Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/f53d0c81-e82b-340f-a546-f50267c95523.roa
File:                     f53d0c81-e82b-340f-a546-f50267c95523.roa (raw, json)
Hash identifier:          aOZXyu8DhoO8LRFEt+vGfdFa8JZ10gaULtUjWbn4LiI=
Subject key identifier:   0B:0B:7B:EE:B1:8A:CF:6A:59:67:0C:5E:BB:2C:1E:EC:07:B9:50:41
Certificate issuer:       /CN=16bb215c-96eb-4982-9077-0401af63d3b3
Certificate serial:       010D0C9F4328584AADF111A87BB59C4FC577B900
Authority key identifier: 45:49:47:52:7F:39:75:2C:F3:69:51:88:56:E8:A1:9D:24:EA:9C:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/f53d0c81-e82b-340f-a546-f50267c95523.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     15326
IP address blocks:        23.128.32.0/24 maxlen: 24
                          2602:fe72::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/16bb215c-96eb-4982-9077-0401af63d3b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/16bb215c-96eb-4982-9077-0401af63d3b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:11:a8:7b:b5:9c:4f:c5:77:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bb215c-96eb-4982-9077-0401af63d3b3
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=ed20054e-eb79-44b9-a727-451f484cc626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:e0:a2:d0:ef:b1:84:12:30:a9:d5:a0:b3:
                    e5:05:d5:15:5d:c2:5f:b2:98:62:1a:98:ca:3f:1b:
                    bf:43:e0:7f:66:9f:63:39:48:30:47:74:35:44:d9:
                    08:aa:dc:6f:70:86:2f:6e:11:ce:1a:02:4b:76:45:
                    10:ca:06:c6:a5:5d:28:9f:cd:7f:9c:5e:a7:0c:d8:
                    b3:cb:b1:8e:0d:e8:55:61:f7:95:ae:39:a2:5f:59:
                    7a:ed:97:fc:ca:c9:63:eb:ad:8b:b3:da:1a:0e:58:
                    04:18:ea:8f:23:d9:5d:56:c3:bc:f7:a4:a4:7f:b3:
                    9a:a2:af:cb:cf:dc:2f:06:07:0e:e0:f5:df:52:a1:
                    65:9c:50:63:f7:2c:49:83:c2:ff:a1:6c:ea:d8:ff:
                    53:54:e7:5a:7b:7e:ca:7f:22:42:48:51:bf:35:ca:
                    a7:ca:50:80:d9:14:fc:41:ab:9f:86:49:ee:3e:42:
                    0e:79:a2:8a:ba:cc:36:f2:bd:7a:cb:d9:3d:a0:d4:
                    2e:64:2c:65:20:f2:de:a1:8c:52:3e:a9:c8:3b:f9:
                    ed:2b:8b:0e:19:1c:e9:25:a4:a0:2c:17:c3:9d:b7:
                    ba:13:8a:d3:fc:88:06:94:fa:fe:e5:03:45:b4:eb:
                    a4:1c:86:fc:c8:f0:39:f6:b1:50:93:54:24:e3:4e:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0B:7B:EE:B1:8A:CF:6A:59:67:0C:5E:BB:2C:1E:EC:07:B9:50:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/f53d0c81-e82b-340f-a546-f50267c95523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/16bb215c-96eb-4982-9077-0401af63d3b3.crl

            X509v3 Authority Key Identifier:
                keyid:45:49:47:52:7F:39:75:2C:F3:69:51:88:56:E8:A1:9D:24:EA:9C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.32.0/24
                IPv6:
                  2602:fe72::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:49:68:97:b7:91:aa:eb:e2:4a:44:a8:5a:25:9b:d1:22:3b:
         26:27:a8:85:db:a6:db:11:e0:08:34:d0:cd:d2:20:ce:58:4c:
         c2:c1:6e:35:de:b6:0a:9c:32:b1:68:26:f2:5a:32:0a:20:93:
         bd:26:5d:ce:4e:f4:58:b6:24:53:06:25:ea:3a:84:8a:fb:56:
         1a:05:b0:36:fc:b0:91:59:fe:1e:83:58:80:df:e1:bc:f7:98:
         a4:6c:64:90:85:0d:8c:1a:71:57:02:29:d9:83:aa:69:d4:f7:
         33:9f:98:63:30:14:bc:0d:b1:8e:f8:69:e5:dc:13:ee:19:06:
         44:c0:a6:77:46:94:e7:30:fc:56:af:ed:71:5f:72:6c:ca:3d:
         59:d8:a1:7a:8b:81:04:29:12:5e:d7:8d:50:36:40:08:a9:45:
         38:5d:bf:f8:cf:34:b9:ae:f0:f5:02:f2:dd:e7:a9:ef:e9:78:
         7b:03:30:fd:8c:39:a4:e9:e8:88:d0:80:95:9f:c3:b9:2b:6f:
         99:eb:61:85:8d:db:89:b1:65:33:b5:5d:d6:49:e6:2a:6e:6d:
         86:1b:2a:3d:ea:cb:de:ff:d2:d2:45:77:1e:5e:a3:f1:01:6a:
         64:71:0e:fc:a6:06:67:e9:01:f3:f5:1b:7f:a8:5a:80:5d:c8:
         15:32:9b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:53:51 2025 by rpki-client