Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/47d41112-28b2-3fe5-8b0d-5247554c4896.roa
File:                     47d41112-28b2-3fe5-8b0d-5247554c4896.roa (raw, json)
Hash identifier:          CvMqYK0mITWS5FWIY2Xs/s2ZhAa54SW6woVnLAGLiIA=
Subject key identifier:   B5:87:03:CA:BF:43:52:94:48:5F:C1:26:04:AF:A1:17:94:6A:EA:63
Certificate issuer:       /CN=75730944-401d-4c41-bc13-ee5c77df37a8
Certificate serial:       010D0C9F43285849FE0FF9CFC269052FA623DF00
Authority key identifier: B7:91:02:37:F0:02:0B:8A:A7:A4:59:0F:78:D2:7A:53:E2:D3:E7:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/47d41112-28b2-3fe5-8b0d-5247554c4896.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     21805
IP address blocks:        23.165.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/75730944-401d-4c41-bc13-ee5c77df37a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/75730944-401d-4c41-bc13-ee5c77df37a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:f9:cf:c2:69:05:2f:a6:23:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75730944-401d-4c41-bc13-ee5c77df37a8
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=f905c965-5647-44a6-8aba-fd9f21a387be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3a:c8:ef:38:a4:f6:6e:26:02:b5:82:b3:16:
                    11:86:95:b8:a0:7f:de:92:80:c1:2e:39:81:7e:97:
                    27:69:40:08:39:e0:96:1b:84:cd:76:d1:8c:2a:6b:
                    26:94:ce:09:38:59:4c:df:03:c2:af:e3:40:a5:9a:
                    43:53:53:ed:a0:67:7e:a7:f6:fd:d8:d4:e7:11:01:
                    26:1a:04:0d:cb:71:0e:3a:af:b1:05:c1:1d:74:ed:
                    10:52:36:42:03:a9:97:76:ff:07:7f:c0:fb:3b:87:
                    c3:dc:0c:ac:45:e4:96:15:9e:17:06:d8:17:0f:75:
                    b3:d1:f7:9e:66:fd:cd:8a:b2:97:82:b8:60:ef:9a:
                    d1:59:8b:18:e5:81:69:b8:e0:93:c4:e0:01:7d:5a:
                    23:90:cf:6e:c0:8a:8d:c3:16:82:43:c7:4e:bd:0e:
                    81:e9:dd:63:3b:dc:5b:26:43:13:3d:c5:27:6a:ee:
                    a5:7c:de:c0:c0:a7:a7:13:93:7f:fc:c9:1e:13:c0:
                    d4:69:4e:6d:02:b8:f4:bc:e8:0d:a2:14:cb:f7:7f:
                    0f:c9:9d:37:20:72:8b:f4:54:e3:71:0e:f3:ab:32:
                    9c:0a:0e:99:b6:93:d7:c2:c5:37:20:25:9f:e6:22:
                    9d:cb:52:c1:f0:6d:8d:e5:51:1f:9b:43:70:9b:3d:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:87:03:CA:BF:43:52:94:48:5F:C1:26:04:AF:A1:17:94:6A:EA:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/47d41112-28b2-3fe5-8b0d-5247554c4896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/75730944-401d-4c41-bc13-ee5c77df37a8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:91:02:37:F0:02:0B:8A:A7:A4:59:0F:78:D2:7A:53:E2:D3:E7:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:64:f8:c8:80:3b:c2:e6:22:89:ee:12:d6:43:8c:70:64:53:
         91:86:68:b0:8d:c8:4f:97:b1:18:38:ef:b3:52:66:9f:3f:e1:
         5c:4a:b5:19:86:d8:8a:f3:67:99:84:0b:54:02:a1:9d:b5:68:
         7d:27:80:fa:7b:c9:c1:32:55:30:82:f5:c5:97:3d:e9:a0:fb:
         75:92:08:5c:55:bb:17:a9:bb:a0:44:22:95:8a:76:d6:51:d4:
         54:e2:c1:92:12:22:3b:eb:83:15:58:c4:77:7a:6b:71:29:90:
         00:bf:25:12:f0:20:f9:48:f9:44:78:f4:93:1e:43:b8:9b:56:
         05:ae:79:6e:4b:fc:8f:f8:41:e2:85:91:96:f9:af:09:91:90:
         38:14:e9:d5:11:43:d0:45:c0:1c:f0:76:17:e5:a7:8f:1e:13:
         cf:53:53:48:d3:f4:c6:e6:22:04:42:89:41:30:01:ea:ab:68:
         55:ff:93:dd:7c:b9:b3:eb:33:8f:17:b9:7b:ee:4c:0b:1e:1d:
         06:ed:f3:f9:d7:b1:59:69:c1:cf:30:39:4b:38:4d:04:b8:e5:
         05:57:e9:0d:91:93:1e:52:4f:f6:01:1a:be:20:28:93:a3:ed:
         e1:fe:6f:94:c2:35:b7:42:3a:f9:73:23:74:99:39:95:e6:91:
         17:6e:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:17:54 2025 by rpki-client