Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40/0f884f38-ec1f-39e0-b70e-303c15072b68.roa
File:                     0f884f38-ec1f-39e0-b70e-303c15072b68.roa (raw, json)
Hash identifier:          2/17pHuiQbQ5pVvYSkdZNdxV/RiBV1Jz2a0yamH83oI=
Subject key identifier:   87:DD:DD:4B:EC:6E:CF:AB:3F:C3:9F:47:FB:8E:65:99:8E:DB:A0:51
Certificate issuer:       /CN=05c4d8ff-f038-444b-a203-ce4e118ffa40
Certificate serial:       010D0C9F4328584A1E2AA9E1910B802DE9839A00
Authority key identifier: BF:56:C7:F6:9B:14:38:66:93:3D:44:62:AD:7E:6E:FD:F0:A9:22:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40/0f884f38-ec1f-39e0-b70e-303c15072b68.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     26930
IP address blocks:        23.155.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40/05c4d8ff-f038-444b-a203-ce4e118ffa40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40/05c4d8ff-f038-444b-a203-ce4e118ffa40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a9:e1:91:0b:80:2d:e9:83:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c4d8ff-f038-444b-a203-ce4e118ffa40
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=f31c7052-d876-4ae6-928b-f60f39280048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:8c:d7:3c:43:ea:63:db:7f:95:83:78:75:
                    57:20:7d:88:9c:b4:0c:2f:da:76:c2:ae:c5:30:72:
                    d4:76:70:88:bd:aa:9e:4e:84:ce:1e:61:f7:1b:23:
                    7e:9a:86:f3:ff:1d:52:16:54:6c:6c:68:00:88:3c:
                    2a:2b:2c:9e:3e:19:2a:cb:e2:a4:a8:cb:5a:06:02:
                    fd:c4:1e:be:1a:73:9a:18:25:0c:c8:59:c0:d1:92:
                    a2:4f:f7:f7:c1:d1:1b:0d:38:17:9b:26:48:44:94:
                    90:46:90:d6:01:c0:4d:5a:4b:3a:f0:ce:6e:fa:1d:
                    0e:33:b2:ff:27:53:a2:d3:88:e1:64:60:65:0e:0c:
                    0e:91:22:67:84:ba:43:4e:4a:a5:9a:de:95:ec:84:
                    9b:ea:2f:37:5c:8f:7d:67:de:5d:d1:e8:5c:61:35:
                    25:43:ac:68:ab:be:3c:0e:c1:43:60:a3:bb:9e:e9:
                    7e:ba:51:ea:16:42:2b:cd:df:0f:91:02:46:78:d2:
                    86:d7:18:f6:c3:fe:3c:27:7c:4e:d4:30:03:cc:6e:
                    0f:48:28:eb:c1:2f:0a:11:9b:2b:60:a6:1f:89:f8:
                    cc:06:bc:db:00:e9:5e:08:b7:97:f1:85:ce:f2:98:
                    ef:19:57:b3:c8:44:20:b6:d6:c4:c8:52:e4:27:b9:
                    82:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DD:DD:4B:EC:6E:CF:AB:3F:C3:9F:47:FB:8E:65:99:8E:DB:A0:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40/0f884f38-ec1f-39e0-b70e-303c15072b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40/05c4d8ff-f038-444b-a203-ce4e118ffa40.crl

            X509v3 Authority Key Identifier:
                keyid:BF:56:C7:F6:9B:14:38:66:93:3D:44:62:AD:7E:6E:FD:F0:A9:22:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7d:eb:bd:1e:29:df:f3:e0:c9:07:93:29:b3:d2:af:43:28:
         b2:e0:7f:63:29:0a:cc:fc:d4:fd:85:bf:27:f6:20:55:d5:69:
         6b:e3:b3:f1:bf:fa:59:83:9c:2f:e8:46:51:b9:81:f6:40:e0:
         79:56:c9:d9:4b:bd:ef:e9:f4:26:7d:59:0f:21:da:74:64:bc:
         ed:4b:69:9c:76:f9:b5:22:b6:d5:4d:0f:23:24:c4:51:d6:c7:
         12:45:dd:f9:69:5d:9c:92:34:b1:14:e6:eb:5a:a7:c5:ab:00:
         d2:0d:2b:61:b7:7c:a2:ff:01:7a:25:63:14:ca:c3:6c:57:6b:
         33:54:d9:19:6c:08:2a:3e:05:de:8a:c4:6d:43:09:68:68:f6:
         fe:5a:7f:ce:5c:c9:2d:e3:e4:81:a5:e3:21:1c:89:26:37:0e:
         74:01:bb:96:23:64:0d:5b:63:75:73:3a:8c:7f:f6:55:c5:db:
         c7:06:c2:6d:16:e1:f3:c0:e1:cf:54:46:ac:d9:1c:85:73:4a:
         35:c0:c1:27:a5:0c:71:6d:89:90:f6:84:a1:1f:58:c3:ce:f1:
         18:f3:57:6f:df:00:bd:85:c7:cf:02:74:82:69:68:b0:3a:aa:
         bb:ed:80:a7:bc:4a:d3:ab:a7:20:b0:f9:aa:04:3c:d5:9c:e0:
         b0:6f:e0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:56:34 2025 by rpki-client