Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51581d74-1057-4d4d-b9fe-739bace222fb/e2a94369-999e-3f6c-a8a1-7acb959f1449.roa
File:                     e2a94369-999e-3f6c-a8a1-7acb959f1449.roa (raw, json)
Hash identifier:          DOxDq8WmeY8Y45eOHbSAMGNpDj/xOhncElzo0rzolLo=
Subject key identifier:   1F:A3:41:CB:E7:DC:3D:17:C8:40:D8:D5:DA:2F:21:13:AB:6B:4D:A9
Certificate issuer:       /CN=51581d74-1057-4d4d-b9fe-739bace222fb
Certificate serial:       010D0C9F4328584A9900C5BB10781F2BCE7B9740
Authority key identifier: 51:CF:B2:3D:20:0A:55:AB:6B:FB:18:4D:00:B5:C1:A2:3B:83:C4:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51581d74-1057-4d4d-b9fe-739bace222fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51581d74-1057-4d4d-b9fe-739bace222fb/e2a94369-999e-3f6c-a8a1-7acb959f1449.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     59117
IP address blocks:        23.180.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51581d74-1057-4d4d-b9fe-739bace222fb/51581d74-1057-4d4d-b9fe-739bace222fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51581d74-1057-4d4d-b9fe-739bace222fb/51581d74-1057-4d4d-b9fe-739bace222fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51581d74-1057-4d4d-b9fe-739bace222fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c5:bb:10:78:1f:2b:ce:7b:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51581d74-1057-4d4d-b9fe-739bace222fb
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=678d53dd-76a5-49be-b17b-862736f0acfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:b4:0a:8c:3e:17:40:84:65:62:a3:d3:50:
                    fd:0c:74:7e:6d:24:27:8a:ff:e1:90:32:9b:20:14:
                    b4:92:ae:6d:73:d5:72:77:c4:05:b3:0f:f9:6a:6d:
                    bf:10:27:84:39:11:9e:d4:5a:c0:53:a8:0e:3d:11:
                    50:22:3e:9a:df:fe:f1:51:1b:b3:52:f5:46:9d:a2:
                    f9:d3:c1:f7:fe:d3:36:d6:57:32:60:a1:49:36:d6:
                    f2:56:69:56:07:50:ce:50:5c:ab:bf:ec:b1:bb:f9:
                    8d:86:bf:87:42:c7:a0:2e:aa:8d:b2:e8:12:18:98:
                    fb:0d:a7:71:59:b4:8c:52:5f:6b:8d:0f:dc:45:87:
                    62:55:3f:29:80:af:86:7a:38:67:c3:56:88:18:79:
                    e3:1d:fb:17:c6:df:e3:c6:b1:41:d1:a7:08:34:b8:
                    c8:e5:3f:41:15:f5:7e:75:ee:3a:e9:9a:3b:65:ec:
                    7b:f3:af:09:d3:c8:d6:5f:52:e6:86:5c:41:3c:e4:
                    73:10:ee:3d:3b:ae:a3:d3:9c:79:84:17:c2:f7:18:
                    31:d1:8d:e9:94:68:c4:09:62:a6:49:62:64:48:2a:
                    93:72:bd:95:76:c5:76:20:d4:ac:ae:1d:2d:12:4a:
                    bc:c9:b9:4b:36:b9:a8:d6:65:a2:85:ae:a9:d5:5a:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A3:41:CB:E7:DC:3D:17:C8:40:D8:D5:DA:2F:21:13:AB:6B:4D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51581d74-1057-4d4d-b9fe-739bace222fb/e2a94369-999e-3f6c-a8a1-7acb959f1449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51581d74-1057-4d4d-b9fe-739bace222fb/51581d74-1057-4d4d-b9fe-739bace222fb.crl

            X509v3 Authority Key Identifier:
                keyid:51:CF:B2:3D:20:0A:55:AB:6B:FB:18:4D:00:B5:C1:A2:3B:83:C4:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51581d74-1057-4d4d-b9fe-739bace222fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:4f:48:0a:8b:7c:01:3c:7e:b7:3f:cf:1e:db:22:a6:e7:
         f1:09:33:71:79:03:15:1a:f2:20:9b:6a:af:a3:07:bb:84:81:
         08:fc:9f:8d:b2:84:2b:e6:30:ce:c0:8a:a8:5d:6e:6d:f8:13:
         30:3a:bf:c9:9b:57:6d:c1:c9:56:30:07:d9:94:6c:3e:d5:49:
         33:2c:d7:fc:ff:2e:24:94:63:fb:66:93:15:f3:fd:f3:81:a0:
         ab:c1:7d:4d:07:a8:db:3c:c9:23:11:6c:9d:ae:f1:02:85:be:
         11:98:f5:db:71:b0:77:54:4d:36:a8:ac:4b:5b:5a:78:7b:55:
         5b:21:a9:bf:0d:6f:de:1f:f2:fb:6f:6a:40:d6:ea:22:25:88:
         59:e0:98:49:5d:65:5d:66:95:61:6f:6e:29:56:56:11:94:0d:
         5c:78:86:57:41:7d:f4:03:e8:88:14:e0:b2:35:ec:64:11:9a:
         4e:eb:06:01:e3:24:ba:2d:c3:29:a4:fd:72:00:80:ec:5c:23:
         4b:3a:61:77:38:f7:79:3f:5b:be:49:da:cf:c4:5a:44:e9:75:
         7b:fc:0e:ef:63:b3:ea:3e:81:12:5d:c1:fc:a8:31:47:d9:aa:
         82:ac:d5:01:68:13:ae:a0:7f:08:39:0b:0b:6b:11:b7:1b:0a:
         fc:71:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:46:15 2025 by rpki-client