78:7e:5a:
                    c1:26:7e:fb:37:9e:5e:71:0c:21:e9:c3:43:c5:61:
                    b4:2c:83:82:be:4f:e0:e0:99:59:e6:73:27:0b:47:
                    b6:0a:09:3f:cd:1a:d9:65:02:ec:e4:d1:35:3a:c8:
                    8e:02:f3:a5:a5:6e:7f:3c:35:02:ef:f3:32:2d:83:
                    1e:ee:30:5d:81:57:7b:cb:e6:7f:80:a5:77:d0:9b:
                    8c:6d:77:ba:6b:49:8e:0a:31:81:77:e2:e2:90:3b:
                    50:85:c0:6e:d6:31:9a:79:ba:1c:73:f7:d1:a6:a2:
                    ac:cd:1f:57:31:14:83:db:27:e3:ab:20:56:32:e2:
                    83:8b:09:96:ff:80:f8:78:bc:07:a0:4b:dd:69:a1:
                    9d:a0:28:27:d1:cb:d6:35:9d:54:ff:da:f6:16:58:
                    bb:1c:e0:df:d0:34:45:83:02:3e:e5:3d:0a:42:76:
                    73:58:4e:da:51:2d:85:3d:b5:5f:ed:11:21:67:4a:
                    20:98:8a:f2:03:32:73:39:1a:23:76:be:63:1e:80:
                    36:a7:1b:05:07:a2:e7:cf:51:54:21:5b:ac:4c:0f:
                    ed:9f:80:5f:16:06:38:1f:1f:d3:b8:dc:04:06:c9:
                    16:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:70:56:C9:86:35:C9:3B:49:BF:73:71:21:98:75:39:E0:E4:C9:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/274ddee4-3c40-36e7-b9f1-9d834206846a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl

            X509v3 Authority Key Identifier:
                keyid:73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f7:f0:a8:ad:27:bc:70:48:f5:1f:04:e6:4f:f2:51:c0:bf:
         31:a6:c8:df:52:c5:d8:40:29:44:51:1c:1b:23:e2:75:fd:a7:
         22:7f:59:11:97:31:d2:5c:e5:2e:96:b5:1e:b8:95:9b:95:f5:
         d7:09:15:3f:41:dc:77:64:80:ca:06:00:05:c7:ed:a0:ee:ad:
         02:2e:36:00:45:43:83:d1:7c:e2:ae:54:07:a0:6f:9c:5b:63:
         0b:93:28:81:4d:8a:ba:3d:ff:c3:c5:1f:63:d7:d2:4a:82:ee:
         a8:13:0f:d5:c3:e7:fb:83:64:cc:ca:44:a0:90:bc:d5:08:1e:
         56:10:15:66:f2:0c:35:d5:da:c7:cc:66:a7:cf:4a:65:d6:f9:
         ce:a9:43:09:de:b8:2a:02:0a:ea:4a:ce:53:13:74:7d:83:73:
         44:9e:b3:8f:ca:2e:32:4c:d8:72:7a:b6:1f:aa:68:e9:a1:d7:
         3c:35:dc:77:7d:8d:c3:bb:77:a5:90:c5:e4:f5:56:78:f2:67:
         fe:2c:f1:ab:25:f4:1f:9d:d2:fc:95:0f:38:8e:8b:a4:8b:8d:
         36:62:1f:f2:78:57:9c:ca:e3:dc:cd:f2:96:96:c4:a2:f7:bb:
         65:28:8d:8f:27:67:b4:fa:2b:96:c7:ec:a8:b5:05:f1:41:96:
         d6:40:3b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:22:24 2025 by rpki-client