Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a736b29b-8772-3206-a73f-e395ff229dfe.roa
File:                     a736b29b-8772-3206-a73f-e395ff229dfe.roa (raw, json)
Hash identifier:          eT2ANHFx9DUBenIUtS1W5wT5fymga1WS5A6nIjbCnQo=
Subject key identifier:   26:30:DC:6F:20:1B:D2:3A:92:2C:A7:A7:1F:5B:31:DD:07:03:A2:BC
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285849D85F938C7A3246C8B0C60060
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a736b29b-8772-3206-a73f-e395ff229dfe.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     32613
IP address blocks:        23.19.52.0/24 maxlen: 24
                          23.19.53.0/24 maxlen: 24
                          2607:f5b5:2::/48 maxlen: 48
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:93:8c:7a:32:46:c8:b0:c6:00:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=199350dc-585a-4a94-a54b-e6df535e3d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8a:9a:4c:ca:1c:78:9c:37:9b:33:2c:56:89:
                    96:38:7b:69:b6:00:5f:4e:76:49:a7:dd:11:f2:00:
                    ee:e1:ee:cb:e7:1b:df:cb:6f:f8:7e:5b:6a:c7:21:
                    f3:ae:c6:fd:bf:ae:ec:bd:04:62:cd:92:3e:23:60:
                    5b:6d:d2:36:0c:37:c0:85:75:15:c8:c6:ab:fc:06:
                    bd:ed:e0:69:48:91:9e:19:6b:77:e0:75:4f:8e:a0:
                    d1:9e:06:fe:7f:8a:4b:a1:81:b5:02:86:ae:e7:26:
                    67:03:9e:44:29:91:ba:17:ce:78:f5:b4:dd:03:87:
                    0c:75:08:87:4b:bc:e1:20:10:82:ff:53:c9:3e:73:
                    46:03:02:10:e6:42:4e:ee:9a:97:1d:49:fc:50:b1:
                    89:b1:4f:ee:41:e0:9b:7e:82:73:45:9a:3d:58:79:
                    ff:7a:3d:51:30:70:22:1e:72:60:26:07:c9:e1:6a:
                    39:ff:43:de:6d:74:19:52:04:20:79:5d:1c:a0:d7:
                    c6:35:4a:aa:80:4f:f9:f4:61:c7:57:0e:98:e8:5c:
                    59:91:ea:dc:b8:9a:27:26:f6:7b:54:0b:06:92:f8:
                    51:a3:b5:18:dc:e6:69:33:b2:25:92:7d:42:8b:b6:
                    4f:50:01:6c:88:58:4d:62:14:1d:94:90:d7:09:15:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:DC:6F:20:1B:D2:3A:92:2C:A7:A7:1F:5B:31:DD:07:03:A2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a736b29b-8772-3206-a73f-e395ff229dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/23
                IPv6:
                  2607:f5b5:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:0a:7d:cd:3a:88:d2:f0:cb:98:55:cb:10:04:48:65:12:79:
         7c:fc:34:0e:75:6e:22:d3:72:9a:53:2e:2e:78:1a:cf:5a:d9:
         18:17:06:e1:48:67:f9:37:0d:96:58:b0:a5:c9:85:e7:01:ec:
         e2:57:80:97:4e:6d:c0:a0:4c:b6:85:99:84:e0:27:59:56:39:
         44:e9:1a:c3:5f:db:5a:33:07:97:b9:8d:36:75:24:66:87:e2:
         e8:c0:29:94:4f:46:79:9e:50:7c:93:f9:11:ba:34:5d:ea:96:
         95:89:be:ac:a4:f6:98:78:9f:71:2c:ba:aa:99:46:17:9b:15:
         f2:de:38:07:fe:16:31:d0:e7:61:d0:1f:85:ad:5a:7e:a5:77:
         48:c8:85:77:88:e1:b2:21:5f:87:37:bc:35:f4:00:af:05:53:
         25:cc:56:d1:a3:f8:88:de:2f:24:85:5b:e8:21:29:5e:0e:2b:
         bb:6b:30:d2:2e:66:ae:84:34:b0:43:18:bb:7f:d1:eb:33:45:
         51:46:ff:2d:fb:3c:fe:a9:2e:c6:8f:8c:73:8f:e4:a8:5f:5d:
         02:d0:65:13:2b:8d:ad:56:8c:49:45:c9:0f:fd:2c:e6:ff:d3:
         11:79:32:5e:75:79:12:59:09:6a:e6:93:f9:d7:6d:e9:e2:ad:
         e5:b5:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:16:17 2025 by rpki-client