Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/6960f63e-10b9-3c01-b9b2-d1e5aeaecbb0.roa
File:                     6960f63e-10b9-3c01-b9b2-d1e5aeaecbb0.roa (raw, json)
Hash identifier:          ZwRIHA8TAaSTlK/05D+sMijHSFCZkVTkQm3EEJCkl9M=
Subject key identifier:   73:90:90:06:E2:BE:BC:67:20:87:92:39:87:6F:F9:C0:A8:F4:D8:10
Certificate issuer:       /CN=c487dbf3-3b16-4d19-9025-e64b6f47a247
Certificate serial:       010D0C9F4328584A23C00AB18C75445C72D86E80
Authority key identifier: 85:15:99:42:C3:72:B2:77:FC:D2:81:6C:46:72:C3:65:2D:B7:81:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/6960f63e-10b9-3c01-b9b2-d1e5aeaecbb0.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     807
IP address blocks:        23.147.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0a:b1:8c:75:44:5c:72:d8:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487dbf3-3b16-4d19-9025-e64b6f47a247
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=1be1d9b3-59bd-4d99-a17b-47b3f3617f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:93:f4:5a:29:b6:b0:06:a0:48:b7:f2:a9:
                    28:a9:08:96:a9:6b:91:ac:ed:fc:d3:ab:b8:23:e3:
                    ec:02:02:94:50:3a:4d:56:a1:da:12:8b:d2:c4:f1:
                    4b:85:c2:f1:6b:f2:0a:8a:5f:f6:fc:aa:4b:80:a2:
                    01:bd:fb:49:3c:b9:46:b2:93:5c:7f:4c:98:45:27:
                    b0:f5:c2:7f:fe:fc:6c:cf:95:2a:6d:24:78:39:9c:
                    d3:1c:71:8a:58:f9:41:46:62:26:4f:f9:0a:67:50:
                    57:28:60:f0:0e:55:51:16:28:79:ce:52:e0:58:a0:
                    70:91:83:51:d6:b1:4f:e5:79:c4:8e:83:41:09:3a:
                    2e:fe:39:2e:f4:ae:04:43:3d:cb:bd:04:83:f9:7b:
                    c3:93:cf:06:c5:72:8e:aa:2e:bb:70:57:7a:a3:9f:
                    b8:5c:05:95:54:95:ee:58:3d:b6:43:2c:7b:e3:92:
                    4a:2b:c3:e4:c5:6d:41:6d:21:2f:2f:14:47:44:3d:
                    e7:f6:c7:5c:b2:f2:00:d5:41:fd:58:31:53:1f:ce:
                    62:52:cb:21:54:cb:46:9f:2b:9c:c3:85:89:35:09:
                    a9:9c:cf:aa:76:36:32:c4:fc:46:f1:01:91:bb:08:
                    1f:f0:80:88:cc:ec:df:a7:35:1e:9f:12:4a:ad:a3:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:90:90:06:E2:BE:BC:67:20:87:92:39:87:6F:F9:C0:A8:F4:D8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/6960f63e-10b9-3c01-b9b2-d1e5aeaecbb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.crl

            X509v3 Authority Key Identifier:
                keyid:85:15:99:42:C3:72:B2:77:FC:D2:81:6C:46:72:C3:65:2D:B7:81:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b7:54:70:89:c7:d0:f6:77:e9:45:58:91:e1:80:ab:63:a9:
         d5:81:2b:5f:7d:b0:e4:0d:ba:f8:26:83:49:f5:ce:e9:76:24:
         b0:ba:2c:22:45:6c:ed:5a:15:e3:04:25:34:e2:9f:28:fb:df:
         c4:ba:62:71:d3:6d:d1:9a:27:16:6b:b8:06:e9:b9:86:e3:20:
         70:ad:d0:ac:fa:42:a3:fd:6c:51:02:d1:10:d2:54:ff:d6:22:
         39:db:13:1c:c8:a1:0e:5f:db:c2:a4:2e:46:c6:52:05:cd:15:
         f7:99:83:ca:3d:2e:21:7c:33:e2:13:93:9f:bf:c3:d3:2d:10:
         f6:96:88:c5:7b:ab:41:33:f4:94:98:b8:f3:08:bc:1d:1e:4b:
         5d:91:c4:d9:b6:34:8f:20:4b:d7:ef:7b:6f:ee:96:c2:b1:b5:
         bd:61:cb:33:1a:e4:77:11:17:ba:c3:88:6d:50:7b:4a:40:82:
         69:9e:18:02:c6:f7:2a:f9:d3:d6:04:08:5f:05:c6:14:8b:e4:
         17:af:41:1e:d8:08:6d:49:e1:32:21:28:50:dc:e4:f9:78:74:
         60:48:18:d1:b4:e6:58:bb:3b:5b:1b:03:5d:af:1a:11:3a:53:
         a3:12:83:b5:59:e7:d4:4e:3a:eb:21:69:b7:b9:3f:10:34:61:
         6b:cc:d9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:05:31 2025 by rpki-client