Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/8fc36576-dd0b-3abf-a62f-da4c5350d091.roa
File:                     8fc36576-dd0b-3abf-a62f-da4c5350d091.roa (raw, json)
Hash identifier:          WhuE6UCGNJ+nzIKBTnoBIRAiKRkDUo+EG7aFqelhbp0=
Subject key identifier:   95:AC:95:34:F5:75:94:C1:97:CB:73:7B:64:25:F5:F0:0B:B0:40:EA
Certificate issuer:       /CN=d549bcbf-712f-4ddd-b680-cd2230986019
Certificate serial:       010D0C9F4328584A9D6852D68F93455606EC6860
Authority key identifier: 92:F2:79:24:17:5C:3D:40:9D:CA:0F:7E:A7:97:AD:46:13:6E:73:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/8fc36576-dd0b-3abf-a62f-da4c5350d091.roa
Signing time:             Wed 23 Jul 2025 14:52:52 +0000
ROA not before:           Wed 23 Jul 2025 14:52:52 +0000
ROA not after:            Tue 21 Oct 2025 14:52:52 +0000
asID:                     36002
IP address blocks:        23.141.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:68:52:d6:8f:93:45:56:06:ec:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d549bcbf-712f-4ddd-b680-cd2230986019
        Validity
            Not Before: Jul 23 14:52:52 2025 GMT
            Not After : Oct 21 14:52:52 2025 GMT
        Subject: CN=92e7a895-b9a3-462b-9d45-f2057cdcce76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:ab:a3:8b:6e:ce:cc:64:9b:7f:b8:97:4f:
                    b5:73:13:c8:20:da:21:9a:d8:16:cf:0f:cb:c0:a2:
                    d7:ce:43:75:e1:d0:9b:27:71:ca:10:a2:8f:38:84:
                    41:be:5e:d2:a8:70:e0:e8:81:7d:d7:63:7f:82:77:
                    0d:6a:0a:ef:d4:2e:5d:cf:91:0d:f6:56:43:0a:31:
                    e2:a4:4e:4d:c4:1f:75:5b:c4:27:35:3a:12:1d:d7:
                    a1:0e:3c:18:28:b9:03:10:51:e2:48:8a:ee:bc:63:
                    98:00:2f:e5:0a:5c:55:86:38:d0:a9:34:84:79:19:
                    39:90:08:f5:04:4e:c6:a8:c1:ad:5e:1c:cc:39:7f:
                    12:cb:ce:a5:71:ce:52:79:18:55:4b:f8:14:61:d0:
                    d4:be:c7:c5:fa:f6:3d:75:17:76:60:b3:9e:f4:83:
                    01:95:51:00:31:a8:9b:1b:8d:a9:34:ff:ee:13:3c:
                    c0:ed:ab:69:11:94:1a:60:66:bd:a2:ac:90:90:86:
                    0f:21:e3:e2:51:45:6e:b8:a4:60:7d:16:8b:7f:51:
                    4c:11:e7:17:68:d6:81:dc:28:cd:d7:96:dd:04:30:
                    10:3f:04:a3:6c:4f:18:1a:73:24:bd:dd:a9:d0:a3:
                    08:7f:58:9f:79:3d:0f:1a:49:ea:29:b9:c4:6c:fc:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AC:95:34:F5:75:94:C1:97:CB:73:7B:64:25:F5:F0:0B:B0:40:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/8fc36576-dd0b-3abf-a62f-da4c5350d091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.crl

            X509v3 Authority Key Identifier:
                keyid:92:F2:79:24:17:5C:3D:40:9D:CA:0F:7E:A7:97:AD:46:13:6E:73:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:55:81:a8:8f:83:e1:8f:55:9d:d8:5c:64:ab:bf:c7:a8:36:
         72:a8:79:7b:2d:1a:ee:8a:c1:ac:38:5d:dd:29:e8:3e:f8:14:
         18:f5:5a:be:99:1a:49:0b:4b:a6:af:72:48:c0:b1:2f:33:48:
         00:17:79:3f:84:01:04:c0:72:25:be:08:7d:73:9e:94:d6:6c:
         f0:b0:cd:9b:06:2f:0d:3c:4b:a6:1d:a6:97:00:0f:ff:b3:3b:
         2d:78:51:9e:92:54:8f:fc:01:ea:41:e6:67:c5:b5:a2:56:97:
         4f:70:6d:4b:0a:1b:94:8c:fc:c0:54:44:5f:87:11:86:3a:8e:
         e6:1d:24:be:32:96:b0:67:da:38:72:57:05:c2:72:25:cd:a5:
         84:3e:8e:ae:87:cb:91:99:7a:59:82:08:f5:79:66:6f:50:c7:
         4a:be:d7:14:e1:dc:22:c8:2d:1e:91:6e:bb:f2:a0:b7:01:8d:
         79:dd:3e:d3:78:b3:7e:03:dc:f0:5f:73:4e:8d:eb:f6:c0:a8:
         69:63:c1:43:cb:1c:69:f8:e8:19:03:fe:bf:7d:49:39:2c:f5:
         a2:f6:fc:a8:1b:8a:41:f1:5b:4f:cd:5f:86:38:6a:f2:a6:72:
         49:a6:c0:c2:ff:e5:75:5c:f9:35:60:7e:fc:b0:2b:18:78:7a:
         6b:3b:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:52 2025 by rpki-client