Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
File:                     b7201278-097e-3b32-a4e1-96b53fb35fb0.roa (raw, json)
Hash identifier:          JOxHA42gJDz4rcN4VNsfNyy5EuYmBdmpPD8T3e94e7c=
Subject key identifier:   49:78:B9:5E:05:EB:56:0D:EE:17:90:CA:C2:96:EA:BB:A8:01:11:D8
Certificate issuer:       /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
Certificate serial:       010D0C9F4328584A8C70C4FEC0D8D4E75A329E80
Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     36222
IP address blocks:        23.138.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c4:fe:c0:d8:d4:e7:5a:32:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=c21c16db-9253-47f1-9c61-ec068137f43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:9f:7c:db:d5:ee:82:f3:16:86:60:29:af:
                    9e:8c:3b:e5:a6:d6:b6:8f:73:43:44:15:dd:e4:bc:
                    a9:77:a3:2c:79:6e:fc:61:28:af:4b:49:72:eb:97:
                    9c:5e:60:61:1e:8a:f9:a8:1d:b5:97:83:9b:a6:74:
                    83:d0:81:2e:ca:2f:a5:99:7e:bc:63:11:5d:75:38:
                    c1:2b:49:ee:65:ec:fe:33:41:ad:b5:47:7e:55:2f:
                    56:00:9f:a1:6a:aa:15:dc:97:f5:52:14:be:99:f9:
                    f7:7e:54:7d:22:8e:5f:b0:84:15:33:bd:6a:71:0e:
                    ae:30:f2:59:57:24:18:84:9b:66:57:b9:cc:23:ab:
                    1e:9e:cd:3a:bf:83:c1:48:0e:95:1e:fe:f9:fd:2e:
                    63:63:48:bc:cf:b2:24:72:89:4f:14:9f:f8:cb:ce:
                    a6:00:b2:79:65:42:db:20:c1:ea:d2:68:5c:60:ad:
                    21:14:0c:f7:38:63:34:28:82:3f:35:f0:b8:18:76:
                    2b:45:a8:32:1a:d2:bc:e3:45:ba:f5:d0:08:37:ac:
                    ce:e9:46:7e:c1:15:43:45:61:67:4c:42:a1:dc:a0:
                    03:9c:2e:9f:24:c0:dd:d9:6d:3c:45:e4:5a:ad:fc:
                    ee:e6:0a:44:3f:f8:3c:dc:90:8f:53:b0:c5:94:74:
                    e0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:78:B9:5E:05:EB:56:0D:EE:17:90:CA:C2:96:EA:BB:A8:01:11:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl

            X509v3 Authority Key Identifier:
                keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:21:a8:bc:d1:25:0b:69:bf:cd:13:f1:81:fa:30:3f:27:95:
         24:1d:e5:41:3a:10:78:66:c4:88:1f:fc:f7:53:bc:0a:ad:33:
         b1:86:ac:75:e0:1d:b0:31:e8:e7:0b:6a:b1:90:90:63:b8:0e:
         9d:16:34:f4:96:4d:dd:04:92:1b:aa:fe:e4:60:47:70:fb:4e:
         38:c5:cd:3e:a7:63:fd:41:9b:a3:66:1b:b4:c2:15:8f:b0:08:
         43:e3:36:75:fe:71:13:a2:fc:56:dd:1d:91:75:54:57:6a:be:
         3e:94:71:19:24:02:e7:72:3c:ee:98:ab:5e:f4:81:26:04:5c:
         41:98:d6:fe:fa:64:ae:06:02:1e:a3:c3:22:d1:cc:28:07:02:
         8a:3d:6c:99:35:0b:bb:1f:c5:fe:8f:aa:4d:71:89:b0:e4:c1:
         0e:e1:d0:ea:75:c0:96:b2:4a:22:d1:3a:df:af:fa:68:c1:ae:
         18:6b:69:86:ab:94:db:2e:dc:9a:37:2c:f4:d7:31:d6:00:85:
         4a:64:f4:17:10:38:74:65:c7:38:50:cc:c2:fe:e1:5c:26:7a:
         f8:51:02:23:ef:cc:65:61:4b:fe:70:04:bf:83:58:70:60:58:
         f0:e2:ff:50:c5:05:0f:66:c2:dc:f9:27:59:a9:21:f0:a4:b6:
         1f:70:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:49:47 2025 by rpki-client