Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa
File:                     2517d6e9-9680-3eb3-a47b-2325fa06189c.roa (raw, json)
Hash identifier:          1omXH2Q/HsYM5hV7949C3l5XKF7xCkTHLr3/aTtUO+s=
Subject key identifier:   FA:24:76:A8:4B:6E:FC:82:96:40:ED:3F:CD:BC:4C:D2:49:80:EA:D9
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584A2D8585289E0E4AB01F152380
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     394625
IP address blocks:        23.154.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:85:28:9e:0e:4a:b0:1f:15:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=a8337699-a034-424e-a499-3f5736d95fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:a8:29:f2:9d:b3:b9:10:10:70:c5:20:f6:
                    ca:7a:bb:bd:de:48:26:f5:44:04:34:d2:b9:1d:a7:
                    87:78:27:9e:c8:4a:06:39:6f:95:5e:39:f4:b4:0b:
                    30:08:7d:9d:9e:06:76:e3:f4:d2:e2:e8:91:75:80:
                    84:ac:8c:8e:37:01:8f:e3:39:cc:b3:db:99:8c:7b:
                    04:c4:ec:74:59:10:a4:28:01:1a:f6:a9:c5:55:6f:
                    f6:db:a6:0c:f5:35:d3:d7:51:b4:01:e2:fb:9b:40:
                    31:4e:8d:cf:19:35:fa:0a:c8:bc:03:c8:35:be:fe:
                    ef:84:75:3d:a3:98:b0:b4:a4:87:19:87:af:7a:1f:
                    0e:3c:1f:39:83:dd:c7:9f:cc:2a:f2:38:3b:87:51:
                    0b:2c:47:6e:ca:95:67:94:68:bf:fe:47:28:27:af:
                    52:43:a4:c8:f0:62:5b:7a:b7:4d:ff:be:be:cf:d6:
                    9b:91:d5:0b:3b:7e:55:0c:2c:45:9a:2b:d3:3f:27:
                    5a:1e:51:56:57:90:f4:44:45:38:d3:ba:36:50:47:
                    46:ba:8f:6d:22:44:aa:c4:61:d9:ba:98:b1:5e:6e:
                    1c:80:94:93:f4:56:2e:11:af:8f:f8:80:e9:9c:41:
                    41:6f:b9:05:96:8f:d4:9f:d4:d7:b3:a3:bc:46:0d:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:24:76:A8:4B:6E:FC:82:96:40:ED:3F:CD:BC:4C:D2:49:80:EA:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:47:fe:e7:4d:98:c0:6c:a7:d9:de:ad:9c:64:47:dd:2d:
         d6:9d:84:a5:ea:7a:3a:f6:79:fc:e5:a3:1f:95:d8:32:f1:72:
         6a:d4:4f:c2:a4:d2:c3:94:78:e8:11:6f:b3:30:c4:a0:b7:93:
         37:9b:c7:f5:25:d5:aa:6f:6b:09:21:5f:36:a1:eb:ca:b1:19:
         ed:5f:a6:c4:98:70:a8:17:46:f5:d2:05:98:ae:ba:57:95:0f:
         a9:9f:ce:a6:7c:4f:85:15:62:96:86:8b:f9:c7:bc:2c:c0:31:
         de:59:98:55:e7:a7:10:e4:0d:45:5c:0a:c6:c7:9a:1b:b1:6f:
         06:b8:a4:34:ec:fb:c9:e3:c0:78:f9:22:31:36:c4:5c:68:44:
         8b:31:0c:b5:94:6d:dc:26:c1:1d:e8:4f:65:ff:3b:5e:ae:5f:
         59:4f:e7:e3:a9:e6:63:e2:7b:5d:bd:fa:67:59:3f:99:2b:5d:
         d3:c4:c6:8e:29:dc:07:36:95:7d:fc:a5:6c:68:fd:e3:b3:0b:
         03:69:b8:67:b1:d6:c3:bb:58:ff:a6:fe:c7:95:d5:d1:4e:97:
         e3:ca:6a:f8:6a:f1:de:f6:73:bc:62:47:6f:a9:a2:36:c0:35:
         f9:56:21:38:77:8c:66:36:f1:8c:c4:7d:89:74:85:ef:aa:1e:
         44:aa:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:21:13 2025 by rpki-client