Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/8f56bd57-826e-36c7-8483-485c90f50736.roa
File:                     8f56bd57-826e-36c7-8483-485c90f50736.roa (raw, json)
Hash identifier:          mckAbp+jRNDMP0WiFiFcphDJSLCv1C/2U3U8fp6+aLc=
Subject key identifier:   85:90:1A:BD:9C:22:D4:85:7E:CC:F6:D9:2D:57:A1:91:4E:37:10:8E
Certificate issuer:       /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial:       010D0C9F4328584A03A554F972DD07B1662C5D00
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/8f56bd57-826e-36c7-8483-485c90f50736.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14445
IP address blocks:        23.174.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:54:f9:72:dd:07:b1:66:2c:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=80d61718-3f78-41ae-abb0-64719f8bfd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4a:47:1a:cf:69:54:31:07:d3:3b:4e:f8:c0:
                    2c:f1:8e:fe:82:ee:a7:e1:b5:b4:53:38:75:66:aa:
                    23:c9:81:67:e1:ec:cf:47:21:76:ba:df:d6:22:91:
                    0e:a0:8e:6e:06:8a:f6:bc:11:5c:b0:9d:ba:b8:ff:
                    be:c4:f3:17:20:fe:15:fc:53:a1:69:45:31:77:82:
                    ce:da:f1:03:6f:89:ee:7d:8c:c4:66:5e:c6:06:07:
                    9c:ef:7a:f3:e9:75:e5:fc:41:6c:a0:53:7c:e5:51:
                    12:51:cf:21:41:9b:79:89:bf:e5:23:ac:43:94:95:
                    4a:fb:c0:54:c0:29:68:3e:de:ec:69:a0:82:79:88:
                    8d:71:37:45:0d:53:51:bd:7a:61:06:a0:d2:20:cc:
                    cb:d4:6a:eb:61:01:c4:03:6c:c6:68:77:33:36:c0:
                    83:fe:de:e0:5e:41:88:81:bb:05:f7:a3:f6:7c:58:
                    33:5e:11:14:0c:e3:49:6b:49:6c:ef:aa:22:b9:c8:
                    4f:fe:e9:48:ea:51:45:6e:af:ed:c1:65:4e:70:6a:
                    e8:8b:2a:24:e6:d8:15:25:1d:96:5a:27:a3:6f:44:
                    aa:53:9f:07:88:4b:40:70:b3:7f:78:4d:aa:f9:11:
                    f6:ff:77:1e:42:b7:b0:97:04:23:c0:22:a0:7e:cf:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:90:1A:BD:9C:22:D4:85:7E:CC:F6:D9:2D:57:A1:91:4E:37:10:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/8f56bd57-826e-36c7-8483-485c90f50736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl

            X509v3 Authority Key Identifier:
                keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:26:f1:c0:54:ea:ac:e4:65:50:24:fc:b8:15:36:25:65:80:
         ee:93:6d:67:3d:ef:83:fe:46:05:b4:73:db:c1:22:4b:e5:5c:
         52:4b:6f:8c:60:64:97:c3:04:12:d6:ef:bd:2a:19:6c:0c:e6:
         8e:9d:6c:05:32:8c:fd:35:3a:c8:85:48:d1:1b:2d:97:9e:a6:
         b2:fa:f3:4b:1a:50:a3:bc:7c:f5:da:fb:eb:38:ef:97:d6:2d:
         99:f2:d1:09:89:c3:5f:08:9d:eb:49:31:56:7c:71:50:a2:4c:
         89:62:8d:a6:26:6f:2c:bb:fc:c5:2e:8c:d7:5a:96:37:3c:88:
         37:16:3e:f5:fb:a4:59:db:63:82:52:9e:96:2e:97:47:8d:0a:
         43:cb:cc:0d:5b:86:d5:74:c7:6d:bf:66:d1:b1:ac:23:d8:9c:
         da:bc:df:dc:42:d0:d9:95:8a:5a:c6:d3:32:9d:8c:5f:94:b4:
         35:f1:f0:ba:18:3f:3b:10:3c:ff:03:45:ea:f7:54:85:c4:d2:
         5f:3f:04:92:67:47:30:4d:db:65:66:e7:33:79:5c:38:8e:7e:
         55:2e:e8:ba:f0:af:ca:11:af:d7:3d:88:92:07:d8:d4:33:ab:
         95:6a:dd:42:73:06:5f:b8:fb:50:50:14:db:58:ea:9f:ff:ff:
         8c:c2:c7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:05:20 2025 by rpki-client