Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/f55cf5a2-6e90-34bf-b706-48a43b25be30.roa
File:                     f55cf5a2-6e90-34bf-b706-48a43b25be30.roa (raw, json)
Hash identifier:          lDBR68eo+VAhME8bgHb1H6uvEiOTcQj8Za8Y/Z5lT/s=
Subject key identifier:   28:85:34:93:58:0E:9D:22:8C:D6:16:A1:B8:5E:7F:EB:A5:15:65:ED
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584A7FE0926DB2B642E8F78BDB00
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/f55cf5a2-6e90-34bf-b706-48a43b25be30.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     62711
IP address blocks:        23.175.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:92:6d:b2:b6:42:e8:f7:8b:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=c00d5ab1-2eb7-47c6-8f56-6c8bfef020f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:b4:9c:df:cf:42:bb:b1:d8:f2:f7:0b:13:
                    e9:a4:d5:38:1f:f2:2d:9b:18:e8:a4:32:20:b6:82:
                    8f:fa:6e:d8:16:c7:55:65:13:f8:19:ac:7f:cc:8c:
                    be:ec:14:75:7b:46:24:a4:4e:e5:53:67:e4:2a:3e:
                    75:8f:cc:b8:d8:55:3d:d2:e9:31:cc:d5:a7:bd:1f:
                    fb:b2:d0:53:d5:59:77:20:2f:c6:d7:ed:b3:22:fe:
                    f6:30:c3:82:8a:6e:68:ac:4d:03:cf:85:af:f2:75:
                    e1:a9:68:6a:bf:07:b1:31:d8:bb:8b:78:f9:db:a5:
                    21:b5:7e:a4:18:bc:d1:6c:f6:76:ee:d3:82:e7:fc:
                    85:e1:bd:65:cd:9e:fd:0c:2e:05:79:84:b7:a3:8c:
                    5a:b7:2a:28:6a:47:92:07:ac:2b:98:f9:6b:13:7e:
                    ec:e8:f2:20:5e:c8:e7:9e:61:f3:f8:ac:fb:59:9e:
                    98:0f:50:8b:8f:53:e8:06:1f:4d:83:15:94:4d:bc:
                    cc:8f:1b:ca:35:82:c2:83:32:df:b1:9a:84:4f:68:
                    eb:ea:1c:7f:04:58:35:aa:c4:5a:74:1d:4f:c8:26:
                    e5:18:6a:00:1b:a2:af:67:d0:51:c6:b7:b6:4e:ad:
                    48:3b:e1:77:e4:36:ed:f1:29:83:53:f8:24:9d:30:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:85:34:93:58:0E:9D:22:8C:D6:16:A1:B8:5E:7F:EB:A5:15:65:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/f55cf5a2-6e90-34bf-b706-48a43b25be30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:53:3b:22:6e:8f:f9:66:df:ab:c7:b4:37:30:d3:e5:e8:a5:
         47:05:83:7c:c2:23:f8:74:2d:c9:7c:e7:ba:3f:ea:0c:7a:6b:
         33:76:dc:36:c9:8d:0a:77:db:17:55:78:a5:f4:53:9d:b2:bf:
         91:15:6a:c2:b4:6f:71:e2:9d:5d:57:df:9a:67:56:67:2b:d9:
         98:25:90:f3:c0:28:f6:4c:9a:c9:3a:84:c9:cc:97:26:af:09:
         67:38:ee:01:82:2c:67:2c:42:a4:16:6b:fe:f0:99:60:6d:dd:
         56:8e:eb:01:25:be:e6:70:f5:29:6a:bf:8b:15:38:e9:79:96:
         d7:cd:3f:33:16:7d:9c:ff:30:2a:78:62:ae:6a:80:90:fb:a9:
         fe:57:2f:0c:9e:7c:cd:26:2d:d7:7f:f0:a6:75:8a:28:cc:49:
         7c:54:79:1b:2e:9a:bd:94:59:79:90:3f:8a:6d:71:b6:e2:54:
         04:eb:19:33:36:12:b9:c2:00:95:f0:04:a5:15:43:5b:8f:7e:
         64:7e:38:ac:e3:a9:1b:a0:54:a9:01:1f:58:6f:98:90:c8:28:
         03:df:78:04:6f:5f:0a:25:86:78:43:38:a9:92:fb:a8:a2:9d:
         f7:c1:6c:f1:79:48:98:fb:bb:28:9f:32:92:60:82:f7:10:fc:
         30:28:b2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:08 2025 by rpki-client