Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa
File:                     7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa (raw, json)
Hash identifier:          vWFuioBJzJAW88GlDhiko8Du4LIHHTdZxEELfX3mc4I=
Subject key identifier:   1A:AF:05:6D:EA:22:5F:52:E9:D7:DD:B8:79:8F:9F:2D:A1:37:6E:86
Certificate issuer:       /CN=937e4376-b17d-4219-977d-431a97bf5b34
Certificate serial:       010D0C9F4328584A0C056D1BE4643C76F9C33B40
Authority key identifier: 05:25:1C:56:9C:6B:1D:B4:CD:12:A0:6E:26:CD:6E:B1:98:16:B5:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     401361
IP address blocks:        23.190.248.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/937e4376-b17d-4219-977d-431a97bf5b34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/937e4376-b17d-4219-977d-431a97bf5b34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:6d:1b:e4:64:3c:76:f9:c3:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937e4376-b17d-4219-977d-431a97bf5b34
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=76a0f922-7255-45cf-aba4-17102a2dbaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:fb:28:65:3a:6a:35:35:76:62:b9:61:ac:
                    61:c3:1f:ba:e3:11:e2:7e:5c:bc:dd:65:15:70:76:
                    51:de:82:96:27:44:bb:f5:fd:6a:1d:91:00:4e:43:
                    6c:50:03:e8:c5:34:74:b1:fc:9e:2a:f0:bb:1c:79:
                    7f:52:70:1e:73:f6:3b:d5:cc:7f:9e:53:eb:0f:cf:
                    a3:47:a3:6e:9f:c6:05:2e:82:65:86:e0:f6:72:2d:
                    b4:86:0f:3d:2b:63:69:6a:98:cf:59:38:9f:9b:31:
                    3c:7e:99:2e:32:80:ef:18:94:9f:9f:4e:64:a6:84:
                    a4:38:49:97:3d:c6:25:71:2f:e9:e8:23:17:9a:60:
                    86:0e:79:5c:03:e0:c3:68:a1:36:78:b7:84:01:c9:
                    c0:47:91:05:d0:76:b0:92:54:ec:7b:e6:5f:4c:ec:
                    b1:74:db:98:c9:e3:52:26:81:99:0c:a1:fb:26:67:
                    7f:e7:2a:f0:d7:a6:3e:8a:98:ae:3f:c3:24:d7:91:
                    ff:64:4c:25:c7:09:8b:02:a2:63:db:58:c7:98:cc:
                    5d:56:d4:38:97:ae:c0:e4:6c:96:09:46:43:d9:43:
                    7a:62:80:f3:0c:b5:6d:56:b3:fb:bb:f1:f7:a7:89:
                    52:9d:af:40:00:33:8c:8a:79:3e:02:8b:3d:64:7b:
                    9f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AF:05:6D:EA:22:5F:52:E9:D7:DD:B8:79:8F:9F:2D:A1:37:6E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/937e4376-b17d-4219-977d-431a97bf5b34.crl

            X509v3 Authority Key Identifier:
                keyid:05:25:1C:56:9C:6B:1D:B4:CD:12:A0:6E:26:CD:6E:B1:98:16:B5:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ce:cd:be:fc:1a:b6:45:15:6c:45:15:1c:e4:8a:1b:50:73:
         75:f8:7f:5d:6d:4d:70:02:b8:7a:ff:74:af:94:4a:2d:d5:a0:
         68:10:5f:a7:86:ef:db:7f:12:97:3a:68:ea:49:0d:5d:5d:60:
         ec:d9:5d:e5:07:c9:58:ee:fe:4b:9b:81:4a:89:d5:a2:85:48:
         7f:40:1b:db:b3:93:90:9f:9a:d7:af:bc:34:9a:72:e7:c4:3f:
         d1:b3:5d:32:cb:1e:75:eb:85:d5:84:fe:87:4f:88:5d:d2:b5:
         7e:d5:4b:1c:b0:19:10:1d:9e:70:04:08:d7:e2:0a:78:ed:d0:
         69:09:9d:d4:2f:eb:dd:c5:ce:e5:e8:48:0a:75:d6:51:21:59:
         3f:ce:38:98:86:67:0d:b0:a7:1c:8e:c6:21:48:63:0b:05:fc:
         1e:9b:17:c7:8b:7f:2c:e8:54:27:82:a6:0b:77:2a:f6:68:38:
         f5:ee:05:f0:77:bb:71:ad:16:a4:f7:4d:7a:f7:55:d8:91:28:
         32:83:95:12:45:1d:1c:6c:25:14:5f:d9:19:a7:d0:79:41:11:
         be:f8:c8:81:17:5e:e8:51:ad:e8:b6:79:fa:cb:73:9d:af:e9:
         1b:7e:13:a5:9a:ba:f5:9c:98:6a:5a:e4:a4:a1:6f:35:9c:a1:
         d2:b9:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:21:11 2025 by rpki-client