Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa
File:                     a1f25b08-c285-351d-a5ce-01201a16ceaa.roa (raw, json)
Hash identifier:          eWTZnNHaJ91NfkPACDCjFccnEeSwF++hdIK8X57USQo=
Subject key identifier:   E8:8C:FC:8C:5E:F9:33:6D:CA:C8:93:CB:FD:27:8E:63:59:EA:B9:9C
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584ABD4B944CCADEA49339744980
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     398202
IP address blocks:        23.148.80.0/24 maxlen: 24
                          66.118.240.0/22 maxlen: 24
                          69.64.116.0/22 maxlen: 24
                          2605:88c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:94:4c:ca:de:a4:93:39:74:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=d587ca2d-4ba4-409f-93f5-5229d5a20fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:19:1e:fb:ce:a7:3b:15:23:80:10:37:f8:
                    1b:12:dd:9d:06:6f:36:c4:4e:50:62:82:3e:db:24:
                    bb:15:8a:4d:7f:b1:22:d3:46:46:be:8c:b2:39:e7:
                    80:3b:12:37:c8:56:ea:b8:d8:a9:5a:26:5e:53:01:
                    3b:a2:c0:ae:ba:53:da:da:c7:64:9e:59:a4:09:0e:
                    f5:76:8b:9a:6e:ce:16:6e:1e:19:3f:ca:01:e1:73:
                    d3:0b:8b:ac:36:a1:aa:16:3c:f9:72:ed:6a:87:10:
                    71:3b:3c:e4:12:b6:6b:ab:bf:e9:2c:76:6d:49:4b:
                    d1:96:ad:f1:56:d7:be:62:7e:e9:3a:b4:0c:a6:ff:
                    3e:3d:a6:fc:5d:e1:e4:c2:f0:4f:5d:63:8b:5e:13:
                    c5:fe:81:e6:22:56:b5:96:3f:d5:c6:8b:b3:46:35:
                    7c:b7:d0:89:33:b5:91:19:41:f9:91:33:6c:69:60:
                    0b:c9:dd:04:be:5a:71:5f:14:d8:5c:4d:09:f6:95:
                    41:3d:2b:a8:53:24:26:c5:99:fd:10:25:4f:47:28:
                    d9:0b:a8:02:ee:54:e5:33:f6:a7:dc:93:fd:ab:cd:
                    20:7c:a9:d0:3a:36:4d:c3:95:f8:6d:cb:6b:19:72:
                    1a:1e:dc:4f:ae:a0:72:c6:e6:02:a6:ca:52:89:7d:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8C:FC:8C:5E:F9:33:6D:CA:C8:93:CB:FD:27:8E:63:59:EA:B9:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.80.0/24
                  66.118.240.0/22
                  69.64.116.0/22
                IPv6:
                  2605:88c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1b:f6:52:a4:a9:a3:57:81:af:65:6c:79:f0:d9:02:88:fd:
         95:04:5d:46:4b:42:f1:01:06:c6:03:b3:3a:c8:28:ed:be:89:
         e4:32:77:d3:f4:25:13:1c:7b:c0:ed:67:cd:4c:61:f5:d6:b2:
         36:10:ae:8b:b8:ae:b8:e1:9c:ed:0c:06:98:e7:0b:47:b8:41:
         37:8a:74:86:b1:bc:af:ec:f6:84:28:14:f8:7f:2c:bb:17:e9:
         34:3b:f5:ed:a9:c2:38:6e:c3:f9:37:aa:4b:84:c5:0c:0f:cc:
         94:3b:5b:2c:38:fd:d5:43:80:a7:d7:c2:bf:69:1e:09:61:a2:
         56:64:f4:49:76:6d:a3:5b:19:85:08:b4:f8:46:4a:59:9b:59:
         6d:ec:ac:47:a2:29:eb:0c:4b:b6:ea:77:63:84:e6:c7:e4:15:
         ab:0f:00:53:57:af:f3:17:73:46:fb:52:a1:96:8d:5a:13:b4:
         48:ec:3b:1e:bb:73:91:12:29:46:89:84:0a:8a:21:04:54:64:
         fd:b6:91:79:ac:1e:d3:df:d5:f1:7e:75:94:72:e5:a2:86:29:
         c8:b2:07:75:41:c8:df:19:31:f0:c5:63:e9:75:4e:c7:ef:df:
         54:99:f0:c7:44:d2:87:40:fb:01:3f:b0:68:ab:b0:77:70:67:
         59:b0:1f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:23 2025 by rpki-client