Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa
File:                     3f25a7a7-5bbb-336a-a266-855eadcb523f.roa (raw, json)
Hash identifier:          I65hCiorn8gpEBMjeMfNvpsm4WTyK9GbSQ6oTGoeE+E=
Subject key identifier:   A9:9A:5E:D3:08:5E:89:DA:B3:7E:A8:78:A9:B1:13:13:12:64:D3:36
Certificate issuer:       /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
Certificate serial:       010D0C9F4328584AB4EB7700A7A2A10858113CE0
Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     16611
IP address blocks:        23.153.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:77:00:a7:a2:a1:08:58:11:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=4820fc89-41eb-41d3-a676-f33dc6368bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:cd:5f:df:d1:cc:cb:56:74:ec:3e:46:11:
                    98:6e:c5:f1:2f:bd:6e:ab:e1:07:6e:f9:25:eb:7b:
                    b0:bc:06:d8:8c:ee:af:36:20:22:46:bd:cb:69:d1:
                    0b:8f:40:67:2b:0a:86:3c:42:40:51:49:16:85:33:
                    7b:90:1c:47:56:fc:f7:83:81:76:84:53:de:43:1d:
                    99:42:b1:92:ee:7c:21:9d:7e:bc:be:c8:71:07:af:
                    50:3a:9e:02:fb:2c:30:fd:cf:d5:cc:97:7a:11:b7:
                    f9:56:a8:c0:74:c0:57:1c:4d:bf:b3:da:8c:42:56:
                    d5:7d:4a:09:15:80:ca:ed:2c:80:50:20:4e:6b:82:
                    fc:c7:96:07:95:34:17:44:e8:1c:a2:25:a3:ce:26:
                    96:83:c2:98:8f:90:65:19:05:85:83:9d:94:22:6d:
                    c8:6c:90:e3:a6:15:ee:e0:ac:e5:75:73:f4:f0:38:
                    a9:b3:cf:56:46:9f:d8:e3:9f:b3:89:c7:f3:44:04:
                    be:74:cd:cc:9a:8d:15:c0:9b:5e:59:8c:d9:e3:9d:
                    11:11:62:3b:ce:00:77:84:af:70:87:48:1c:cd:a0:
                    bb:5b:d7:2c:9c:d0:67:c4:5d:ba:36:10:6c:83:8c:
                    89:d3:38:e5:d1:99:8d:c6:35:c7:55:72:f4:09:67:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9A:5E:D3:08:5E:89:DA:B3:7E:A8:78:A9:B1:13:13:12:64:D3:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl

            X509v3 Authority Key Identifier:
                keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:09:1d:1e:81:ef:18:f5:f3:4f:56:76:94:84:8e:e9:62:2e:
         41:6f:a9:80:62:94:f5:e2:44:c9:6d:e9:49:fe:fa:ee:d2:f2:
         63:c0:7a:5b:9d:56:f6:dc:b2:a4:08:b5:1f:09:0b:4a:ef:8e:
         97:7f:a6:0e:7f:43:64:39:79:24:56:69:ff:c3:fb:85:0d:10:
         7d:b7:57:97:1b:6b:e2:4d:18:a0:3c:ff:13:d6:3d:83:c5:2b:
         e0:78:4a:ef:b5:8f:d3:f2:0a:cf:ee:d8:b7:5f:6c:d5:68:c1:
         f7:36:70:7f:48:e3:20:d2:59:11:4d:d7:68:1c:5f:a4:4a:c1:
         64:d7:fc:b6:2d:1c:53:6c:c8:70:dd:07:2d:58:70:2a:5c:9b:
         8b:8b:6e:f6:e4:f0:be:6b:75:72:02:13:50:85:f5:5b:bc:76:
         4b:82:6b:cb:88:2a:48:76:58:7b:5e:71:f3:89:35:19:57:01:
         97:43:b2:83:c3:07:bb:61:13:3b:cf:33:31:4a:04:42:39:e5:
         45:ed:30:dd:b6:1d:90:01:3f:f7:b3:af:22:a2:cb:0f:7a:aa:
         2f:25:29:74:dd:0c:89:b4:e9:04:39:3f:1f:27:33:44:f8:ea:
         92:43:03:26:c7:f9:90:85:42:9f:e0:52:4c:b7:33:dc:9f:28:
         38:c7:6a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:38 2025 by rpki-client