Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/bb8ae1b9-b42d-38d3-a87d-a8ccb503bb73.roa
File:                     bb8ae1b9-b42d-38d3-a87d-a8ccb503bb73.roa (raw, json)
Hash identifier:          RZkUKZwr3sMsz8oWxDhgtTtQUYuTTcnDOvr7IVQBpLM=
Subject key identifier:   1B:B1:C0:1B:69:9B:2C:5A:EA:42:61:18:AA:AA:EF:84:73:58:AD:B0
Certificate issuer:       /CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
Certificate serial:       010D0C9F43285849C79F672459D7561A09F0E980
Authority key identifier: 0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/bb8ae1b9-b42d-38d3-a87d-a8ccb503bb73.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     133073
IP address blocks:        23.155.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:67:24:59:d7:56:1a:09:f0:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=36d639a5-72c3-4509-a1e6-84aa22e68534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:21:03:20:dd:81:7b:dd:70:3c:ce:91:c2:dd:
                    bf:aa:2b:66:e7:1e:2b:aa:e5:81:8f:e0:5b:5e:83:
                    6c:ba:d4:8c:63:4e:88:c5:05:16:f6:3b:65:ff:ba:
                    64:3e:6f:6b:45:b1:f6:93:2b:1b:bd:cb:a7:dd:f2:
                    c5:ba:30:66:01:3b:1d:af:9f:27:2b:b5:93:16:42:
                    80:6e:2a:66:55:b0:09:c3:e8:6f:48:f8:f2:98:ea:
                    e0:a0:df:64:12:26:e9:b9:9b:92:ea:e6:28:5e:69:
                    40:64:73:8b:27:c0:e1:34:ee:f4:c0:a4:a3:99:8e:
                    87:43:32:bd:17:9e:63:e5:4b:58:a2:55:28:3e:45:
                    58:01:a3:03:2f:2c:33:9d:9e:b6:2c:d7:a2:6f:52:
                    45:1f:63:99:14:49:55:65:c7:7a:ef:1f:5e:eb:c7:
                    90:91:5f:e9:16:af:b2:15:ac:41:44:e8:d0:40:01:
                    2a:06:0c:45:bc:5b:08:bf:7d:82:68:df:b6:9c:5f:
                    72:65:71:78:69:b9:e4:5a:32:dd:cc:96:03:65:d6:
                    8b:13:4c:b5:1b:eb:3f:32:a3:cf:30:c7:4a:a9:64:
                    df:41:65:dd:29:14:9a:63:02:53:50:92:f6:14:19:
                    a1:80:2f:31:ee:ae:7f:e2:e9:69:25:ab:16:ef:18:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B1:C0:1B:69:9B:2C:5A:EA:42:61:18:AA:AA:EF:84:73:58:AD:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/bb8ae1b9-b42d-38d3-a87d-a8ccb503bb73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl

            X509v3 Authority Key Identifier:
                keyid:0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e2:d0:06:c3:76:a4:fa:58:55:2b:08:af:a0:c5:47:4b:34:
         0a:8d:53:ea:fb:46:a8:14:3d:bd:59:1e:63:4d:d9:d8:a6:8e:
         f0:4e:c7:55:48:fc:94:c0:a4:41:16:2b:73:4c:b0:ed:f3:ff:
         75:8f:74:c5:7f:71:e0:27:a4:6a:19:a2:c5:99:fa:f8:13:7b:
         e3:c1:e0:c0:b3:1b:c5:17:c0:d1:2d:5b:52:f9:b5:b1:88:47:
         79:9f:5e:ec:95:11:ce:f5:02:b1:76:23:1b:07:a0:c3:32:3f:
         19:e7:12:04:dd:aa:4f:5f:80:17:9d:78:6b:67:96:a6:b2:b3:
         1a:d3:63:8b:be:ce:fd:08:cb:cf:02:54:94:8d:1f:f6:f1:d5:
         67:8e:59:c0:d2:c7:12:e4:3d:20:a5:81:91:ff:88:50:e6:35:
         c2:e9:ed:ba:11:b6:e4:14:b8:43:c6:3c:d7:e2:f9:5a:69:d2:
         42:1f:3a:a5:df:0a:1e:82:d6:fa:73:53:6a:b5:14:97:5c:e6:
         79:bb:94:49:6f:1a:14:1e:01:52:d6:46:36:59:f6:5c:ce:56:
         ce:4e:ea:a9:b8:86:95:4c:43:ab:00:64:f8:e7:1c:77:b0:7b:
         fd:6d:6f:a2:6a:92:f8:b7:8b:1e:cc:63:54:a2:3d:9e:64:ae:
         9f:d1:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:33:18 2025 by rpki-client