Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/656c7730-08e3-30b0-9c36-04d1b6bd9d87.roa
File:                     656c7730-08e3-30b0-9c36-04d1b6bd9d87.roa (raw, json)
Hash identifier:          VMW3eyqvbJpnVGwmen9Gef85mNw9ooQzXAfF9qtvTFM=
Subject key identifier:   A2:B3:97:7E:BB:12:F5:EB:E0:DE:62:86:6B:44:9C:1C:7F:26:D1:48
Certificate issuer:       /CN=4ea462c4-d76d-40b1-a18e-da445cbec96b
Certificate serial:       010D0C9F4328584A1B60007A422204428F33F890
Authority key identifier: 90:20:0F:9D:10:76:DA:9B:60:32:1A:E8:12:63:2B:37:B2:88:6F:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/656c7730-08e3-30b0-9c36-04d1b6bd9d87.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     40896
IP address blocks:        23.155.200.0/24 maxlen: 24
                          2607:53c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/4ea462c4-d76d-40b1-a18e-da445cbec96b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/4ea462c4-d76d-40b1-a18e-da445cbec96b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:00:7a:42:22:04:42:8f:33:f8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea462c4-d76d-40b1-a18e-da445cbec96b
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=f809b050-9d6d-45b3-b71c-2990a0b958ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:97:c2:4e:c5:1f:a7:7e:50:6b:fb:8e:96:a6:
                    df:72:5b:37:a9:d7:fa:20:35:e5:e6:22:89:a3:bf:
                    09:e8:6d:03:ad:72:31:dc:65:cd:37:9a:5e:98:4e:
                    d1:d4:48:fd:75:f1:81:61:84:20:2d:82:9a:35:12:
                    7f:e6:a5:14:18:3f:bc:0f:ef:44:4b:2a:8a:81:bf:
                    b1:74:c3:b7:09:30:70:90:14:8d:8b:b5:89:17:f6:
                    de:57:72:37:83:e4:9b:9f:f1:14:4a:a2:79:36:52:
                    81:d6:3b:d0:16:6f:1c:74:62:41:c4:33:e1:1a:88:
                    eb:56:ce:73:91:ac:84:f6:cd:63:a3:a1:a2:2d:4a:
                    58:e3:7b:b1:48:09:0c:e1:58:10:14:ca:62:27:97:
                    7a:5e:cc:12:24:53:d9:a3:32:da:9a:1d:0f:60:e0:
                    d8:40:16:dd:12:2b:c2:68:0e:64:00:bf:5a:e8:9f:
                    c5:49:80:f5:ce:d7:a4:20:04:29:b2:e9:69:d4:34:
                    b1:aa:be:5f:12:10:33:87:b3:51:57:d9:b0:31:d6:
                    fb:bf:ea:e1:f5:6c:d3:3c:1a:bc:8d:0b:26:84:16:
                    58:a3:0f:0a:57:17:eb:7d:b1:74:65:9c:e0:92:46:
                    c4:87:78:83:9b:2b:ec:06:51:c9:51:24:7d:8f:d7:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:97:7E:BB:12:F5:EB:E0:DE:62:86:6B:44:9C:1C:7F:26:D1:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/656c7730-08e3-30b0-9c36-04d1b6bd9d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/4ea462c4-d76d-40b1-a18e-da445cbec96b.crl

            X509v3 Authority Key Identifier:
                keyid:90:20:0F:9D:10:76:DA:9B:60:32:1A:E8:12:63:2B:37:B2:88:6F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.200.0/24
                IPv6:
                  2607:53c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ab:f9:d9:47:7a:96:1a:52:23:b7:49:f6:c3:9d:6f:dc:c0:
         6f:08:e0:60:4a:e2:88:7d:ca:d2:b6:cb:84:6c:7a:21:71:9a:
         9b:6e:8b:71:2e:14:58:f0:08:1a:f8:b0:92:54:54:45:11:4b:
         36:44:df:2e:51:27:59:61:ec:bd:3d:8e:a8:ec:8c:06:68:48:
         32:45:72:0d:fe:60:dd:79:6e:69:ab:2b:31:f4:fe:5a:ef:99:
         29:4b:14:0b:bc:b4:23:70:74:27:8d:4d:48:5d:21:2c:44:c3:
         d3:ea:f1:61:ad:be:6a:42:33:5a:c8:5f:9f:e5:05:5b:dd:83:
         ee:63:1b:88:74:28:45:45:ed:30:4f:7b:2a:a3:6e:d3:d7:15:
         c2:b2:a5:cb:01:d2:c4:a3:52:a0:e7:78:18:da:9f:55:5e:3b:
         cc:aa:08:93:5e:f0:3c:91:1f:7a:1c:7a:27:27:99:c3:00:42:
         d8:1a:16:8b:be:4c:88:a2:53:4f:bd:a9:25:dc:53:19:b3:c8:
         16:4f:93:8b:d3:c5:1f:f9:49:14:09:d7:f2:af:35:54:0d:b2:
         52:d1:4e:64:48:ae:c7:fc:33:1a:cd:93:08:e8:5e:94:55:67:
         7d:0d:da:ee:10:f2:56:86:1b:d9:17:f9:19:00:87:18:41:67:
         17:c6:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:15:15 2025 by rpki-client