Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/07599d84-222c-3f58-943c-147f5237adaf.roa
File:                     07599d84-222c-3f58-943c-147f5237adaf.roa (raw, json)
Hash identifier:          vyMh9/8nXWfw1XIdBlvxtAkbk7q5kIH+P+LauZgo76g=
Subject key identifier:   88:B2:3C:D3:CE:89:37:45:EB:F3:24:DA:97:88:DB:F2:C0:06:8F:26
Certificate issuer:       /CN=e0010d92-35a7-4dba-807b-0f229b3e2e50
Certificate serial:       010D0C9F43285849E2253F7B1092954DDAC78C00
Authority key identifier: A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/07599d84-222c-3f58-943c-147f5237adaf.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     400859
IP address blocks:        23.189.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:3f:7b:10:92:95:4d:da:c7:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0010d92-35a7-4dba-807b-0f229b3e2e50
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=80231eeb-0a1d-4b8f-87fe-51664840b291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:38:68:43:d9:4c:11:58:31:a5:4a:d8:c5:bd:
                    a4:dd:e1:77:7e:5a:b3:8e:d3:24:c4:69:ac:97:52:
                    13:06:e7:b3:da:19:fa:43:58:ec:a9:96:da:35:2f:
                    60:5d:be:4b:c4:a8:93:1f:42:9b:b4:39:32:32:62:
                    42:4f:11:ed:b6:f6:17:19:46:4d:15:62:15:ef:0d:
                    61:28:5c:d4:f9:9d:88:ce:be:f8:e4:cc:76:74:31:
                    ff:0d:ba:12:05:da:e4:66:d6:59:99:ee:82:87:32:
                    d9:09:22:5c:f2:52:c9:94:22:ff:69:70:a7:07:59:
                    7c:9f:3e:8f:c2:27:66:f3:cb:5b:48:8f:6e:84:32:
                    3f:67:9b:1d:2e:89:17:19:22:34:35:d3:45:79:c1:
                    ee:02:bc:04:c7:48:7a:31:b0:01:fc:0a:a3:ac:d1:
                    2d:a1:9d:5d:1b:97:d8:7c:38:02:25:a7:0a:c4:14:
                    b6:a8:b6:70:c2:75:97:ed:91:09:a6:ee:51:c6:b4:
                    21:59:92:c0:5d:3c:c4:99:ba:3e:e6:40:cc:00:82:
                    ff:5a:99:ef:5e:5b:0c:5c:c6:e2:20:95:c6:06:d9:
                    38:ee:34:d9:23:19:da:b7:dc:f9:60:b8:81:4d:64:
                    85:56:3d:83:14:4b:24:58:86:5f:78:fa:ec:9d:02:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B2:3C:D3:CE:89:37:45:EB:F3:24:DA:97:88:DB:F2:C0:06:8F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/07599d84-222c-3f58-943c-147f5237adaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl

            X509v3 Authority Key Identifier:
                keyid:A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:88:7d:49:25:67:94:7f:a5:91:48:68:f4:03:28:f0:7c:64:
         fb:38:cf:81:72:e0:a7:11:58:47:48:73:aa:4b:19:e5:23:f8:
         2e:80:93:ef:4c:0d:a2:a8:c2:80:f7:ef:6e:32:2d:b9:10:1a:
         5b:af:4f:44:ea:50:be:66:be:34:af:fb:8b:3c:56:50:2b:33:
         5c:06:b5:97:00:ba:d4:86:b8:a1:c7:3b:a5:05:3c:1c:41:5f:
         44:7a:7f:56:ff:3f:6e:26:15:e7:58:ad:c7:c2:17:ab:45:dc:
         e0:d2:f0:3f:d0:ec:d0:39:b7:c6:9a:b5:98:90:ba:32:ef:14:
         6e:43:e0:f8:22:51:0f:3c:df:60:d1:7a:54:3a:e0:91:6e:4f:
         2d:56:bb:88:cc:b1:95:68:cb:1b:d2:59:d5:cc:dd:8a:b4:5b:
         f1:63:7e:b3:11:d6:85:88:59:31:8e:7b:6c:6e:8e:89:57:e3:
         40:db:07:bd:f4:92:6b:26:c3:6b:f0:2c:9c:3c:1a:b2:d5:e0:
         3c:80:72:7d:9e:9c:93:3f:d1:b5:71:c9:07:55:69:29:2f:62:
         39:b8:d4:c7:34:e0:fb:7d:c3:fe:b9:ec:34:c8:5e:9b:99:84:
         89:4b:1a:c2:e6:b3:ed:8f:64:f6:f6:76:2a:6b:62:ee:21:17:
         09:3b:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:14:29 2025 by rpki-client