Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/d5b43b70-426f-3d8a-8326-d5dbb771bde1.roa
File:                     d5b43b70-426f-3d8a-8326-d5dbb771bde1.roa (raw, json)
Hash identifier:          wcJt89AU2pC1ZI78GFoUp3x5rj08WnZYjSb7irzR08k=
Subject key identifier:   75:66:7D:AA:5D:2B:E2:96:AD:04:27:89:44:05:4D:97:FD:C6:02:C3
Certificate issuer:       /CN=dec54853-8708-4db6-8c16-61e598dd115f
Certificate serial:       010D0C9F4328584AC2E10DB06AA260107DEDC700
Authority key identifier: AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/d5b43b70-426f-3d8a-8326-d5dbb771bde1.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     399788
IP address blocks:        23.154.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0d:b0:6a:a2:60:10:7d:ed:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec54853-8708-4db6-8c16-61e598dd115f
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=47c5c868-b8b4-4e2d-ba29-ea13dafbde24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:52:31:a6:f6:0a:7c:43:c0:ed:74:49:2a:
                    18:8c:c2:48:92:49:35:2a:6f:a2:67:6f:21:f0:d7:
                    3f:69:73:b0:04:dc:10:56:57:93:f0:50:21:a2:51:
                    b0:88:44:aa:6e:a3:72:16:dd:6f:6f:1b:89:7f:91:
                    01:5a:82:63:3b:b1:36:fc:e2:11:47:46:90:c7:2c:
                    c6:cf:b3:5f:7e:17:0c:55:4f:4a:82:d4:6a:76:7c:
                    2f:9f:d4:83:96:df:f6:31:a7:f1:6e:24:a6:d9:f7:
                    15:b1:b9:65:7c:72:48:6a:ea:ee:d8:85:a5:59:bd:
                    1b:9b:5b:13:18:06:6c:7d:b6:d8:d3:02:97:27:3b:
                    d6:9c:8f:e3:ab:c0:f8:9b:ba:f8:42:71:aa:52:d3:
                    05:e3:04:c8:4b:b2:08:31:81:2b:0b:d5:e4:e3:e0:
                    3c:12:85:05:9a:55:c0:ff:6c:28:6b:bc:39:3c:8f:
                    db:86:64:68:23:e5:43:f5:98:68:df:97:eb:8f:3d:
                    16:95:ca:a0:99:db:cf:20:a0:20:30:df:d3:e9:3f:
                    07:51:af:bc:b1:39:dd:c2:81:85:88:fe:e8:78:07:
                    93:45:d3:aa:e0:59:28:ff:72:30:c0:9b:c0:25:5c:
                    55:3a:05:a6:f7:e6:84:61:59:36:5c:e9:b7:fc:2f:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:66:7D:AA:5D:2B:E2:96:AD:04:27:89:44:05:4D:97:FD:C6:02:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/d5b43b70-426f-3d8a-8326-d5dbb771bde1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl

            X509v3 Authority Key Identifier:
                keyid:AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:3a:9c:3c:af:1d:80:81:0c:47:aa:ca:32:fb:f2:08:3a:67:
         b3:0f:a3:5e:49:d6:b1:87:f3:99:14:53:1a:3e:3a:0d:21:d4:
         0e:9e:69:78:a1:61:6c:c5:09:17:29:e2:73:04:6e:53:94:ce:
         5d:a3:21:5d:3e:fa:34:b6:59:83:92:f4:c3:ba:c1:08:5a:3e:
         ba:bc:34:5c:3a:ea:23:0e:dd:16:cd:a7:6e:ad:36:cb:42:8d:
         9b:51:3e:e2:73:7b:db:c5:f2:8c:1a:2a:db:99:3d:a7:0d:e8:
         8c:d9:2b:13:9f:d8:25:0e:47:93:ce:ad:a3:98:b3:6a:f0:4a:
         7c:05:8b:9a:7c:a9:af:18:51:f5:ed:3c:ee:d0:64:86:1c:98:
         ec:e9:db:06:a0:0b:32:c9:15:de:8c:3c:28:dd:b7:c2:c7:9a:
         d3:f1:aa:cf:c3:42:0c:a2:5a:9b:80:2d:f2:bf:b0:2e:b7:2a:
         9c:36:91:58:4b:ea:72:75:3d:20:b3:c2:8e:4b:47:ed:15:a9:
         7d:d7:ab:a3:b5:ad:31:5b:d2:b2:71:8a:4b:5c:e4:cb:10:99:
         ff:2f:04:12:a8:09:43:31:9f:6f:f2:fd:e7:26:92:49:76:d9:
         6c:05:16:6f:4f:ed:92:16:7b:26:b8:bc:b4:e8:09:1e:6c:ac:
         5f:fc:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:06 2025 by rpki-client