Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/2949f7b5-2624-3ceb-b76a-3f711bb78bc6.roa
File:                     2949f7b5-2624-3ceb-b76a-3f711bb78bc6.roa (raw, json)
Hash identifier:          BTvE7KzIdxOkg2MZp4sEPXMdUJ9aRWEW2Fe6sULZ2gQ=
Subject key identifier:   54:C7:F0:76:C3:21:D8:74:77:31:57:59:52:EF:CA:CB:A2:25:73:1A
Certificate issuer:       /CN=c5c851da-daf3-4388-8104-40baa3dc3939
Certificate serial:       010D0C9F4328584A0C0569DAB2E95B4654744700
Authority key identifier: A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/2949f7b5-2624-3ceb-b76a-3f711bb78bc6.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     23459
IP address blocks:        23.176.216.0/25 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:69:da:b2:e9:5b:46:54:74:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c851da-daf3-4388-8104-40baa3dc3939
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=06e56741-9e74-4228-a968-c62162720c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:8c:7b:fc:4d:ce:65:98:d8:35:36:62:73:
                    20:15:de:7a:d8:90:30:1b:9a:26:3c:ce:8b:4b:9b:
                    c0:60:65:d5:af:c6:70:90:b1:92:ea:8a:bc:33:d0:
                    3f:b9:cc:73:67:eb:da:16:30:a7:7e:d3:32:f7:0c:
                    3d:b1:8c:ae:a7:54:06:c8:37:8f:01:36:8c:7e:f1:
                    3b:3b:d3:2f:69:5f:0f:0f:8b:be:07:c2:f7:69:28:
                    00:05:f7:79:fe:51:cc:13:c7:97:15:c4:7e:08:95:
                    fa:88:36:9d:8c:e4:ba:f5:47:9c:bb:73:6a:59:24:
                    2e:3b:3d:38:5b:d6:cc:5b:8e:8e:d4:1f:ae:23:f0:
                    55:33:23:aa:52:91:22:8f:e5:9a:28:02:4f:89:59:
                    f3:c1:75:1f:6a:6e:86:c9:75:b2:92:be:4d:df:23:
                    5d:da:03:b5:47:08:a5:b5:4f:30:25:ff:15:de:ce:
                    f6:76:b8:4f:10:7d:89:7d:59:f2:e8:99:6d:e1:67:
                    a1:6c:df:9a:16:29:5b:70:93:06:f6:ae:d9:4e:9f:
                    68:46:ad:a3:93:b0:44:7c:06:c0:49:51:f0:a0:cc:
                    ea:75:78:dc:c0:05:6a:d4:bc:fb:bf:00:86:19:dd:
                    6a:db:bc:5d:10:bf:23:b5:2a:36:9d:91:d6:fb:13:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C7:F0:76:C3:21:D8:74:77:31:57:59:52:EF:CA:CB:A2:25:73:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/2949f7b5-2624-3ceb-b76a-3f711bb78bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.216.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:7d:c3:ff:ae:8e:d4:2c:4f:1a:82:2a:db:0f:15:b0:ac:17:
         66:48:a6:9b:07:68:e9:20:89:92:10:95:ab:cb:2d:7c:6e:d5:
         c2:77:04:5e:49:25:59:d7:94:8a:78:3e:50:5e:a6:cd:1a:85:
         36:bb:d1:04:6c:4c:bc:e0:d2:60:35:c2:be:58:f4:cd:aa:f1:
         8d:23:af:6d:be:c7:68:9f:d2:d1:55:df:7e:de:a3:73:36:1d:
         77:fe:d8:54:f1:2e:48:ec:de:7f:33:b4:2f:20:bb:cb:b3:e5:
         4b:ac:2a:ee:e5:6b:38:a4:b3:11:12:8e:c3:28:fc:bc:c6:98:
         03:99:b4:f0:70:4e:16:bc:96:81:0b:15:c9:8a:08:e2:d3:77:
         10:85:8b:50:28:af:3f:e5:5d:c1:d4:a3:0c:6e:a0:73:7d:9e:
         ec:d0:06:f9:7d:70:17:01:d6:32:0f:a0:6c:ae:8c:27:f7:68:
         70:ae:f6:0d:45:30:ef:2a:eb:5f:11:69:f2:61:fb:ab:fa:92:
         41:1b:33:7e:ae:25:28:19:0c:4c:2e:6c:48:5d:b1:a2:bf:fa:
         7b:79:1c:dd:94:bf:41:13:2c:9e:e5:7e:81:61:c9:f6:1d:13:
         a1:73:ed:86:98:2d:ed:62:3e:b0:f0:fc:08:cd:c3:f5:da:bd:
         95:29:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:47 2025 by rpki-client