Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/0955c812-9743-3c42-a60b-5b297ff160cd.roa
File:                     0955c812-9743-3c42-a60b-5b297ff160cd.roa (raw, json)
Hash identifier:          cuvKw64xs10tk547C5+epOIMkxWbN565t/oO6SfQHLY=
Subject key identifier:   94:71:E5:30:28:5C:46:63:6F:B2:4B:EF:2B:69:3A:B1:8A:B3:80:0E
Certificate issuer:       /CN=371ab6b7-8872-4856-a33d-61dbefb13d34
Certificate serial:       010D0C9F4328584A8DD5F8924378595F465D8600
Authority key identifier: 79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/0955c812-9743-3c42-a60b-5b297ff160cd.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     11064
IP address blocks:        23.189.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:f8:92:43:78:59:5f:46:5d:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ab6b7-8872-4856-a33d-61dbefb13d34
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=c551feea-1120-4ac3-b47d-135d9f69c9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:c1:4e:87:bd:d1:fa:d1:29:d6:8b:12:cb:
                    ed:f9:bc:94:cf:1e:03:2a:9f:02:8a:19:c7:8e:50:
                    ff:bf:55:1d:4f:31:d2:93:90:c1:be:98:8c:91:d4:
                    36:e9:51:34:c2:7b:7f:c9:52:da:87:09:5b:23:43:
                    b0:6a:d3:24:2d:29:da:7f:ff:56:e3:c3:24:f0:8a:
                    fa:78:10:9c:e0:b4:54:75:4b:46:8f:94:27:f4:81:
                    1e:80:15:8b:22:99:dc:47:52:2b:17:79:fc:69:6d:
                    79:0d:1b:e1:fc:9f:18:f1:03:d4:41:43:88:7d:41:
                    6a:68:e2:ab:24:7d:e8:b1:e7:9c:90:fc:12:db:43:
                    ec:d9:57:36:55:20:97:b2:bf:1b:7a:4e:d8:86:b8:
                    7f:9e:9a:7b:1f:6d:76:a7:aa:92:65:c4:43:b7:e2:
                    b0:3a:86:ca:5b:68:5d:81:d2:75:be:06:d1:9d:ad:
                    5a:66:c7:31:11:6e:e0:a5:1e:a0:5e:7c:ba:29:5e:
                    cd:be:4d:17:67:b0:80:08:59:fd:da:55:57:51:d4:
                    1e:0a:71:aa:4d:b6:5d:44:73:88:0d:ba:d2:9c:9f:
                    c1:5a:11:1d:74:70:e4:1e:7c:dc:db:d8:30:de:d4:
                    20:a9:4b:3b:d5:19:37:b5:29:d8:54:70:56:2a:5c:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:71:E5:30:28:5C:46:63:6F:B2:4B:EF:2B:69:3A:B1:8A:B3:80:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/0955c812-9743-3c42-a60b-5b297ff160cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl

            X509v3 Authority Key Identifier:
                keyid:79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:de:ff:6b:48:e1:33:19:02:a2:30:70:63:86:94:b6:bd:fe:
         7e:cc:f9:1b:34:63:4a:a7:f5:54:80:f7:32:d7:4e:97:6d:38:
         08:f4:9b:48:5e:8c:0d:e0:a7:d4:63:b6:ff:97:4e:d6:72:a9:
         ea:c5:17:0b:5b:75:33:3f:c5:cd:68:00:69:af:7b:7f:93:3b:
         78:de:99:16:54:03:63:98:00:ba:37:32:b2:f9:6c:5b:18:36:
         41:d7:82:73:f2:fb:20:72:2d:fc:f2:14:7f:f7:18:d8:bb:89:
         3b:e6:63:cf:4c:bb:d4:a0:4c:6f:d5:63:49:f6:c2:0d:82:2b:
         ac:5d:84:08:fb:55:f7:36:3e:c5:c7:0f:f0:db:be:c7:5f:05:
         4c:40:ec:5e:d0:e1:2c:e1:88:e5:9e:de:a7:c9:50:89:dc:bc:
         d1:60:bf:08:09:a9:c0:54:93:65:47:85:22:79:39:56:ab:67:
         f5:3f:a6:9b:93:64:ae:a1:b6:b9:26:04:35:0f:07:55:db:29:
         d2:32:40:5f:95:6f:31:11:df:c3:1d:60:2b:72:f6:16:5d:37:
         be:9e:65:00:cb:77:a4:0d:9e:12:00:b9:a6:c1:99:60:40:5d:
         0c:7e:26:0c:58:e0:c5:86:0a:29:c6:60:77:84:93:36:be:71:
         8d:90:b0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:06 2025 by rpki-client