Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa
File:                     de537886-8589-3acb-bce9-e8d5e7561ee1.roa (raw, json)
Hash identifier:          v2vbBRoGInfXEAjSpuG0m2F0ubMr0bddms5mpnEJwOo=
Subject key identifier:   F8:E2:34:1D:13:6C:FB:27:16:08:2D:D8:24:B5:D6:33:24:32:83:1C
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285849D594EE7D19B0767280554B00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     60781
IP address blocks:        23.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ee:7d:19:b0:76:72:80:55:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=6f2617db-714e-4224-8386-58754a4937eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:16:56:44:78:ed:4b:f2:94:e6:57:91:97:
                    7e:20:0e:3d:a6:ad:ec:dd:9e:3f:d7:6b:ab:04:74:
                    64:fa:f2:91:c6:67:93:c7:eb:f6:6a:0f:e0:79:58:
                    66:63:d7:90:09:37:cb:bf:88:9e:18:cc:26:4d:4c:
                    5f:68:51:a0:db:c6:27:45:00:6b:68:06:05:2d:3f:
                    bb:a5:41:fe:ee:08:e3:f7:29:c4:d3:0f:ca:ee:0d:
                    41:4b:d9:cf:5a:c6:53:68:02:b0:a5:ae:5f:b3:33:
                    e5:40:9c:4a:92:24:c2:02:56:78:a7:7a:71:0f:de:
                    fe:b4:3b:f7:aa:9c:d5:3e:a5:8e:00:33:62:e4:9b:
                    42:eb:46:3d:af:62:97:ad:15:bd:38:4b:d0:89:d6:
                    aa:7d:86:32:b7:8c:cf:15:06:6b:ba:ce:ce:39:e8:
                    cb:03:18:01:fd:86:1c:02:e1:da:e7:43:02:3b:ae:
                    09:bc:58:69:7b:ad:7b:fc:dc:d8:da:16:e8:e8:94:
                    63:a7:3f:24:80:86:d9:5e:2f:f7:60:9b:38:87:6d:
                    e0:3e:6f:42:ac:bd:0c:fd:bd:86:66:d4:8c:8a:e8:
                    48:98:cd:98:8a:9a:32:6f:9f:c0:45:8b:00:30:da:
                    5b:df:e7:af:35:d6:03:2a:3c:18:55:83:6b:94:c6:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E2:34:1D:13:6C:FB:27:16:08:2D:D8:24:B5:D6:33:24:32:83:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:eb:a5:63:34:4c:18:49:df:85:d1:49:ab:83:06:dd:53:82:
         5a:75:a1:cc:68:64:82:4e:0c:78:c2:19:ec:b3:f4:ba:88:5c:
         9d:77:10:bb:63:50:29:ba:cb:bb:42:2b:25:db:f1:4e:9f:9d:
         57:68:72:48:8a:ca:c5:6d:4d:78:66:d2:04:05:9d:d8:df:8b:
         c8:9e:ab:cf:ec:7a:61:18:76:5a:14:0a:5d:f0:d3:20:7b:24:
         d8:bd:22:32:3b:50:bd:82:2d:d1:5e:3d:93:46:9f:99:cc:cf:
         ea:5a:df:cb:02:d5:c8:19:4f:56:a4:5c:e9:09:29:ea:c3:a8:
         85:11:e5:fa:e5:8d:ac:50:a8:4f:2f:32:8a:2e:38:ad:2a:f3:
         09:e6:60:de:71:00:b6:48:c3:2c:a3:99:b4:ca:e7:98:5b:07:
         84:83:0f:6a:db:07:ec:2a:d9:0b:a3:7d:55:cc:7f:f1:a7:e9:
         40:9c:7e:78:98:ce:ce:4f:c8:ad:79:9a:82:a4:e1:c4:b3:93:
         cc:d0:f7:5d:c9:3e:3d:c5:2e:da:68:df:4b:08:c2:ce:02:0d:
         34:81:b3:e5:6b:38:32:3c:32:e0:69:57:05:d2:6c:d3:e6:bc:
         2e:6c:2a:3e:5c:6a:6a:d3:6b:f2:72:60:bf:28:fd:44:12:62:
         94:2b:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:20:03 2025 by rpki-client