Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/25d151f0-5c0f-3146-948d-00e1c8dc139b.roa
File:                     25d151f0-5c0f-3146-948d-00e1c8dc139b.roa (raw, json)
Hash identifier:          UBvgtrnVTEbBe269EEI3SKpTK5X7G4qsHbbg3tddto4=
Subject key identifier:   DA:78:7F:DB:BF:18:F1:7C:29:B9:A8:9C:15:78:83:4E:A2:18:14:73
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584A23C00885DC45AB2404C19240
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/25d151f0-5c0f-3146-948d-00e1c8dc139b.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     14445
IP address blocks:        23.137.136.0/24 maxlen: 24
                          23.137.137.0/24 maxlen: 24
                          23.137.138.0/24 maxlen: 24
                          23.137.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:08:85:dc:45:ab:24:04:c1:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=6ce0686b-0f3a-4f48-8687-e9f48fd400d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:f7:f3:86:71:35:3b:19:d9:76:94:ab:db:
                    db:d2:8b:f8:34:0a:6a:e5:b6:ce:e0:ea:f1:2d:e6:
                    c5:99:ff:11:9d:ec:a4:2a:35:75:8c:57:ab:ec:b4:
                    2c:54:51:5f:69:dd:c8:b9:da:d6:33:34:91:70:40:
                    23:10:be:23:38:34:5f:02:ba:91:af:36:4f:b6:dc:
                    8f:f9:07:ae:94:1e:3e:13:11:3f:27:fa:2f:1a:84:
                    10:fd:45:0b:24:9e:a5:07:f0:dd:fb:65:43:12:f6:
                    60:d1:da:96:f2:f4:f0:fb:f0:74:e2:b4:61:ca:11:
                    12:4b:71:71:03:e1:18:5d:06:a5:26:7f:b2:42:7f:
                    d8:09:90:74:16:4c:ab:ab:14:07:1c:c7:fb:42:a9:
                    77:b2:13:be:ff:2a:70:0d:74:3d:54:57:f5:b4:49:
                    ff:47:78:42:d2:dc:58:6e:90:5e:30:b6:b4:3f:d8:
                    f4:21:3a:cb:5d:99:d2:5c:39:94:38:02:03:4d:78:
                    05:55:36:d2:60:74:df:ab:fc:b0:4b:60:e5:61:40:
                    e1:10:54:d6:96:d1:a4:76:16:ee:57:f9:fd:b8:3e:
                    f5:4a:32:17:0a:a6:04:fa:0b:ab:bb:5c:8e:0d:c2:
                    81:49:e5:68:f9:8c:5a:64:05:f5:19:42:09:71:8d:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:78:7F:DB:BF:18:F1:7C:29:B9:A8:9C:15:78:83:4E:A2:18:14:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/25d151f0-5c0f-3146-948d-00e1c8dc139b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:48:c4:96:ff:42:a3:42:f5:51:15:58:ba:89:c6:8f:a3:
         c7:9e:d6:8d:b1:57:a3:e8:c4:e9:bc:7c:7e:b1:51:1d:e8:10:
         3e:08:3f:cb:9a:47:ce:85:32:3b:4c:9f:4f:b7:2c:73:47:2e:
         6a:b8:d6:5c:f8:81:30:73:6e:10:e3:4d:dc:78:41:51:a8:5b:
         0f:5a:ce:3c:63:e1:50:2a:af:3c:08:5c:81:98:e7:4c:95:f1:
         71:ea:ad:ec:eb:ff:3e:bb:92:54:5c:59:e4:6a:bc:28:68:42:
         e5:24:83:67:6c:f1:5d:a6:dc:16:5e:2f:ca:32:f1:5d:2a:0d:
         ff:fb:fe:e1:59:e5:5f:19:4f:ab:29:b8:8f:0b:a9:94:8c:7d:
         78:5a:ec:ca:56:31:db:93:05:1e:6b:c2:bd:12:5e:d4:1b:68:
         ba:62:2d:cf:71:24:35:0e:11:aa:05:db:54:01:f8:91:82:86:
         56:43:d9:31:c4:04:22:75:9f:d1:c7:a4:a5:35:a1:28:be:b6:
         c3:ac:89:14:f1:3b:ea:d0:42:1c:2e:87:ee:25:fd:a8:40:84:
         d5:39:62:20:63:f8:56:db:f2:ff:c3:c5:be:2d:8e:38:ff:7f:
         ee:ea:42:cf:da:67:c7:cb:84:78:98:ac:8e:af:df:8d:0d:18:
         83:71:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:33:55 2025 by rpki-client