Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/a7c2741a-0d35-30d4-aa56-4f60a0f63049.roa
File:                     a7c2741a-0d35-30d4-aa56-4f60a0f63049.roa (raw, json)
Hash identifier:          rJipqUbg5YlLnMdn4KGYXHkxtqLs/xqVVh+3nGekfa4=
Subject key identifier:   0F:9C:FA:CD:29:AB:96:AF:DC:08:76:EA:A7:97:11:83:C3:76:F7:07
Certificate issuer:       /CN=35241669-57c3-4f1d-8e12-d32455951379
Certificate serial:       010D0C9F4328584A2B7E2289DF2A15C7F11C62A0
Authority key identifier: 8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/a7c2741a-0d35-30d4-aa56-4f60a0f63049.roa
Signing time:             Thu 12 Jun 2025 19:34:40 +0000
ROA not before:           Thu 12 Jun 2025 19:34:40 +0000
ROA not after:            Wed 10 Sep 2025 19:34:40 +0000
asID:                     63023
IP address blocks:        23.181.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2b:7e:22:89:df:2a:15:c7:f1:1c:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35241669-57c3-4f1d-8e12-d32455951379
        Validity
            Not Before: Jun 12 19:34:40 2025 GMT
            Not After : Sep 10 19:34:40 2025 GMT
        Subject: CN=8d0824fa-08de-466b-b216-533bcf14dde8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:65:f6:a1:a4:33:b8:7b:7e:43:13:8d:08:
                    cc:d2:0a:fa:01:e9:57:40:37:64:56:a1:c3:53:cf:
                    a9:48:a7:77:12:72:29:37:b7:cb:c7:8c:5d:c4:a1:
                    e5:a1:9d:3e:91:36:7e:96:87:07:1b:c8:8d:87:84:
                    60:02:fd:62:93:9b:4f:90:44:5d:6f:83:71:e8:86:
                    f6:e1:bb:84:e5:b4:1a:d4:95:ff:6e:03:a7:f6:21:
                    1f:d9:fe:be:e9:82:1d:c2:a6:12:92:fd:8c:e7:1d:
                    48:79:71:3c:10:4b:75:bb:5c:71:e4:b1:c3:ff:85:
                    40:f4:6c:cb:e7:0a:09:88:04:ae:c0:4f:57:06:4b:
                    41:cd:ff:7d:17:ed:5f:e1:63:cd:39:e5:b3:7a:a4:
                    d7:e6:c9:f5:66:d0:95:d9:48:be:d0:d6:0e:ec:92:
                    92:3b:9a:1d:58:ea:8e:0e:c1:92:39:5f:cd:b9:fe:
                    ef:3a:c0:15:c4:42:14:ed:e2:52:72:e3:fb:df:81:
                    ad:da:3a:5c:80:c7:af:b1:45:25:df:40:78:33:c1:
                    17:eb:fc:ae:a1:f0:39:d8:8a:32:2b:f9:20:ee:eb:
                    79:e4:74:ec:a3:bb:44:01:5e:b2:c4:d6:1d:c6:57:
                    79:b5:50:e9:e1:b4:48:eb:cc:f4:5d:28:a7:47:14:
                    92:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9C:FA:CD:29:AB:96:AF:DC:08:76:EA:A7:97:11:83:C3:76:F7:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/a7c2741a-0d35-30d4-aa56-4f60a0f63049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl

            X509v3 Authority Key Identifier:
                keyid:8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:25:da:4b:ac:6c:af:ae:63:32:ed:de:7e:d8:34:26:c3:84:
         ae:f3:63:36:ea:e4:26:06:d4:8e:62:7a:36:0a:a7:23:72:25:
         b8:82:2a:44:ba:c8:79:e5:af:52:5d:13:6c:93:3d:44:02:4d:
         d9:80:b4:70:88:a4:b8:2c:bb:6c:69:a3:a6:54:86:7e:d3:7d:
         6a:f3:35:0d:5d:a3:09:cc:a1:bc:40:7d:74:3f:24:22:7c:a7:
         49:5a:ba:2c:9e:47:1d:e4:97:96:23:33:27:1e:68:60:57:f0:
         70:33:69:d6:3e:ff:96:cc:c3:30:2d:ba:43:3e:53:eb:6c:38:
         25:98:91:70:a3:70:fa:bc:09:03:1d:41:c1:c2:c7:7c:ee:aa:
         da:3b:52:70:2e:85:ff:c1:00:7d:a1:ba:10:5a:59:2d:f1:f3:
         d4:92:42:ec:35:55:3a:81:04:7b:01:8b:54:3e:f9:c8:e2:e3:
         6f:0f:12:c2:8e:c2:bf:23:bf:cb:f4:34:37:5c:37:6a:b6:e5:
         1d:6d:7b:56:a0:35:0c:9f:cf:c8:28:a0:76:d0:b6:5d:8a:43:
         f7:74:5a:cc:72:f1:c3:2a:f8:24:0a:9e:d8:5d:35:80:55:18:
         92:25:d0:91:ea:01:d5:11:88:31:df:bb:7c:5d:66:00:8d:61:
         85:fd:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:56:03 2025 by rpki-client