Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa
File:                     246a9945-e728-367d-9f55-59504f6985c6.roa (raw, json)
Hash identifier:          pn2BzxnUDU5+88bwTI+taN2EgjCBWNKLOF8u2x5bTsQ=
Subject key identifier:   F0:A7:67:53:AE:19:3F:37:4A:66:C6:02:9B:9A:B2:E0:5A:FD:D9:35
Certificate issuer:       /CN=ad697a12-b25f-4a7b-8c14-097935c18e5b
Certificate serial:       010D0C9F4328584AB220D595234825D9CE433640
Authority key identifier: C4:09:D9:07:5A:4B:0E:66:CF:34:3D:CC:88:C3:80:97:80:4C:D5:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7029
IP address blocks:        23.189.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d5:95:23:48:25:d9:ce:43:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad697a12-b25f-4a7b-8c14-097935c18e5b
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=5e6b8c1f-5c26-4667-a2b8-8da2b6ed2c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:52:40:4e:45:c0:d6:f7:0f:98:7f:d1:6a:
                    45:ae:5a:66:47:59:31:4e:15:d3:4e:23:27:71:d4:
                    59:72:93:f6:9a:7a:d6:3b:07:ed:fa:14:ba:6f:cb:
                    20:0e:0d:29:86:8a:5c:b8:6c:70:2b:ed:1b:46:02:
                    fa:ad:74:9f:75:31:ff:67:d6:8d:3c:7a:b7:50:d7:
                    cc:1a:a2:8a:4c:13:6f:dd:15:07:42:66:1c:f1:5d:
                    e7:29:02:b2:88:42:01:67:da:94:e2:f9:2c:50:0e:
                    2c:a0:e6:b8:1b:64:a2:ff:ba:87:a8:cc:16:d2:5c:
                    b2:31:d0:62:18:f5:bc:ac:ce:e9:b9:a7:14:31:58:
                    fe:3b:93:e5:47:1f:40:3f:0f:56:d4:0f:4e:70:1f:
                    b2:fb:01:8c:31:45:2f:e1:08:db:f5:e5:f4:70:d0:
                    98:29:3a:a3:f7:83:9c:6b:31:a4:26:0b:49:80:94:
                    ee:a0:9c:ec:ad:43:14:c6:df:1c:4c:20:04:07:e8:
                    06:37:1d:08:72:72:81:03:cb:3a:2c:fa:8c:30:b8:
                    20:1f:36:c4:75:8c:ab:e0:da:a1:66:be:30:cf:d6:
                    3e:8d:b7:f8:f8:0d:f5:9d:cf:cd:16:71:4f:49:fa:
                    83:27:05:72:3f:4b:7b:a8:fb:f2:97:6b:98:58:68:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:67:53:AE:19:3F:37:4A:66:C6:02:9B:9A:B2:E0:5A:FD:D9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.crl

            X509v3 Authority Key Identifier:
                keyid:C4:09:D9:07:5A:4B:0E:66:CF:34:3D:CC:88:C3:80:97:80:4C:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:66:5d:64:30:01:a6:74:5e:3b:a6:4f:31:e1:16:22:1b:38:
         01:8a:97:19:de:71:7f:06:84:d7:c9:fa:69:0e:ba:ef:45:46:
         ba:b0:5e:ab:d2:df:ed:1c:9d:05:a0:ff:3c:1f:8e:69:42:db:
         fb:0a:38:39:f9:73:41:30:0a:6d:f0:e8:2b:ea:63:23:3c:22:
         eb:e0:45:f8:bd:6f:88:2e:d3:c8:b6:89:c9:6a:74:12:28:34:
         3f:2d:5f:a6:b6:38:39:98:90:d3:d6:f5:55:54:94:a8:32:e1:
         3c:2c:cf:2f:e7:5f:44:03:43:36:b3:d9:62:f7:45:bb:64:af:
         22:5c:14:5b:c3:3c:c9:3a:ab:2c:a0:86:c9:45:c2:dd:e9:e0:
         b4:ed:b4:59:26:1e:2f:6a:41:9d:ef:fc:5d:a1:c2:62:94:e7:
         07:37:07:64:72:80:7f:7c:73:e8:a5:bf:f7:9a:b3:d8:73:57:
         15:b7:e7:a2:17:a3:43:a0:28:80:82:e4:2b:e7:f3:d0:f4:1e:
         31:df:15:00:9f:2d:23:df:b8:73:16:a5:0a:35:e2:b6:20:5a:
         0f:99:4e:a4:ae:bc:de:e2:63:2d:37:93:90:78:5e:44:cd:5f:
         5c:15:5d:cb:c9:fe:5c:89:10:aa:f7:10:ae:f0:17:91:7d:e6:
         00:f4:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:13:08 2025 by rpki-client