Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/6cee352c-a308-3b23-8fce-80ac82c1531a.roa
File:                     6cee352c-a308-3b23-8fce-80ac82c1531a.roa (raw, json)
Hash identifier:          tRJriBHElMZtXuna+CrNpkvjSUsUTQEDwJqMf7wWDKU=
Subject key identifier:   88:21:3C:CF:B3:5B:71:2E:F8:52:48:13:08:ED:6F:1D:8C:EE:58:82
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584A03A54ECED11AFFB79A5B83C0
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/6cee352c-a308-3b23-8fce-80ac82c1531a.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     6233
IP address blocks:        23.83.224.0/19 maxlen: 24
                          174.137.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4e:ce:d1:1a:ff:b7:9a:5b:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=b68c6692-a943-4b31-b344-d31a0ff17b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:cb:96:b0:87:e1:e3:6f:94:5b:97:de:56:
                    a4:ef:61:be:b5:71:4e:cd:68:8d:8d:4b:d6:d9:44:
                    4f:58:91:54:dd:3e:0a:03:3d:85:3e:86:6b:4f:25:
                    6a:98:53:8f:91:d4:ad:1c:e0:d0:fb:0f:09:62:3c:
                    2c:41:a2:06:52:8c:53:82:9e:61:5b:4d:dd:66:f0:
                    60:5c:ff:02:f1:a5:4f:19:a8:00:d9:5d:c0:3f:0b:
                    ce:68:e5:79:7a:f9:30:db:6e:e2:e3:ef:d7:25:fb:
                    b1:c5:23:d4:c4:6c:5b:52:fb:ae:02:72:39:79:96:
                    1f:a8:5c:b0:98:32:b9:a8:55:b7:a9:f8:2c:26:6b:
                    ed:b2:16:74:7f:3f:4f:17:5c:98:2c:9d:7f:c9:4a:
                    6e:8a:a1:42:90:18:66:ec:6e:cf:4d:28:58:fd:e2:
                    a7:77:13:c7:0f:8e:8a:e7:28:13:17:5b:3a:02:18:
                    57:69:5e:de:7b:87:2c:31:ae:c5:8a:4c:36:75:3d:
                    3c:98:a6:d9:e3:82:7d:24:a7:52:a3:d8:57:81:0e:
                    da:85:7a:72:92:8e:bf:26:9a:e8:c5:45:02:58:d2:
                    7d:b6:60:02:0d:97:75:97:9b:d7:5c:62:26:ec:c1:
                    e3:d8:5b:e9:c3:3e:2a:e4:70:ef:bf:c3:fe:45:20:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:21:3C:CF:B3:5B:71:2E:F8:52:48:13:08:ED:6F:1D:8C:EE:58:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/6cee352c-a308-3b23-8fce-80ac82c1531a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.83.224.0/19
                  174.137.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3a:0d:a1:3d:03:0e:be:98:81:3a:23:c5:62:74:3e:cf:02:
         d0:4a:da:7b:86:b3:0a:4d:23:01:15:07:3d:20:6c:96:59:f9:
         c9:89:02:6f:8a:6e:cd:4c:65:bf:b4:80:37:50:72:16:89:ff:
         e3:0f:a7:fc:e2:d3:48:85:68:d9:d5:dc:72:a2:b3:0f:1a:1d:
         a0:a1:c5:64:f9:50:52:2f:8f:e2:a3:77:59:61:a6:f6:7b:b4:
         1e:d1:15:05:ee:3f:2f:ae:44:01:52:95:b5:25:9c:83:83:06:
         e4:d9:7a:b5:a9:f7:8c:83:b2:0f:dc:ee:1c:83:44:de:3f:6c:
         0c:96:37:6b:53:9e:ca:ed:b6:93:ad:94:d1:23:3f:9c:3f:90:
         18:56:87:52:56:ee:81:f5:10:2f:be:7d:14:fc:e2:c1:ab:f2:
         7f:02:13:58:f9:5a:8f:e8:db:c6:16:04:92:76:59:c5:06:34:
         e9:28:7a:16:8b:53:b0:43:27:d9:06:1c:19:f1:13:06:7d:48:
         65:e9:ff:35:85:b3:6d:e4:e0:fb:2a:95:e3:2c:66:4d:3f:ff:
         ef:29:b4:ff:2a:c2:b8:c2:4d:8a:25:1e:09:f2:e1:4c:80:7d:
         7e:2d:3c:ae:79:55:9b:06:55:9f:db:65:07:a6:ad:27:bb:c0:
         d4:c5:db:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:17:02 2025 by rpki-client