Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489/88abf898-7c01-3d29-a08c-b282c52efff9.roa
File:                     88abf898-7c01-3d29-a08c-b282c52efff9.roa (raw, json)
Hash identifier:          7SNX8csb+58Y4Vdt4evWDuQ/MGgA0kczD7iJUALB1h4=
Subject key identifier:   3F:94:CE:5F:33:16:10:55:46:E3:F3:C8:FE:28:DB:FC:DA:2F:A7:FE
Certificate issuer:       /CN=7b614d35-18c4-4d90-8912-71bdd962e489
Certificate serial:       010D0C9F4328584AB4EF0657A58E20AC3D3EF580
Authority key identifier: 88:32:2E:E1:7E:1E:46:9A:0F:F4:3A:5E:D7:C2:17:16:88:F8:A8:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489/88abf898-7c01-3d29-a08c-b282c52efff9.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     400808
IP address blocks:        23.141.184.0/24 maxlen: 24
                          206.183.152.0/24 maxlen: 24
                          2602:fb0e::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489/7b614d35-18c4-4d90-8912-71bdd962e489.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489/7b614d35-18c4-4d90-8912-71bdd962e489.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:06:57:a5:8e:20:ac:3d:3e:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b614d35-18c4-4d90-8912-71bdd962e489
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=18db16a5-7fc5-4b41-b95f-5589543f7046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:1a:cb:cb:64:52:10:ce:d3:0b:2a:78:74:
                    f7:3b:1f:e3:59:1c:b0:bb:b6:d2:b0:e2:8a:09:62:
                    4e:68:05:dc:8b:f3:9b:0c:94:23:ca:22:6c:19:6e:
                    38:2a:37:25:86:6f:10:f9:29:92:da:99:51:86:70:
                    bd:f9:69:70:57:ac:f8:75:93:47:e3:83:d5:3c:b6:
                    0f:03:4f:39:1a:ba:e1:d5:70:3c:23:81:7f:34:d2:
                    cb:cf:ee:c3:24:e5:53:c2:e3:7e:83:97:3f:2b:d9:
                    d1:07:89:5f:c5:5d:86:a3:2d:a4:38:b1:08:c4:06:
                    2e:63:68:de:4e:29:04:31:b8:d0:72:5c:fb:f4:bc:
                    0b:7b:3c:1a:8e:bd:ee:e4:36:b0:56:20:9b:e5:af:
                    dc:8d:47:2c:b4:65:c1:bd:da:bb:e0:87:73:cd:e1:
                    dc:8d:9b:f2:a9:98:25:01:a7:fd:94:0b:05:e8:a6:
                    61:46:32:ea:f6:79:c5:ef:be:25:56:b5:be:e1:c7:
                    76:80:a5:d5:57:a4:36:5c:76:4e:b3:c1:5d:f0:d3:
                    5f:c3:a6:68:b9:84:dd:2d:d1:b6:28:cf:43:f7:4d:
                    27:b1:4a:0c:35:c3:04:83:ef:45:8e:92:a0:50:1f:
                    b9:c0:72:3b:d1:0f:d4:ae:23:35:1a:e0:32:6c:2a:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:94:CE:5F:33:16:10:55:46:E3:F3:C8:FE:28:DB:FC:DA:2F:A7:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489/88abf898-7c01-3d29-a08c-b282c52efff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489/7b614d35-18c4-4d90-8912-71bdd962e489.crl

            X509v3 Authority Key Identifier:
                keyid:88:32:2E:E1:7E:1E:46:9A:0F:F4:3A:5E:D7:C2:17:16:88:F8:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.184.0/24
                  206.183.152.0/24
                IPv6:
                  2602:fb0e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:9e:a6:0b:60:22:80:a4:32:a3:92:fa:1f:ba:1f:69:db:
         28:c4:8f:fd:03:01:ae:7d:53:61:2b:ad:db:2b:00:2b:b3:54:
         95:b5:32:67:05:28:6f:42:b9:8e:cb:1e:12:c9:48:ad:e4:ce:
         12:4f:53:55:31:ff:d6:7f:9c:da:90:77:8a:d5:eb:3e:f9:7c:
         66:1b:a8:81:fe:fe:cd:8e:fa:ab:0c:ea:c8:b8:0b:9b:32:22:
         c3:2a:7b:b6:d3:e4:53:ee:f9:8d:13:02:f6:63:97:60:8d:f4:
         ba:fc:c3:d6:63:00:52:be:97:27:71:55:66:13:24:01:45:06:
         1b:bc:f4:11:64:93:87:4f:64:a3:8e:65:45:b2:5f:2b:65:76:
         53:00:da:16:df:6d:4d:66:ca:fe:d5:06:23:55:fd:95:8f:ac:
         28:a0:7c:b5:b0:be:07:17:d5:92:48:89:8a:b6:72:4f:7e:be:
         10:34:91:85:d0:47:0a:1e:46:41:9d:c6:f7:0d:22:bc:45:4a:
         4c:7d:3a:fd:79:9e:15:4f:7c:10:a3:f4:dc:4f:64:c5:0f:d3:
         6d:5f:96:12:f5:3e:a2:50:a1:4e:69:18:d6:b8:73:4c:d3:23:
         d7:31:62:f1:11:80:fa:d5:5b:96:05:fc:b6:ef:8b:0b:52:e5:
         f8:2a:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:30:58 2025 by rpki-client