Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa
File:                     ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa (raw, json)
Hash identifier:          7NiOjffSi9aJE06eNM84USmz+VOWzY3vYnAYO8Se0VM=
Subject key identifier:   7D:AC:8E:2F:FC:00:B6:6A:6A:72:06:D3:CE:AE:F0:1C:A7:CF:20:36
Certificate issuer:       /CN=fc69a390-9be0-4f05-abc1-c3b9b00edda2
Certificate serial:       010D0C9F43285849D6FA4AC08F16CB336E176A40
Authority key identifier: 95:F6:E7:21:CF:42:50:B8:E2:CA:1D:09:29:1C:DE:AE:2D:32:B8:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     396877
IP address blocks:        23.183.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:4a:c0:8f:16:cb:33:6e:17:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc69a390-9be0-4f05-abc1-c3b9b00edda2
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=266b3423-1f96-4daf-8fd6-93c766a3b36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:84:92:00:32:21:ec:2c:aa:2f:58:ad:33:
                    f8:a4:75:bb:81:cb:e4:6f:5f:6a:82:7f:07:05:b2:
                    d7:47:bb:69:2a:f8:6c:b8:91:be:ab:17:bc:34:f9:
                    2d:90:64:8b:27:54:39:0d:90:52:84:fc:50:81:e2:
                    be:7a:2f:85:e0:2b:eb:0e:dc:f1:8c:93:50:ce:21:
                    05:7c:c9:3b:f9:1b:2c:fe:01:d5:2c:05:fa:74:83:
                    3e:12:12:68:fd:43:b9:7c:f9:9c:75:af:eb:99:aa:
                    73:4b:40:f5:2b:03:3c:09:0c:f7:ca:3c:cd:9c:58:
                    ba:5f:d0:9a:29:8c:3a:0f:ad:b6:e4:cf:e9:ae:0a:
                    5b:6e:1f:b4:10:9c:fb:d2:be:e5:1f:69:d7:13:e7:
                    c6:d8:3b:79:97:26:67:d2:cf:68:6b:08:c3:13:a9:
                    8d:9b:f3:00:3b:ab:e9:f2:c5:6a:68:5d:d0:b0:94:
                    90:73:c0:fd:5e:67:6b:1d:0e:d7:86:f7:55:fa:23:
                    21:43:c5:ad:40:30:ba:56:3b:ad:55:eb:ba:ed:fe:
                    e1:96:b1:d8:a7:80:af:b4:a1:ee:a4:e3:89:3a:97:
                    e8:73:33:6a:8c:be:80:d0:0b:1e:8a:9c:1f:5f:cf:
                    2e:72:2e:38:d5:d3:87:96:79:9e:f9:99:41:bc:04:
                    7e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AC:8E:2F:FC:00:B6:6A:6A:72:06:D3:CE:AE:F0:1C:A7:CF:20:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.crl

            X509v3 Authority Key Identifier:
                keyid:95:F6:E7:21:CF:42:50:B8:E2:CA:1D:09:29:1C:DE:AE:2D:32:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:15:73:81:2e:cd:80:81:c6:62:4d:c5:af:fe:d4:3d:d7:7b:
         3d:80:b1:aa:46:f4:e2:23:97:46:6a:64:d7:ed:80:01:e3:11:
         61:b5:85:fc:8b:0c:df:a1:c9:41:af:5c:6d:4c:54:9c:65:cd:
         2d:30:00:d7:11:58:5e:27:dd:dd:0b:43:44:9b:38:cf:93:23:
         82:8f:60:45:2b:b0:17:84:3b:62:f2:65:30:b6:c8:11:09:5d:
         d7:6b:4b:0b:aa:0f:c3:40:39:a3:5c:ef:4a:6f:46:75:b8:e2:
         46:15:64:fe:c5:92:38:60:8b:9b:bf:f7:97:b7:8c:a1:e4:97:
         06:ce:bf:53:c4:ad:82:c1:0f:1f:33:46:b4:82:f2:48:94:d1:
         d6:e5:3b:a6:6d:e8:49:2c:86:ae:20:61:83:e1:96:1f:4e:a4:
         09:99:ce:85:85:24:1c:63:2f:e2:23:64:ac:db:5a:79:8a:43:
         03:a3:c1:87:60:c2:ba:dd:3e:0b:ef:ae:ef:a0:8d:16:54:87:
         6b:7e:9b:d3:6e:61:65:c3:d1:7b:9c:98:ed:56:97:f1:9f:70:
         9b:b6:bf:05:fc:23:b7:e1:da:53:5c:c4:35:f4:0e:87:70:c4:
         d7:21:6f:76:67:80:f5:96:fa:10:e1:a2:d4:8e:65:18:e2:85:
         db:3f:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:49:24 2025 by rpki-client