Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/ca0aae25-9dea-3459-b666-85d3ff285459.roa
File:                     ca0aae25-9dea-3459-b666-85d3ff285459.roa (raw, json)
Hash identifier:          LTQybCaKKc+wdB0M8Vr/RHiIeRdwxEdj71s+I+wrRqw=
Subject key identifier:   B7:4F:1C:51:1F:85:66:15:87:97:B5:C0:0F:D7:1F:4B:2B:00:E9:40
Certificate issuer:       /CN=7401169f-c1cd-4960-a3e8-8d9af543cc0a
Certificate serial:       010D0C9F4328584A0D6A8C9AB8A5DAC24DE49380
Authority key identifier: BE:0C:75:D0:C8:4D:F9:38:3C:EF:35:C6:60:D2:93:D4:74:51:1E:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/ca0aae25-9dea-3459-b666-85d3ff285459.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     36083
IP address blocks:        23.138.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/7401169f-c1cd-4960-a3e8-8d9af543cc0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/7401169f-c1cd-4960-a3e8-8d9af543cc0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:8c:9a:b8:a5:da:c2:4d:e4:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7401169f-c1cd-4960-a3e8-8d9af543cc0a
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=023cf67e-c7ac-43ab-bd17-77b71e959da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:59:f8:ef:f3:2f:2c:21:d7:4f:dc:0d:9d:
                    cf:ee:4c:40:1b:4d:72:9c:eb:a9:0d:25:67:8a:9c:
                    82:4c:d9:2e:4b:57:46:b2:aa:a0:a6:a4:70:0e:7b:
                    a8:cb:ec:e7:3f:15:c9:74:f5:39:97:22:8d:2c:66:
                    1a:15:40:a9:5f:19:37:e3:13:1b:73:c0:98:cf:35:
                    dc:de:0b:01:e6:98:0b:98:40:85:1d:f2:62:a4:7d:
                    3f:49:e3:d9:35:34:d4:ff:54:23:66:41:b5:f8:35:
                    5e:a7:97:66:76:03:f2:ce:87:5d:a3:2c:5a:91:d8:
                    ac:01:d4:d6:e5:fa:83:1c:50:dd:2f:c0:f9:37:53:
                    a4:c4:d2:8c:7a:b0:af:8f:be:4d:5e:57:a2:cd:25:
                    49:5a:da:c7:60:9d:36:3f:13:35:a5:67:9f:b3:37:
                    cb:3a:59:20:5b:4b:f8:84:84:cd:54:6a:5a:86:49:
                    1d:96:02:39:84:a9:81:13:72:b1:79:57:d7:f3:93:
                    d6:43:bd:9a:bf:2b:50:f6:ec:d6:2b:a3:98:1f:ef:
                    d9:ad:f5:7f:59:a9:6d:38:22:f9:12:e1:ca:8d:fc:
                    5e:7d:91:e6:fc:fd:da:b0:ca:42:b8:52:fe:8d:43:
                    1c:07:57:0c:17:c3:51:26:8b:af:7f:26:0c:79:3d:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4F:1C:51:1F:85:66:15:87:97:B5:C0:0F:D7:1F:4B:2B:00:E9:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/ca0aae25-9dea-3459-b666-85d3ff285459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/7401169f-c1cd-4960-a3e8-8d9af543cc0a.crl

            X509v3 Authority Key Identifier:
                keyid:BE:0C:75:D0:C8:4D:F9:38:3C:EF:35:C6:60:D2:93:D4:74:51:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:7b:fd:95:00:8f:7d:e0:93:f4:a2:b6:94:8a:5e:05:dd:
         66:11:77:9a:ab:a5:9c:07:40:b4:af:db:1a:b9:73:0f:04:17:
         70:c9:ea:9b:0a:1c:75:b8:ff:e0:07:28:98:f2:9b:4b:6b:73:
         5f:97:51:9e:af:2c:d6:bb:fc:9d:77:7e:79:66:45:d3:6a:f2:
         4d:39:48:27:6c:98:fb:1b:f8:63:57:cf:fa:74:01:aa:c7:c4:
         9d:3c:e2:d3:a4:2b:ff:bf:7b:8e:e8:be:98:46:84:2d:0a:b2:
         0e:f8:82:66:f9:d0:50:7f:65:63:3e:fa:4b:e7:0e:dd:61:e4:
         b3:2c:01:73:ed:2f:ed:f0:d1:37:d0:eb:d3:61:c7:df:90:0a:
         e2:87:4f:28:70:12:4a:73:c2:71:c5:8a:ed:51:a4:bf:75:44:
         4d:d9:24:28:26:e7:f1:96:99:6b:12:a8:ca:f5:d4:4e:1f:11:
         08:79:d2:4e:d8:6c:a4:61:55:85:e5:25:63:ed:99:6d:89:a0:
         a4:f6:45:7c:e4:33:12:f2:07:db:75:a9:c0:ac:c5:dd:92:eb:
         31:ba:6a:9e:56:c2:f3:6f:73:83:f6:a3:e3:a0:f4:c1:d6:9b:
         61:b1:e1:b2:28:62:c1:63:28:31:83:16:ab:b8:d2:c4:f3:66:
         97:75:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:31 2025 by rpki-client