Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa
File:                     51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa (raw, json)
Hash identifier:          8XLSdiAY8V18Fef5b9nxiaxLRq19EouIKNRVzde7P5Y=
Subject key identifier:   D4:6F:62:7B:00:37:2F:DF:BD:C6:FB:11:68:36:70:BB:38:16:52:40
Certificate issuer:       /CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
Certificate serial:       010D0C9F432858499F249C9C4F3A50B312E8FC80
Authority key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     395185
IP address blocks:        23.137.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:9c:9c:4f:3a:50:b3:12:e8:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=ef89713d-4673-4c55-8d5f-9d6e3735b45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bb:f5:ea:67:82:59:29:5b:ab:2c:39:df:13:
                    92:18:d7:c4:e8:44:73:fd:d1:25:77:f9:a5:d0:f1:
                    38:3f:8f:b1:cb:f7:91:f3:f0:71:ce:75:05:91:dd:
                    3c:5d:27:e8:d9:bf:51:4c:83:cb:4c:38:3d:63:fa:
                    16:87:0a:79:64:d0:59:34:62:13:af:d4:5a:06:2f:
                    7d:b4:01:2b:63:5a:51:b0:92:04:79:15:9f:5e:9b:
                    46:82:28:7b:79:85:28:60:3d:65:30:77:29:67:d2:
                    f4:3e:76:8a:a8:76:0c:7c:fa:d0:fd:83:e8:39:5b:
                    1d:52:3c:a0:e4:68:a4:8e:cd:90:a5:59:80:b5:66:
                    a8:4e:b0:c4:e1:e5:ee:dc:1f:ee:05:14:62:f8:a3:
                    5f:c7:bc:21:8a:88:f5:73:bd:7c:58:80:37:ba:7e:
                    7a:5a:8e:a3:49:c1:8a:a6:44:a5:06:e9:47:34:1b:
                    ad:bb:f5:0a:3b:81:3e:70:0f:4d:6b:13:6c:6c:29:
                    c6:0e:ab:4a:97:ea:87:67:02:e8:85:e3:5e:48:15:
                    88:10:4e:b1:aa:4b:54:c9:56:51:0c:59:c4:ac:5d:
                    bf:56:90:54:b0:db:fa:65:27:a1:4e:b0:2a:31:7e:
                    21:33:ac:93:65:dd:04:9c:a8:aa:1e:84:11:2d:97:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6F:62:7B:00:37:2F:DF:BD:C6:FB:11:68:36:70:BB:38:16:52:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl

            X509v3 Authority Key Identifier:
                keyid:33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:14:b2:d5:0c:84:dc:3e:62:71:38:d6:b3:91:0e:b8:81:06:
         59:dd:03:67:39:ce:72:77:87:42:cd:cd:02:4e:a2:c9:d7:6a:
         09:f8:9a:a3:f6:3d:c8:41:24:a0:c4:02:e8:76:4b:f4:04:9c:
         a4:d1:f8:f0:fa:e8:2f:a9:c8:0f:36:a1:15:7d:5d:d7:0e:a7:
         ea:d7:fe:4a:4f:1e:16:c7:c2:e8:9f:60:bb:f2:2a:da:59:ae:
         61:38:7e:0c:cd:0e:75:43:25:8e:d6:7e:19:5a:c5:db:71:e7:
         9d:10:ba:2d:27:17:c1:28:25:56:e5:e7:2d:a3:09:65:98:d0:
         1c:64:4a:c3:dc:5a:54:85:87:d0:1d:66:08:55:1b:9a:51:72:
         a8:b1:39:64:e7:08:1b:29:aa:c7:d4:ef:eb:84:ff:fd:76:09:
         bb:e7:b6:0b:8e:9a:28:68:4b:f9:7e:e1:aa:c0:70:ac:a1:b1:
         2f:3b:e0:08:bd:41:ab:56:9c:e4:54:f9:02:1f:db:98:b8:1e:
         2a:07:e5:d6:00:8e:3c:bb:99:67:bd:8a:13:d5:32:d3:20:74:
         a3:90:e7:63:2f:0b:88:4d:59:c4:e7:8f:be:8a:3c:de:71:0c:
         17:35:1d:07:17:b6:a6:4c:74:2f:32:13:d7:6c:fe:0a:e9:1c:
         35:05:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:02:16 2025 by rpki-client