Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa
File:                     f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa (raw, json)
Hash identifier:          K2Q4i8wrFLAohW6uVV4Po0NIZSKAj/anFODCRbdNkyQ=
Subject key identifier:   9F:84:AB:89:9A:1F:39:F3:DC:60:58:3C:FA:DC:DF:5E:B6:5A:7A:28
Certificate issuer:       /CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
Certificate serial:       010D0C9F4328584AB91BA7AF188059BCF34783C0
Authority key identifier: 66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     13781
IP address blocks:        23.151.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a7:af:18:80:59:bc:f3:47:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=00b99abd-b45b-4d48-82d5-bd4fa3f07c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:65:8d:86:b3:eb:d2:b5:f2:5e:ac:b5:72:
                    19:be:2b:8d:e5:4a:e0:d2:ef:3d:b9:5c:25:1c:93:
                    dd:90:3b:54:46:42:20:d4:5c:df:a9:f4:f1:ee:37:
                    cf:44:8b:4d:e5:e5:09:f8:48:43:10:65:2e:8e:6f:
                    72:42:6e:f8:1c:2b:ce:91:2e:91:0c:5a:61:b5:39:
                    a2:b9:2a:2d:ea:37:b8:c7:c5:85:ba:9b:d8:c9:20:
                    0e:5f:49:e0:d8:88:87:15:f7:88:40:2d:22:1a:36:
                    75:ab:27:6f:65:cb:df:a8:86:00:a1:f2:26:21:38:
                    bd:ef:58:b3:cb:30:76:5f:3b:e6:a2:6a:88:2c:56:
                    63:7d:d4:97:01:9d:7a:8c:bf:9a:90:71:b5:8b:19:
                    30:87:b8:99:9d:7d:ba:c5:03:9e:6a:fd:6a:60:81:
                    42:af:74:e0:4c:e1:19:4b:92:7e:0a:dd:09:ed:8a:
                    ea:6b:6f:a8:64:3d:50:72:38:2e:51:f5:43:5e:f7:
                    8a:e4:4a:32:06:e2:60:4f:5f:7e:fe:b4:ab:91:49:
                    50:f6:b1:85:10:2f:1b:23:67:7a:93:44:41:26:ab:
                    24:ef:f2:e1:77:73:0d:0a:86:8e:0e:54:9b:09:52:
                    43:82:53:67:ec:cf:af:88:80:0a:b1:b6:e7:47:4e:
                    55:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:84:AB:89:9A:1F:39:F3:DC:60:58:3C:FA:DC:DF:5E:B6:5A:7A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl

            X509v3 Authority Key Identifier:
                keyid:66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:92:c1:7c:18:44:e9:3c:54:02:96:18:0f:50:56:3d:4e:77:
         10:e6:bf:bf:8b:41:42:39:26:d5:7e:06:8a:06:7a:a9:4f:37:
         fe:6f:39:93:14:2c:a8:d2:c2:f5:ce:4a:78:59:5b:31:b1:4c:
         5d:d6:b6:f9:2f:a6:85:c1:ee:21:01:e5:fd:b3:da:a9:10:2e:
         05:93:06:f1:bb:38:ac:9a:8f:2d:8e:14:1e:ca:27:92:3e:38:
         e8:8a:04:22:de:78:af:d3:3f:9c:75:53:aa:a8:98:92:52:56:
         8c:28:0c:3e:b8:fe:03:ad:e2:80:1a:de:32:a0:7b:96:d7:22:
         b8:19:18:59:95:97:3d:d2:0e:cd:ef:01:7d:0b:88:25:0e:d8:
         cd:0e:e5:57:2e:e8:f1:be:18:fc:4c:09:02:dc:d3:fa:bd:9d:
         4d:c2:2a:aa:a6:b7:21:1d:00:f7:11:3a:95:d2:97:0a:72:41:
         e7:60:28:e4:60:38:35:df:b7:02:9f:e0:9f:90:5a:24:a5:8e:
         a1:9c:5c:77:bb:09:d0:58:c3:08:4e:16:bf:0f:a4:a8:d1:85:
         16:97:1a:82:da:b5:7e:4a:62:31:24:67:90:8f:54:66:aa:90:
         5e:40:72:a2:c8:71:54:f3:af:8f:5e:69:78:d8:e2:6e:a5:dd:
         04:24:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:53:45 2025 by rpki-client