Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/44c4a001-50eb-39f6-b72b-71615918d657.roa
File:                     44c4a001-50eb-39f6-b72b-71615918d657.roa (raw, json)
Hash identifier:          0hcDmSHP97jowCuSjRn+tyPhEf0jBprKywGFKPDWxPM=
Subject key identifier:   FB:78:70:5A:A1:27:E8:01:D8:0C:13:FF:9B:35:46:8F:86:88:D7:43
Certificate issuer:       /CN=fc019755-a466-4511-8e5f-83781d1aca46
Certificate serial:       010D0C9F432858497DA4752525F32FEA24143A00
Authority key identifier: 84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/44c4a001-50eb-39f6-b72b-71615918d657.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        23.170.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:75:25:25:f3:2f:ea:24:14:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc019755-a466-4511-8e5f-83781d1aca46
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=e2ab15c7-9082-437e-9e6f-eb1bb3f3784f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:2d:e9:70:4f:db:56:bd:2d:35:d2:4c:1a:
                    d1:c8:d3:31:8d:aa:60:9b:85:5e:0d:31:46:71:74:
                    ae:59:24:c1:b1:dd:f2:6a:f1:85:ff:9c:52:1b:b4:
                    09:0a:a8:79:aa:13:aa:85:e2:d2:db:56:10:65:7a:
                    e6:3d:f8:cb:cb:36:f6:7a:81:c8:d3:81:da:d4:99:
                    8d:7d:27:d8:b3:6b:09:79:cf:4e:0b:fa:2e:a1:bd:
                    70:11:23:7a:8e:c2:6f:8b:da:a1:4e:a3:09:38:94:
                    f0:a5:74:d8:fb:ca:01:77:22:c7:db:76:67:8f:ec:
                    dc:eb:8d:f2:83:c6:b8:0e:c3:81:68:69:7e:d9:c3:
                    06:56:2b:38:41:c6:bc:08:8c:88:6d:d3:c2:c5:56:
                    5f:d8:8a:32:b1:ec:57:1a:2d:95:25:de:b2:1e:8a:
                    c4:96:f0:c6:a9:2f:84:16:ed:fa:fe:d3:11:69:a8:
                    92:16:c1:fd:4b:9b:93:93:1a:36:0e:09:f4:bb:ca:
                    ef:a2:bf:62:5e:70:8a:eb:38:2c:a3:5f:0b:54:d7:
                    60:0b:37:60:a3:e9:f5:79:2d:be:b4:96:ed:35:89:
                    ea:0c:23:4a:b6:9f:99:05:24:f5:ed:c0:73:d4:78:
                    e0:8a:c6:cd:70:c6:de:f6:17:b1:1c:ba:b9:38:17:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:78:70:5A:A1:27:E8:01:D8:0C:13:FF:9B:35:46:8F:86:88:D7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/44c4a001-50eb-39f6-b72b-71615918d657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.crl

            X509v3 Authority Key Identifier:
                keyid:84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3d:14:6e:78:63:29:9f:39:13:94:92:6b:dd:49:49:55:b7:
         9c:48:60:86:1b:5d:d6:b4:53:23:a0:b5:e9:cc:2f:22:33:cd:
         d6:ba:22:48:d7:bf:5b:d7:04:6d:06:63:30:14:29:57:1c:60:
         43:60:43:aa:64:e4:9e:d0:82:2e:3e:89:a9:5f:87:ba:67:ff:
         25:82:24:e5:12:5d:c4:6c:c0:33:bf:c9:09:95:cf:49:d8:27:
         11:15:2d:34:84:cd:35:f6:f6:f7:16:d4:d7:21:e3:1a:ab:7c:
         38:56:ed:56:b5:9d:6a:a0:04:0c:3a:4e:e1:4c:90:2a:88:28:
         25:08:0e:a7:17:2d:48:fa:5e:d7:ac:6a:41:66:ab:4c:54:ff:
         0e:67:c6:b0:5d:3a:a5:22:80:63:c0:01:d0:ad:89:4c:1c:6e:
         47:a9:1f:32:b3:ca:47:f8:53:aa:4d:ea:ae:8d:ea:bf:52:ca:
         9e:3e:ea:6c:bc:c0:4b:9f:02:e8:0d:10:3f:57:3d:17:fd:43:
         5c:11:e5:19:1d:55:92:16:d3:04:33:b7:eb:2b:d4:52:e6:36:
         76:96:64:22:00:65:f0:ff:65:ec:c2:5d:a8:0a:8c:50:94:8d:
         bb:3b:11:8d:a0:70:2c:6b:5f:11:fb:44:98:13:17:17:ef:44:
         1b:c6:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:00 2025 by rpki-client