Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/c66361a3-62d4-39c2-a93b-c4e3bceaca66.roa
File:                     c66361a3-62d4-39c2-a93b-c4e3bceaca66.roa (raw, json)
Hash identifier:          U/NmQeAOrnq/9LnAnLBCXKuBd232+gUor3NwzU44tNY=
Subject key identifier:   27:11:55:1E:E2:09:95:3F:D1:84:52:53:53:E5:D1:CD:F4:51:DD:F6
Certificate issuer:       /CN=2c4f9103-4694-4f57-954c-fc9c82a95b42
Certificate serial:       010D0C9F43285849D594EDAA35EDC498081D7200
Authority key identifier: 9D:DA:12:8F:C6:9C:97:AD:FE:F0:F9:23:C9:B8:A0:D9:55:55:FF:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/c66361a3-62d4-39c2-a93b-c4e3bceaca66.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     26902
IP address blocks:        23.160.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/2c4f9103-4694-4f57-954c-fc9c82a95b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/2c4f9103-4694-4f57-954c-fc9c82a95b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ed:aa:35:ed:c4:98:08:1d:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c4f9103-4694-4f57-954c-fc9c82a95b42
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=46ca5b04-93ac-43de-b03e-661d6a8cc462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:4a:dc:fb:cc:c1:24:30:21:c4:ee:d9:98:
                    45:d9:90:6f:d3:c4:16:f2:c6:60:9d:95:43:60:c8:
                    06:2a:48:a7:ef:ef:73:81:b7:fa:28:7b:a5:68:04:
                    62:5a:27:17:41:f1:3d:ec:63:6f:e1:5e:2f:89:1d:
                    c6:be:1d:cf:72:2c:f0:4a:4a:cb:db:ed:61:5b:80:
                    f6:96:44:c8:65:18:29:3f:4c:19:ce:51:4b:a8:a9:
                    fb:bd:56:e3:33:88:cd:d4:fd:36:7b:dd:68:92:bf:
                    a4:03:f4:97:93:64:a0:9f:0f:de:03:62:af:62:cf:
                    fb:41:49:b0:f7:59:a3:f4:97:00:b1:3d:89:eb:94:
                    b7:9c:47:e3:5d:75:33:d0:70:70:15:b6:1b:44:a6:
                    4b:70:31:85:0f:80:52:09:d3:59:7a:67:25:37:8b:
                    1b:82:21:51:41:d9:ac:d7:ff:b6:9c:ee:26:3e:d0:
                    f5:f9:13:62:2c:af:e5:d6:2a:a8:4c:49:6f:dd:c8:
                    85:9f:5b:11:d0:d1:d9:f3:61:d4:4c:d3:86:1c:60:
                    e4:96:af:5d:1b:e6:d3:a0:f5:38:41:7b:80:c8:b7:
                    d7:bd:1a:3e:03:cf:79:47:47:d9:cb:77:f6:d5:1e:
                    e0:28:b5:c6:66:ae:56:63:86:7e:31:34:18:8c:e4:
                    01:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:11:55:1E:E2:09:95:3F:D1:84:52:53:53:E5:D1:CD:F4:51:DD:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/c66361a3-62d4-39c2-a93b-c4e3bceaca66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/2c4f9103-4694-4f57-954c-fc9c82a95b42.crl

            X509v3 Authority Key Identifier:
                keyid:9D:DA:12:8F:C6:9C:97:AD:FE:F0:F9:23:C9:B8:A0:D9:55:55:FF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:97:bb:38:82:0a:c1:20:da:47:51:04:0e:88:60:15:29:8b:
         f8:98:69:57:e8:71:8e:3d:43:9b:00:4a:05:1e:a3:83:a7:93:
         15:93:6c:8c:36:92:b8:6b:63:27:25:0a:dd:73:b4:e8:11:d8:
         95:cb:7b:e3:70:fb:b5:44:71:f5:65:0c:53:cf:b3:3e:0e:61:
         26:57:fa:68:6f:06:b9:f4:f8:78:c5:3f:cb:96:a8:3b:f6:8e:
         14:62:a0:6e:d6:20:13:23:74:9f:f5:20:d4:0e:b3:fa:88:27:
         e8:53:2f:63:47:34:fd:52:a4:1e:61:24:e4:39:c0:26:86:7f:
         6e:8c:8a:9b:12:0d:a6:72:bf:12:bf:12:9f:ba:c7:b3:75:c0:
         09:f1:80:eb:4f:28:9c:48:05:8d:5f:57:0d:83:33:13:40:1d:
         e5:b5:99:9d:1a:01:fe:93:e5:1c:77:79:fd:26:f1:1b:e3:67:
         f7:32:b5:7b:18:00:f8:c5:3e:44:49:7c:20:1c:cb:a4:37:d0:
         0a:20:6f:5c:af:fa:bf:f0:78:96:8b:83:29:be:d2:71:06:f3:
         14:d9:fc:73:2c:cc:cc:3d:e4:d6:0c:89:d6:d7:df:31:60:f4:
         4e:86:78:11:ff:35:3f:0d:fd:a0:c2:dd:ad:8a:f0:e2:e6:fe:
         c0:e8:74:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:39:01 2025 by rpki-client