Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa
File:                     ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa (raw, json)
Hash identifier:          g9x/yJORBYQvxrbdhv/ZCZHoSpebKhan20wbkF4lJfk=
Subject key identifier:   EB:65:3E:DE:17:5A:97:90:5B:B6:3D:60:81:EE:D9:2A:A5:DC:40:A9
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F4328584AC2E0DD83131CE2769122AD00
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     399532
IP address blocks:        23.154.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:dd:83:13:1c:e2:76:91:22:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=a9c995ec-8e76-4f69-94ea-c8bf8f3ab3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:74:3a:b7:db:9b:d6:4e:d2:4a:09:4a:d8:
                    2f:66:cd:11:41:63:0d:b9:12:d7:26:8c:a8:ce:07:
                    9d:17:a5:9f:31:66:a7:61:95:56:97:6a:22:13:4f:
                    b2:fb:43:a0:bf:5b:68:e4:f5:0f:f5:e6:f2:33:2d:
                    66:0f:75:86:64:31:51:fb:e1:08:e1:af:0a:ad:a3:
                    9d:cc:1b:b1:1d:6e:09:fe:92:f2:a1:86:ab:4d:7f:
                    af:8e:22:d5:fd:b9:03:25:93:d2:21:b7:8c:b3:28:
                    ad:6e:5e:3a:77:9e:d5:78:94:31:d4:0c:6b:14:ad:
                    73:e8:ba:28:e9:4d:65:a3:4c:f5:6f:80:1d:db:87:
                    51:fb:d7:29:23:ff:db:dc:9c:eb:cd:6b:cf:d1:1c:
                    14:a0:54:1a:94:7d:ad:2e:0e:ae:09:17:9b:c3:b3:
                    d9:d1:e2:ff:d2:1f:53:39:89:bd:27:a0:c4:80:f1:
                    2a:04:23:82:69:82:9b:b7:3b:df:08:ee:e8:9e:26:
                    80:4d:de:56:f1:1d:dd:3f:b5:bf:6b:8d:12:47:6c:
                    59:86:d3:72:44:0c:49:e9:ed:c7:08:5e:69:cf:1b:
                    fd:61:dd:13:38:df:c2:dd:fd:07:00:2e:15:ec:64:
                    86:ce:d5:ff:5d:77:4c:6e:7f:ec:96:1e:c8:df:f0:
                    84:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:65:3E:DE:17:5A:97:90:5B:B6:3D:60:81:EE:D9:2A:A5:DC:40:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b7:96:e6:f9:2d:61:89:a7:15:4e:12:df:d3:f0:17:dc:b6:
         df:2a:25:72:f5:68:b6:8a:d1:2d:0e:ae:e1:bd:20:a9:f9:09:
         c6:ef:a9:11:c4:43:a7:b9:bc:21:c2:b8:82:21:30:45:de:92:
         9e:34:10:c2:1d:63:aa:ca:ff:1f:98:3f:0e:c3:67:ae:ba:d9:
         53:bc:34:4b:8e:59:1a:88:96:3e:ae:b1:4d:b1:35:fb:60:df:
         d7:b2:89:c7:8b:87:f1:c5:79:70:6a:65:20:fd:73:41:62:03:
         10:a8:a5:77:24:de:e4:94:1a:6d:61:ce:ed:c8:a7:d1:44:a1:
         f4:9c:3f:78:d3:5f:b7:af:bd:dc:0a:a2:05:63:07:0f:66:39:
         b4:c4:c7:5b:1b:54:29:0b:d3:09:e1:3f:12:a2:83:85:65:4b:
         02:c8:7b:4b:5d:d4:24:cd:77:b3:8c:ec:dc:19:2a:20:36:ed:
         3d:e3:cb:55:c1:ca:ee:8c:c4:78:eb:4b:9b:ea:83:c8:09:f4:
         d0:3b:f3:9b:88:d3:8b:5d:dd:34:04:35:40:cb:10:97:44:43:
         e9:53:61:dc:16:83:f2:ae:91:c4:f6:67:78:06:3f:e3:47:0d:
         c6:e9:c8:4a:7f:a7:7f:35:0c:6d:69:98:fd:42:6a:ff:00:fc:
         a8:01:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:45 2025 by rpki-client