Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa
File:                     38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa (raw, json)
Hash identifier:          IGDU0Cp1MVrU7uibPuNix9tQYbn2/6wyiVYckpIuMbk=
Subject key identifier:   8B:A6:74:1B:B8:BD:4A:AA:BF:A5:EE:CC:1A:A7:0A:7D:61:8F:97:EE
Certificate issuer:       /CN=68de9da0-8f7e-4231-9340-c37abafc3714
Certificate serial:       010D0C9F4328584A9FFBA7F8ED4553AC687C3B80
Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     1030
IP address blocks:        23.166.200.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a7:f8:ed:45:53:ac:68:7c:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=fd5ef1db-c98d-4765-9bf8-171d717dad70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0e:23:38:7f:dd:9d:d0:f6:a6:fa:df:ff:3f:
                    92:2d:cb:3a:26:67:e9:59:35:1e:c3:61:25:45:32:
                    12:39:71:8e:bd:8d:d5:d1:5a:04:74:62:16:31:2c:
                    bf:11:73:1b:b4:47:d8:00:0e:84:57:fe:d2:4a:88:
                    34:ff:48:cc:be:00:b5:92:75:2a:fe:82:7b:b7:88:
                    93:3e:4d:ff:b7:05:eb:dc:7a:38:35:cd:fa:cb:e9:
                    4f:de:a4:e7:fe:0f:e0:01:5b:4d:c4:5b:f9:ff:fe:
                    22:f9:e4:99:1b:1b:2d:39:a7:fa:0d:0d:b3:c1:60:
                    4c:37:ac:f6:34:9d:40:17:2e:9a:63:90:bd:4b:42:
                    8d:bc:5b:cd:eb:02:75:59:ac:56:96:8a:89:9c:1d:
                    55:05:80:97:01:c0:d7:00:ab:4d:6d:82:88:d6:f1:
                    ea:38:9c:a4:a9:2e:2a:b3:0a:4d:04:b6:df:7e:b2:
                    ab:39:45:20:fd:eb:8a:e2:64:6e:12:3a:38:34:d7:
                    1d:27:95:7b:69:cf:09:a6:ff:5c:0b:fe:03:3c:aa:
                    66:ca:f1:b5:b8:70:80:2a:e9:3e:b1:a4:08:d2:8c:
                    a1:14:a8:a8:62:e5:0a:55:b6:f8:bc:c3:5c:52:10:
                    62:8f:43:0b:d9:b4:19:22:39:09:58:7c:62:4d:56:
                    51:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A6:74:1B:B8:BD:4A:AA:BF:A5:EE:CC:1A:A7:0A:7D:61:8F:97:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl

            X509v3 Authority Key Identifier:
                keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:e7:eb:b4:b8:0b:58:98:59:a1:f4:7f:b5:74:c7:a9:b5:
         78:9d:a9:f9:c3:34:c2:5c:b1:ca:b9:06:f5:c5:2e:97:69:12:
         9a:de:10:a6:78:94:55:d7:dc:84:0f:4f:f3:b5:53:e5:93:5b:
         a2:51:6f:1d:55:fe:43:5f:82:20:3a:48:52:0a:0d:ef:e7:9c:
         4a:54:75:26:8d:41:a8:54:42:b3:48:b8:ae:18:92:1e:e6:f1:
         4e:04:85:cf:d1:b0:b8:5d:14:bd:bf:7f:5c:d8:c3:ba:ff:15:
         a5:99:ac:cb:03:6a:57:cc:bb:da:37:4b:17:db:c3:c4:95:13:
         3e:28:98:9e:d4:e5:19:d3:3d:aa:7f:a4:cb:f6:a9:e3:0e:f4:
         91:14:7c:8e:7d:43:ec:aa:84:4c:e6:de:c8:44:0f:91:84:9f:
         2b:bc:f9:be:ae:3f:fe:db:ce:b6:8b:20:5d:d9:cc:bb:f3:64:
         f9:a9:53:11:fa:8f:3e:e3:7e:c2:82:ea:90:31:03:51:0b:60:
         8b:e8:f2:c2:4c:12:e1:7e:c9:ee:19:30:4c:17:f0:31:e8:ff:
         4b:59:01:08:0c:a2:88:d2:4d:a1:94:4b:b2:34:a1:35:35:b1:
         07:a0:83:27:31:30:73:b1:3d:85:15:e2:e7:55:3b:a4:0f:2b:
         35:37:e3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:23 2025 by rpki-client