Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/08535f17-0651-3437-9b8b-325b581a9259.roa
File:                     08535f17-0651-3437-9b8b-325b581a9259.roa (raw, json)
Hash identifier:          Xzz41H6734sAynoHxNQjLDlL5LC5E0+yOCIolTMqyEQ=
Subject key identifier:   FA:B9:ED:10:7C:A0:4C:95:CB:ED:FB:AC:A1:12:90:7A:7E:11:FE:A2
Certificate issuer:       /CN=cf6e862f-83c2-4143-b47a-74db6f210162
Certificate serial:       010D0C9F4328584AADF119D4FD6914EC256F6280
Authority key identifier: 4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/08535f17-0651-3437-9b8b-325b581a9259.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     400034
IP address blocks:        23.144.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:19:d4:fd:69:14:ec:25:6f:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6e862f-83c2-4143-b47a-74db6f210162
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=96945a08-62a5-4d55-ac08-42a253306b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3a:d7:3d:3e:00:79:ea:dc:4f:5c:96:63:88:
                    4f:87:19:32:43:cb:f3:33:13:c9:33:e2:8b:95:fd:
                    22:72:82:9d:4e:86:19:e9:89:93:49:a7:4e:11:3a:
                    2e:01:b4:c1:98:50:57:ee:40:80:99:5d:14:14:46:
                    dc:1f:af:df:ea:4b:d4:c2:d5:8a:3c:65:26:0a:a6:
                    c9:99:5a:9e:46:5e:50:0d:07:b4:a1:99:5c:34:65:
                    61:b0:7f:eb:29:29:23:a6:c7:4e:3d:b3:4f:46:e7:
                    dc:84:d4:0d:86:18:d7:e0:8d:11:e5:5a:3b:5d:5f:
                    45:13:d8:45:49:dc:e9:1b:90:77:bd:3b:70:08:6f:
                    e7:44:db:e3:0b:3a:23:8a:12:ce:2e:0f:0b:5f:eb:
                    51:f0:99:a9:f6:af:66:31:d5:ed:2c:95:33:18:cf:
                    9b:05:23:0b:90:38:45:d8:98:b2:a8:92:4c:03:9e:
                    7a:4a:85:91:96:b2:59:f8:69:cc:70:88:6c:5b:85:
                    01:e5:8d:a5:fb:61:46:10:2d:1b:b0:07:ca:40:4a:
                    51:6d:ba:70:81:44:62:f1:5a:e2:86:d1:2f:a2:b4:
                    92:12:ec:58:cf:d0:3b:10:3f:e9:42:82:7a:be:f3:
                    be:d4:0e:26:1c:f4:2f:30:5d:40:15:6e:d1:c9:34:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B9:ED:10:7C:A0:4C:95:CB:ED:FB:AC:A1:12:90:7A:7E:11:FE:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/08535f17-0651-3437-9b8b-325b581a9259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl

            X509v3 Authority Key Identifier:
                keyid:4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:97:06:8b:a2:c0:f6:c8:10:2a:03:df:bf:ce:a6:97:93:88:
         e3:6e:cd:68:67:6b:af:38:43:16:3f:b0:12:22:cf:22:ef:db:
         e6:7e:57:b8:77:e4:90:c9:53:c5:a8:fc:5c:12:a6:ff:55:42:
         77:10:dd:cc:2e:db:a7:60:74:36:4f:ac:8f:7f:5a:eb:30:af:
         96:8a:01:46:20:95:78:71:c7:79:46:7a:c9:c0:76:21:bf:0f:
         29:49:d6:3b:57:14:94:da:3f:54:b0:ba:e6:cd:b0:b5:41:26:
         dd:5f:b8:83:cb:cb:b9:64:ff:18:b6:11:c2:94:4c:92:39:85:
         95:87:40:e4:28:a6:af:37:81:1f:56:55:f1:62:56:fe:d2:e7:
         ed:c5:01:5b:e4:c4:5c:c4:7c:2d:a2:57:b2:09:b8:85:c9:b3:
         a1:b8:30:06:8a:96:14:b9:f8:43:a0:06:97:f4:5f:28:dd:00:
         fb:e2:2b:5c:91:af:0c:0a:b8:27:8a:b3:07:3e:79:de:1b:21:
         bf:7c:9e:bb:f1:0e:ae:f8:9e:c0:35:30:8d:2d:6e:93:dc:9a:
         aa:e3:6e:c8:73:34:d5:2f:6c:83:d2:0a:ed:89:58:8b:4e:75:
         a5:a0:d9:bf:4c:29:86:0b:2e:51:90:eb:be:ad:bc:79:d1:5d:
         8e:63:b8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:31:10 2025 by rpki-client