Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa
File:                     ed656f57-c876-3393-937a-7eabe0e6e42a.roa (raw, json)
Hash identifier:          C0GBGMEaos6pjT75/V95Z0Nl2rHN3AXW2TV6FBAnxy0=
Subject key identifier:   8E:C3:81:E2:E1:28:CA:3E:38:08:4B:E8:FE:84:45:51:24:DD:BF:5E
Certificate issuer:       /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e
Certificate serial:       010D0C9F4328584A14655A87A071A9B274A174CC
Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     400564
IP address blocks:        23.134.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5a:87:a0:71:a9:b2:74:a1:74:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=ccba50b4-42b1-416c-bff6-b63d88cedb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:2a:c8:b9:19:c9:bb:15:b7:11:35:30:d1:
                    fe:7d:1b:80:a8:7c:c5:fb:eb:b2:f6:82:23:dc:d3:
                    e5:2f:e1:9f:84:8d:8c:38:02:1c:06:c4:9a:59:e6:
                    34:54:fe:b2:ea:12:89:54:7b:1d:59:48:6a:46:9a:
                    61:6f:cf:b1:bd:58:4a:d5:a6:66:6b:a6:25:77:a3:
                    e0:48:91:8a:09:a9:2f:fb:3b:9e:13:c4:ce:56:30:
                    c4:45:7f:42:af:30:35:36:c5:b8:fe:0b:48:d5:b4:
                    c6:db:fc:08:09:bc:ab:7f:22:6c:b9:ef:01:89:7d:
                    32:37:38:2d:26:3a:cf:ca:1f:ac:13:6f:bc:4c:c8:
                    c4:d7:6e:80:a0:84:1d:a0:f2:32:93:33:1a:c0:74:
                    18:76:15:77:ab:eb:5e:ad:7f:8e:34:e9:d8:77:3d:
                    59:bd:2b:fc:59:fc:74:d4:73:23:4b:01:17:94:a3:
                    3b:7d:3a:4a:30:e7:7f:3e:07:7c:44:90:13:25:78:
                    af:b0:87:3f:2a:bc:5f:ae:13:8e:c0:96:a6:8f:df:
                    07:93:55:87:c3:ee:9d:3c:b2:86:18:d2:d7:3d:da:
                    b8:30:05:a4:ed:fa:44:fa:97:22:2b:f0:f1:3d:4d:
                    f4:68:76:69:a1:6e:4e:e2:9a:5f:a5:a1:18:43:4b:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C3:81:E2:E1:28:CA:3E:38:08:4B:E8:FE:84:45:51:24:DD:BF:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl

            X509v3 Authority Key Identifier:
                keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4d:f6:a2:9e:b0:75:41:1c:cd:37:8a:89:d7:50:cd:bf:e1:
         e8:03:ae:d4:78:66:93:75:9e:06:08:1c:32:e1:f8:61:e8:cb:
         4f:f1:d4:b0:17:88:17:09:fe:d6:61:15:9a:a4:5c:bc:36:6e:
         4c:f3:fb:bb:21:a1:50:dd:96:a8:b5:0e:bb:ab:39:cc:3c:cd:
         b0:c0:6e:cc:8c:69:75:20:e4:46:46:60:44:a7:b8:46:55:66:
         41:27:12:cd:06:42:d0:ce:3f:b7:8f:05:ef:30:a6:1f:6c:d0:
         3f:e0:34:15:f2:08:78:e2:3d:8e:24:52:19:8e:04:a5:d5:cb:
         d7:ac:f9:03:63:c6:73:b7:76:02:69:d1:d8:fa:b1:f1:84:bf:
         3b:11:ac:4e:53:c5:a2:bb:20:57:0c:4f:13:b8:85:ef:ab:68:
         e1:26:ec:62:d8:58:7c:11:b2:62:6f:5c:20:41:8b:00:9e:7b:
         84:d9:87:7b:03:47:0b:f4:4b:0d:af:00:fd:d5:07:f1:bd:92:
         0e:78:fe:c5:83:a1:46:7b:a5:7f:cb:a1:69:a5:40:16:68:df:
         70:5f:ee:b9:2c:2d:6c:44:fd:bb:7b:5b:b5:19:03:0f:ec:8d:
         64:38:23:0a:fc:52:70:b7:aa:8b:81:7c:5e:2e:c0:6e:32:e5:
         e3:9a:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:21:15 2025 by rpki-client