Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa
File:                     d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa (raw, json)
Hash identifier:          mNLACZ5Ha9WO/MgRPREYV1PIfS/wls2X2+HlpWTaEkE=
Subject key identifier:   6E:B4:09:9C:53:EF:87:EB:84:BC:0E:E4:1F:6D:BB:CD:DF:45:57:28
Certificate issuer:       /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
Certificate serial:       010D0C9F4328584AA42B8E1F0ADB4F12B87768C0
Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     19879
IP address blocks:        23.169.88.0/24 maxlen: 24
                          23.169.89.0/24 maxlen: 24
                          2602:f9a6::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8e:1f:0a:db:4f:12:b8:77:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=0b62fe6f-094e-43f0-b2f2-c606db75d771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:95:21:b4:a4:29:05:95:81:d1:e0:19:0f:
                    e2:24:d7:e5:eb:d1:61:a2:34:1a:3b:41:0c:5e:57:
                    14:b6:f5:0a:4c:da:56:29:8c:7a:f1:2b:f1:6e:30:
                    9b:45:fb:20:ad:36:37:0e:fb:0b:da:d4:5f:4e:e1:
                    b5:02:b9:6b:dc:e5:e5:e3:5d:ec:f5:21:dc:58:df:
                    86:28:eb:c0:32:8f:f3:4c:1c:3d:be:b8:44:04:24:
                    ff:16:b5:58:51:f9:eb:17:e6:93:a4:3f:9a:70:1a:
                    78:d7:2b:e1:1c:82:21:03:d5:a2:28:bc:80:7e:75:
                    93:2b:f8:ed:82:f5:f8:38:22:f0:90:c9:53:2c:ef:
                    ad:66:5e:64:4c:d2:32:01:ef:64:7e:05:88:cc:d8:
                    a5:e7:d3:8c:35:b5:b9:c1:c7:4a:bd:59:a8:e6:00:
                    4f:82:c6:d8:70:1e:4c:65:f8:49:1e:a9:60:7f:3f:
                    62:ff:6c:2b:7c:08:a6:26:9d:a0:4d:b6:51:d3:ae:
                    5e:e6:23:27:02:53:78:13:c6:0c:82:59:bb:ae:ce:
                    f1:b5:d6:37:22:1b:2c:a1:06:47:93:f7:76:25:05:
                    a6:8f:45:9f:6e:8a:7f:c0:ef:ad:35:db:01:f1:31:
                    06:c4:df:01:eb:cc:6d:bf:af:74:e9:e5:46:cb:ed:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B4:09:9C:53:EF:87:EB:84:BC:0E:E4:1F:6D:BB:CD:DF:45:57:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl

            X509v3 Authority Key Identifier:
                keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.88.0/23
                IPv6:
                  2602:f9a6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f5:95:91:b7:95:de:75:63:b4:62:5e:de:85:17:1f:4b:74:
         47:80:68:54:f9:e3:68:03:27:a5:a2:14:dc:4b:2d:83:48:71:
         31:4c:db:c0:8b:5c:97:52:75:ff:e7:c6:0a:36:58:6a:f0:95:
         00:01:83:f8:2a:7c:0b:71:75:10:40:83:6b:9c:f2:64:21:22:
         de:04:1c:ac:67:73:66:23:f9:4e:81:04:e6:d8:67:f8:37:f4:
         97:7e:b1:a1:aa:c3:0c:25:33:9a:9a:a3:b1:a9:8e:c6:2c:c0:
         50:ed:80:0c:d8:e7:d0:62:11:92:84:45:a1:a0:57:f2:39:97:
         71:ab:0b:d5:cd:e4:34:9d:8a:f5:00:59:58:00:d5:34:e2:f2:
         a7:48:59:53:8c:b4:95:30:ff:69:2e:02:0e:e7:5d:40:1b:1d:
         a1:a9:6a:2c:c9:32:cb:32:11:32:5e:dd:b8:ff:0f:a8:1c:6c:
         2b:18:54:21:35:ed:62:f1:29:5d:6d:93:8c:84:fb:ef:13:7a:
         a2:4f:6b:14:91:61:0f:ad:47:00:bf:a6:65:10:34:cd:e8:52:
         7f:d3:f0:f1:96:fb:fb:1e:10:68:63:27:d0:68:fe:46:e8:21:
         b7:78:0d:c9:4b:a2:fe:37:03:3c:da:4c:8e:25:12:3e:64:1e:
         f3:22:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:02 2025 by rpki-client