Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/334e389e-539d-33fc-b67f-c8bb35d92840.roa
File:                     334e389e-539d-33fc-b67f-c8bb35d92840.roa (raw, json)
Hash identifier:          hNstpvv5/IVaJeo7hUJapME/jb0+QaO+pZBh47dF9tI=
Subject key identifier:   51:84:9D:D7:0A:89:0B:C7:18:7C:ED:04:CF:DB:95:FA:5C:A0:88:06
Certificate issuer:       /CN=ec23d019-d079-49df-94b6-ad79d138e90f
Certificate serial:       010D0C9F4328584A74B5D03812F26F0740177460
Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/334e389e-539d-33fc-b67f-c8bb35d92840.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     46978
IP address blocks:        23.187.144.0/24 maxlen: 24
                          23.187.145.0/24 maxlen: 24
                          23.187.146.0/24 maxlen: 24
                          23.187.147.0/24 maxlen: 24
                          2606:7540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d0:38:12:f2:6f:07:40:17:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=2974c704-b936-4580-942d-fc22ef5d1b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:ff:c3:79:3f:ec:f9:3b:a2:b6:8d:85:9c:
                    14:8e:2f:13:4d:ea:f5:55:83:66:b4:b6:95:a8:af:
                    65:10:a6:5d:3f:0a:42:f7:be:3e:b9:fb:20:22:1f:
                    bc:50:94:89:4c:e2:b6:b6:84:64:7b:d1:c3:ac:7d:
                    36:b4:0f:b2:5c:39:c1:07:58:ad:55:c7:09:1b:1d:
                    67:d2:f8:e6:68:6d:05:6c:51:a0:ab:e7:b0:52:e9:
                    94:1f:1e:3b:b5:18:06:94:1b:ea:6f:46:3b:b0:29:
                    3d:f3:98:38:40:3a:b8:d1:20:b4:f6:24:0c:01:c0:
                    dc:14:af:9c:b1:73:a7:98:b5:ed:a0:28:b0:1a:c0:
                    7b:36:94:4e:7c:1a:7b:de:f7:2d:50:20:8f:3e:bc:
                    51:72:a3:0e:15:6b:72:e3:f5:60:7a:7c:f5:5d:66:
                    40:d8:2a:41:a6:f8:89:21:41:4d:81:e8:dc:f0:8d:
                    53:fc:1b:b7:c0:86:ff:9d:77:49:80:0f:e7:bc:f9:
                    63:20:b8:16:20:79:5e:07:86:bb:95:22:35:44:df:
                    75:1c:7c:6a:5e:21:84:6e:bd:7f:0d:eb:a4:95:4c:
                    37:f2:49:00:be:18:c1:70:a2:34:38:42:5b:36:3b:
                    da:fd:5d:89:b1:bd:f6:67:aa:3c:32:e3:17:e2:10:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:84:9D:D7:0A:89:0B:C7:18:7C:ED:04:CF:DB:95:FA:5C:A0:88:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/334e389e-539d-33fc-b67f-c8bb35d92840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.144.0/22
                IPv6:
                  2606:7540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5e:ac:fe:72:b3:df:80:30:be:43:03:e3:0d:42:15:b1:bd:
         15:b5:92:86:56:df:b2:b0:ee:04:2f:30:81:d8:a5:fe:2e:c8:
         ba:fb:26:0a:4e:c6:1d:c1:b0:22:55:78:ee:bf:ce:8b:93:ca:
         02:27:5c:6a:5c:55:84:99:2a:a5:5c:f9:4d:cf:ae:8e:bc:84:
         61:f5:a7:c1:3d:d4:cc:a3:2f:2c:78:2c:76:43:82:bd:84:ee:
         e0:37:f7:66:c6:29:38:03:a7:b1:99:94:c5:30:52:ab:d6:07:
         42:f4:7e:e9:4e:61:22:9c:fd:f6:65:04:b2:0e:48:21:11:8a:
         64:ad:04:b7:c5:da:55:60:44:fc:29:1d:fd:6c:25:cd:ff:50:
         1a:f1:07:fd:6c:6e:dc:ed:0a:ff:4d:a4:2f:a0:30:34:d3:b1:
         0d:3a:87:7c:5d:20:05:7b:5e:89:79:e2:ba:f0:4a:2f:db:83:
         96:15:af:84:0e:13:6e:3e:52:35:4f:bc:bb:b8:d1:83:55:e3:
         6f:81:7e:9a:42:1d:09:b9:bb:cc:dc:6d:3d:c1:70:5b:69:74:
         2a:3c:11:a6:80:43:65:cb:1e:2f:21:63:0e:ba:f8:5d:1f:80:
         b6:b6:c5:f2:87:d6:bb:ad:dc:92:29:0b:df:b2:0d:6d:8d:17:
         d1:3f:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:00 2025 by rpki-client