Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/0010b8cc-9d94-3bb0-874c-8527e31ffe79.roa
File:                     0010b8cc-9d94-3bb0-874c-8527e31ffe79.roa (raw, json)
Hash identifier:          vLOBZ26yHc1pFx70RNTbHDx3gL2WfeGb5hzNJkSumBc=
Subject key identifier:   34:6B:17:83:65:2A:71:EE:AD:A4:64:CD:C9:AA:6D:20:D5:04:60:B9
Certificate issuer:       /CN=9a6b843c-48fb-4949-86c8-29317b8cb12c
Certificate serial:       010D0C9F432858499C59E27DB1731A943722E5C0
Authority key identifier: C0:85:62:C5:E0:98:47:70:33:E5:23:3A:DD:A8:4F:34:6E:10:F0:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/0010b8cc-9d94-3bb0-874c-8527e31ffe79.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     20473
IP address blocks:        23.143.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e2:7d:b1:73:1a:94:37:22:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6b843c-48fb-4949-86c8-29317b8cb12c
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=63a966d5-e752-4240-b092-4b9295875ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:38:2e:ed:29:1d:28:82:e4:43:36:6f:f6:1b:
                    a5:26:b9:63:d8:a1:76:5b:97:ae:f8:b2:3f:51:21:
                    fd:75:1a:00:43:85:1f:2b:51:10:60:a7:2d:33:fb:
                    0e:f9:cb:78:ab:b3:93:81:fb:b7:d1:aa:df:fe:3c:
                    0f:2e:95:47:6e:31:10:81:56:48:96:02:99:7c:92:
                    dc:8c:b8:c7:00:05:c8:d8:30:64:d9:9d:6c:0f:10:
                    ff:d0:49:e6:0f:c5:00:88:cc:b0:f1:dc:df:2e:93:
                    c4:5f:0d:90:41:d7:d2:09:f2:28:eb:28:1b:fd:da:
                    a8:35:6c:0c:a6:69:3f:06:09:12:cd:b4:59:77:31:
                    f3:56:86:b6:f3:58:61:81:98:b7:62:ac:f4:e0:f2:
                    c9:4d:e6:b5:3d:bd:fa:d3:85:ce:6a:cd:9e:f7:79:
                    dc:f7:b2:f5:cb:82:68:55:8d:f4:af:df:d7:79:fd:
                    cd:71:d4:be:4b:70:ff:4f:da:bd:05:64:d9:07:4f:
                    a1:98:fa:72:64:c0:d9:77:a0:fa:77:1c:50:cc:ae:
                    af:6c:3e:63:35:1a:4e:a6:62:af:76:c6:06:91:ca:
                    09:0b:b0:79:6b:fa:5a:eb:ff:35:75:61:6b:ca:9f:
                    44:36:3f:da:dd:97:19:ac:43:f2:b1:66:1c:85:a6:
                    af:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6B:17:83:65:2A:71:EE:AD:A4:64:CD:C9:AA:6D:20:D5:04:60:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/0010b8cc-9d94-3bb0-874c-8527e31ffe79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.crl

            X509v3 Authority Key Identifier:
                keyid:C0:85:62:C5:E0:98:47:70:33:E5:23:3A:DD:A8:4F:34:6E:10:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:52:7f:64:86:f3:0b:f6:0a:c6:2c:9b:0f:df:9b:b0:0c:
         5d:ca:ea:a5:0f:66:28:53:40:35:a1:15:c2:da:6f:cd:23:9e:
         06:d5:75:28:5c:23:dd:ea:8c:a2:b8:e0:c0:31:a9:3a:98:0a:
         04:75:ea:04:d3:0e:d3:c1:1f:72:dc:ae:82:85:37:81:4c:cb:
         df:f1:26:08:22:b6:ce:c2:1c:4d:39:cc:84:55:55:e8:39:95:
         53:38:4a:9b:4c:2e:5d:ca:ca:8c:2c:0a:a0:78:05:f0:48:b8:
         7f:19:bd:72:bb:ad:d2:ce:4e:8b:12:bc:9e:08:f9:44:ea:60:
         19:1b:f4:e4:74:92:8c:18:45:fe:81:df:8c:a6:86:7b:21:92:
         21:e7:01:69:c6:78:24:b9:6e:4d:25:47:26:ab:b7:1d:1f:41:
         44:05:ba:1a:30:44:74:ed:d0:25:ee:27:2c:16:c9:ec:57:da:
         54:0c:34:2a:1f:a6:e8:17:8d:d9:8c:fc:35:9e:6e:72:2e:0d:
         3a:c1:6d:2e:09:f2:97:1b:8b:00:7d:5e:11:a0:00:70:e5:60:
         f3:17:31:1f:d1:d7:94:ec:f8:f3:4c:6a:b3:a7:a3:a8:f0:d8:
         80:14:da:b5:03:b0:38:fa:df:b2:83:5c:cf:66:12:87:42:db:
         41:5c:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:53:27 2025 by rpki-client