Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa
File:                     2680c2a2-cabf-3554-9a13-b69dcab407b9.roa (raw, json)
Hash identifier:          CiCeqOlxaDClOLdNtMdVA/e+iOv9vpNN2hqndRxi8XY=
Subject key identifier:   58:70:A5:52:26:F7:84:2D:A5:DC:B4:F2:CA:97:88:D2:AB:5D:1D:0A
Certificate issuer:       /CN=caf392a1-07e9-49f4-9a03-df5005333708
Certificate serial:       010D0C9F4328584A348025945059A611E4F59E78
Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     46962
IP address blocks:        23.133.120.0/24 maxlen: 24
                          64.93.68.0/24 maxlen: 24
                          64.93.69.0/24 maxlen: 24
                          64.93.70.0/24 maxlen: 24
                          64.93.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:25:94:50:59:a6:11:e4:f5:9e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=c85f7eb5-e657-4dc6-8c36-c04aae9a212b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e9:ba:a8:b8:b6:b8:e2:3b:f9:36:91:23:08:
                    a0:bb:cb:8d:2b:48:4f:e3:0d:17:fd:e2:b7:40:ad:
                    18:60:1e:a1:cf:b2:37:72:1d:1a:62:2e:81:5a:a8:
                    91:7e:68:aa:81:5f:8d:da:1d:0e:67:4b:54:7c:6f:
                    1e:5e:01:fa:88:cf:55:6b:4f:33:c0:e3:a3:9c:05:
                    a2:dc:06:b3:63:24:a2:32:e2:32:ad:aa:33:fc:af:
                    2e:be:6c:8c:cb:d1:f0:52:65:b8:05:d8:e0:e7:43:
                    1f:1e:e2:c8:03:19:97:fc:1d:ec:3d:16:3c:2e:f0:
                    ce:39:ef:bb:a9:2d:3d:07:cd:f1:e8:87:35:3c:92:
                    52:8e:8c:e1:ad:fc:37:75:07:44:b1:2a:92:e3:14:
                    0f:a0:81:b3:a5:da:6d:75:8d:f2:7c:c8:c6:31:1b:
                    e1:9c:2b:35:a1:e7:cd:8e:3e:f6:a4:4c:71:38:53:
                    3b:20:52:07:1d:e1:37:99:ed:88:4e:22:9b:a9:74:
                    fa:b3:4d:06:b1:0d:7e:ca:16:41:4b:3b:c2:67:7e:
                    04:fc:cb:f4:93:e5:b0:58:c0:79:f2:cc:58:61:96:
                    3b:e9:da:f5:55:68:d9:d5:30:18:dd:0e:fc:03:6d:
                    6d:fc:16:65:12:f6:a5:30:27:ed:c1:b7:85:df:f5:
                    75:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:70:A5:52:26:F7:84:2D:A5:DC:B4:F2:CA:97:88:D2:AB:5D:1D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl

            X509v3 Authority Key Identifier:
                keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.120.0/24
                  64.93.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:a8:77:a9:e8:47:dc:6e:3b:75:05:d7:ca:04:97:86:01:
         51:3d:f6:94:a5:c4:16:3d:a6:56:85:2f:65:50:df:d0:52:55:
         df:55:df:fc:8b:49:a3:45:00:01:68:24:04:8d:d8:3f:89:71:
         31:04:80:6f:1d:c4:b8:e9:8b:d7:0c:91:4c:a5:73:6d:e0:8a:
         ca:21:12:1b:90:c5:23:3f:79:27:b3:86:9c:c7:b2:4c:63:41:
         a0:a0:57:7e:43:ed:17:fb:7a:57:23:5e:12:9c:88:d5:08:95:
         16:ab:76:37:a4:52:55:94:e0:9f:4b:41:09:e1:83:93:20:84:
         7e:66:71:80:14:e0:c0:78:99:11:c9:cd:e4:a4:10:16:e9:c9:
         ee:f7:e9:e9:42:21:1f:8a:25:91:d7:44:cb:e0:58:7f:14:f0:
         bc:c8:3f:3b:f2:65:f5:0b:df:41:e9:6d:06:93:64:c2:14:9d:
         10:9d:bb:6d:b2:53:02:34:e7:a0:62:60:d7:a1:73:94:b1:25:
         a3:92:06:d6:33:fc:8c:c8:58:52:2c:80:aa:a1:59:c9:d7:79:
         61:16:14:54:ff:4b:05:64:fe:a1:80:be:9e:e0:4f:9e:50:00:
         24:58:71:42:83:d6:db:75:19:17:54:2e:b9:ef:86:cd:1f:53:
         12:28:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:59:25 2025 by rpki-client