Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa
File:                     95f72258-e028-38f3-9aa4-eb809a802750.roa (raw, json)
Hash identifier:          Alc0ODAW6r4CaIqy82JrGilfRNkR12DbnYHc7DpXBq8=
Subject key identifier:   16:C2:48:CF:32:8F:64:5F:46:C9:05:D2:03:7E:E2:55:F5:99:EE:FC
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F43285849E7BA6D19B6F5F2C297F60A80
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     32217
IP address blocks:        23.156.192.0/24 maxlen: 24
                          23.174.112.0/24 maxlen: 24
                          142.202.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:6d:19:b6:f5:f2:c2:97:f6:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=1ee15542-6198-411c-8d4a-16c5f7a2e920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:ac:b6:76:f0:25:34:ad:a6:f9:28:56:5f:
                    cb:d6:98:6f:8c:2a:5e:a9:ce:ef:a4:18:1a:f0:9b:
                    06:f4:06:8f:68:99:81:8e:d8:3f:c1:70:1a:04:8a:
                    41:db:d9:bd:7e:15:3a:5c:2b:d8:68:cc:93:e9:9a:
                    99:60:1f:ea:44:f1:60:e6:3a:ee:0b:62:ec:4a:5c:
                    40:68:6d:85:6d:80:83:38:b7:5d:58:69:84:73:4b:
                    96:d8:47:f5:9b:c8:90:3d:f9:42:aa:9e:4b:90:c3:
                    71:1c:a5:03:ea:bb:27:0d:ec:65:b4:e3:81:b2:f6:
                    eb:d6:be:70:ed:f8:f5:bb:59:cb:f5:9e:4f:70:ae:
                    08:91:8f:6b:48:eb:13:bc:07:6a:de:c3:90:7c:60:
                    fc:d0:35:41:d7:47:de:cb:58:64:62:d7:9a:7d:15:
                    ab:5a:2e:ef:5f:71:21:df:90:a6:a7:2c:51:e6:a5:
                    22:73:ef:c9:63:b7:19:b4:8a:96:81:89:b6:90:90:
                    b5:15:20:da:fc:56:2c:bb:5f:d5:bb:20:5e:24:a9:
                    c3:77:04:5a:04:35:fb:5c:0f:6c:67:f5:49:ef:c4:
                    56:06:3d:8e:8c:9b:41:43:8c:e3:94:b8:08:58:ad:
                    9c:b6:9d:73:88:58:9d:d9:28:0e:e0:35:c7:3c:05:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C2:48:CF:32:8F:64:5F:46:C9:05:D2:03:7E:E2:55:F5:99:EE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.192.0/24
                  23.174.112.0/24
                  142.202.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:0e:7a:38:20:0d:d8:0f:3e:0e:01:62:41:c2:0b:ff:9a:
         0a:94:5c:eb:d6:f2:73:a0:3f:65:76:21:04:b5:05:a6:38:55:
         8b:cb:93:19:15:69:71:ac:0e:38:09:0b:cd:38:e9:e1:8a:d4:
         f2:f3:dd:b9:f8:db:c6:2d:2d:d0:00:07:6c:30:68:e7:15:be:
         ef:55:de:5b:b5:20:f6:e9:1a:36:52:a5:61:c7:0f:11:a2:38:
         ec:e7:bc:10:0f:61:b9:72:80:a2:d0:33:21:9e:29:8c:1f:ff:
         35:94:46:90:63:a5:e9:2a:6c:94:21:79:6f:c2:fe:2a:03:e6:
         63:4f:e4:c3:63:ea:22:2a:ae:de:d9:a9:ab:0a:96:38:e9:e5:
         8b:7c:d7:6d:49:8a:e3:f8:2a:54:ec:a4:3e:12:b9:73:70:be:
         76:84:ef:25:2a:78:fd:64:55:23:97:99:08:4a:ca:99:7d:4b:
         9b:cc:6d:e3:2e:1d:ab:e6:25:f7:4d:0c:54:ce:42:20:3f:a1:
         d4:95:b8:6b:f0:19:24:99:84:57:28:b1:a4:47:55:df:db:d0:
         ef:e6:52:52:a7:f2:78:8a:3f:d5:bf:80:d1:1c:b7:fa:b5:63:
         fd:d0:da:55:68:55:92:a6:d8:86:7c:b2:df:6f:a3:fe:12:92:
         e0:1c:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:51:29 2025 by rpki-client