Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa
File:                     39e8376f-22b2-35f2-8504-c32896390d85.roa (raw, json)
Hash identifier:          soboWrjoGyQVu/voqvyx9pKOyijfjv/YC1CpkkOh7kk=
Subject key identifier:   38:95:8E:9F:57:41:A0:64:78:AD:01:1F:82:20:1F:D9:4B:F2:C3:0A
Certificate issuer:       /CN=0e307b23-6715-4f4e-8e81-99854b623d2d
Certificate serial:       010D0C9F4328584A07D536DBC0FC74ED6A908E80
Authority key identifier: 58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     397668
IP address blocks:        23.165.56.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:36:db:c0:fc:74:ed:6a:90:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e307b23-6715-4f4e-8e81-99854b623d2d
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=1c2ccf13-de1b-4a0b-bb66-e5697fe99ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:db:ee:bb:8e:91:6d:ab:08:87:58:dc:31:
                    c5:44:be:6e:be:8c:6a:3a:23:6c:3b:7c:ca:59:c0:
                    a3:02:a1:a8:13:b5:90:31:58:22:62:64:86:3a:4c:
                    2a:82:f7:59:fc:50:45:21:a6:ba:d9:b5:9c:8e:8f:
                    39:3f:ff:0c:87:26:d1:2c:a8:4e:85:e2:42:f1:90:
                    07:80:91:70:95:f5:15:a8:d0:ca:28:16:6f:10:dc:
                    61:4a:1d:bc:b2:4a:79:20:03:a5:51:62:6d:d9:fe:
                    06:1e:29:f5:96:87:09:26:45:26:3a:1d:47:6c:d5:
                    1f:78:4f:9c:ba:94:c0:9e:e5:1e:32:13:d8:61:4a:
                    bf:49:07:7a:3e:23:9f:83:84:d1:3d:1c:5d:d8:5e:
                    b6:74:1a:76:04:3b:d5:ae:b2:4e:b7:15:7c:fe:3d:
                    00:07:89:a4:46:81:82:c8:29:33:60:5c:e0:24:0d:
                    9d:8a:c0:cd:a8:c4:37:85:c3:94:4a:9a:60:d1:e8:
                    18:13:20:b5:16:09:55:ac:37:32:24:af:da:e0:db:
                    82:5b:92:7e:2c:07:e7:60:26:c2:87:b6:3b:e3:4f:
                    d7:11:63:08:a7:89:26:df:5f:9c:b9:7c:ca:f4:eb:
                    2e:eb:b2:1a:21:f7:92:6a:14:f8:a2:93:6a:b8:c0:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:95:8E:9F:57:41:A0:64:78:AD:01:1F:82:20:1F:D9:4B:F2:C3:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl

            X509v3 Authority Key Identifier:
                keyid:58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:25:36:29:3f:8f:a7:de:06:be:44:0e:3d:dc:8d:fc:80:0d:
         97:9c:7c:ce:da:db:93:d4:40:17:5d:3d:0e:bd:fb:4e:c4:d9:
         d8:f2:61:e9:ac:2e:06:19:45:69:7c:f7:f6:9d:08:25:06:93:
         81:06:d1:c2:5e:a9:81:9c:7a:85:ac:19:11:82:cb:7c:5a:7b:
         e6:15:34:6d:e0:ac:2f:42:2c:02:9d:24:7f:4f:b0:f4:e1:b6:
         88:35:2d:ba:f2:19:1e:c5:29:9b:25:39:96:15:a0:78:87:d3:
         c7:b2:01:9b:53:0d:3d:46:0d:5d:f7:7e:07:06:ef:bb:7d:cf:
         62:7c:c3:ac:6d:5f:3b:6a:cf:92:7d:7f:7d:4f:c4:b5:6e:1c:
         a6:01:22:70:77:e7:dd:cf:04:e8:6d:d5:41:ec:c9:61:c3:c3:
         26:b8:97:d5:49:e9:ea:3c:d8:49:b1:b0:09:84:23:3d:dc:71:
         2e:1a:55:82:98:2b:ec:9b:57:d2:82:b8:ac:b8:15:0b:68:d9:
         f9:29:ce:17:5e:d1:0a:71:31:42:1f:05:89:85:c9:21:84:66:
         1c:7a:09:45:b7:f6:aa:d7:71:f7:7a:37:be:5d:82:82:86:51:
         6e:d7:9a:65:1e:57:82:fe:08:a4:18:76:b7:bf:94:fd:ce:0e:
         1e:af:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:12:47 2025 by rpki-client