Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8dfb7811-cc82-34ed-a196-4adb3dce261c.roa
File:                     8dfb7811-cc82-34ed-a196-4adb3dce261c.roa (raw, json)
Hash identifier:          iUXVb9fCL/ZfOxoNYXM5EoEuQaeaAedi+2i9oScAI74=
Subject key identifier:   E7:42:C1:80:FE:62:FD:58:1E:A2:5B:1D:17:F0:35:62:F7:ED:9B:A7
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584AB650F489A4465E36483899C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8dfb7811-cc82-34ed-a196-4adb3dce261c.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     27411
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f4:89:a4:46:5e:36:48:38:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=47f1f8fe-3c70-4457-b50b-b36fa2133ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:d0:ad:24:da:ad:64:be:8f:9c:cc:ec:ea:
                    3c:0e:c5:b9:16:4b:2e:55:f8:fd:70:c9:bd:a6:36:
                    ce:ca:f9:a3:9d:51:d7:e9:57:c7:6a:01:53:8a:7d:
                    f0:aa:96:7a:46:5f:c2:f4:8b:2f:2a:56:45:23:df:
                    43:f5:ed:55:5f:5f:5c:63:ea:0f:15:d4:f3:fa:24:
                    04:53:95:92:93:77:77:f6:4d:32:dc:42:6b:29:38:
                    ce:fd:40:df:39:d0:70:c4:ac:24:37:24:4f:25:b1:
                    b8:f9:92:3d:d7:61:df:e1:95:51:7b:71:6d:76:10:
                    42:97:80:30:29:45:68:39:6a:2a:f0:f4:3e:d3:72:
                    f9:da:22:71:74:cf:5d:25:cd:38:90:96:86:88:c1:
                    3f:de:1a:1b:13:37:e7:be:03:a7:a4:bb:df:ff:cb:
                    0e:17:b4:bd:e7:44:be:7b:ea:63:ea:63:38:45:83:
                    b5:4e:b7:f4:64:da:57:37:00:e2:b3:a3:03:90:d8:
                    9d:35:b5:5b:41:aa:94:34:45:bc:b9:2b:61:b3:42:
                    16:8f:18:59:c1:e9:68:c9:77:d3:f1:c7:7e:0d:2b:
                    ed:61:93:3f:55:3c:0f:b8:d3:e2:e8:76:80:57:83:
                    ba:61:3e:c1:3b:dd:db:66:e8:ca:14:bc:34:ee:71:
                    3e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:42:C1:80:FE:62:FD:58:1E:A2:5B:1D:17:F0:35:62:F7:ED:9B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8dfb7811-cc82-34ed-a196-4adb3dce261c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5f:35:93:69:12:27:a2:89:54:fb:9a:57:b4:6a:4c:0e:b2:
         96:b8:39:0a:17:eb:d3:4f:b6:1a:3c:3f:96:92:40:a6:36:2c:
         1e:44:bf:31:f5:86:3c:47:a9:ed:93:f3:31:c3:07:be:d9:68:
         d3:a9:37:14:79:86:c5:af:59:71:42:f3:0a:48:1f:38:b5:5d:
         46:6a:34:6d:2b:7c:7a:de:07:ee:69:89:6f:d5:97:f0:13:1d:
         ae:d9:0f:e3:70:25:bc:11:6d:17:79:54:a8:6f:96:0a:66:2e:
         44:91:e1:30:df:a0:d5:b0:2e:76:7f:1a:04:09:91:29:e2:15:
         3f:97:68:cf:10:82:cc:40:c2:00:b7:5a:6d:9d:d5:4e:26:7c:
         dd:50:bc:7f:2a:e2:39:c2:7c:6b:70:45:e1:0c:8a:61:01:9d:
         7b:49:c8:a1:ce:e3:36:6e:a4:c2:b1:c7:dc:66:93:46:92:f2:
         8f:40:8d:bb:1a:ed:c3:48:3b:01:bb:88:0a:77:79:fe:ae:54:
         9f:33:b2:75:94:c0:2e:84:e6:6e:9a:69:01:cf:1e:af:61:c1:
         26:07:43:2e:7f:3b:38:2e:59:f0:27:da:28:12:da:db:ce:49:
         b2:0c:26:3d:5e:94:43:15:30:a2:af:74:45:70:33:f7:4c:c9:
         03:8d:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:21:23 2025 by rpki-client