Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
File:                     57901a8d-3025-36c9-bed1-42964cd3980b.roa (raw, json)
Hash identifier:          slMfNwIWRCpHNPQzHFw4O0bT/LNI/M8AIRkhNKRSXio=
Subject key identifier:   34:81:73:90:A5:F1:6E:22:A0:FB:7B:89:BB:B3:08:5B:B3:87:EB:4A
Certificate issuer:       /CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
Certificate serial:       010D0C9F4328584A8575FE3642C420F5ECA8F9A0
Authority key identifier: 0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     54785
IP address blocks:        23.160.104.0/24 maxlen: 24
                          2602:fa57::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:fe:36:42:c4:20:f5:ec:a8:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=85cee98d-0827-4fef-afe0-a1a156aa52bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:21:13:c2:7f:3f:5b:a0:43:ae:26:a9:53:32:
                    c3:0f:48:2c:64:79:df:49:27:17:4c:10:e3:fb:de:
                    ec:1f:b4:4f:d1:62:2c:a3:0f:aa:a4:15:04:bc:ac:
                    78:47:7a:c9:7e:15:9e:e9:a1:07:da:75:eb:b6:7c:
                    87:7d:26:a5:9f:95:f9:7e:13:f1:ec:5c:51:f2:96:
                    b1:61:39:c4:20:23:19:7c:3f:7b:83:11:94:93:86:
                    c1:3a:2a:be:df:aa:d7:8e:d1:eb:d7:8e:b3:09:ee:
                    bc:0e:31:14:3f:29:6d:5b:96:77:7b:eb:f6:54:e1:
                    2c:a0:57:aa:2f:50:a3:5c:60:fa:00:78:6f:59:23:
                    1c:18:d2:07:ea:f6:8a:e5:a8:0f:46:20:4e:0b:61:
                    0a:61:32:71:1a:29:29:32:0a:03:a3:85:53:65:b7:
                    e5:c9:93:56:98:52:72:ee:54:ac:89:05:51:d3:a5:
                    f8:f5:e9:1b:78:8e:43:ad:31:28:5a:97:60:81:84:
                    61:60:37:da:1e:ef:50:ff:39:9b:25:e2:74:e7:84:
                    21:bf:61:b8:6c:35:bd:2b:2b:f2:c8:72:5c:73:de:
                    8c:28:49:7a:13:d5:62:c8:21:c4:d2:7a:f9:14:5e:
                    40:d7:93:3c:da:e9:ea:43:76:d4:4f:c0:a2:92:b6:
                    ea:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:81:73:90:A5:F1:6E:22:A0:FB:7B:89:BB:B3:08:5B:B3:87:EB:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl

            X509v3 Authority Key Identifier:
                keyid:0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.104.0/24
                IPv6:
                  2602:fa57::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:72:69:e5:ed:08:bd:3d:48:c5:93:7e:e1:28:6a:2c:3c:bd:
         60:d7:bd:fc:1c:01:5a:71:e1:12:53:fb:b2:d8:5f:ad:e7:8c:
         86:31:82:a4:6a:97:bf:2f:fd:f6:c7:db:c3:70:3b:fb:73:37:
         2c:38:8a:df:31:32:25:72:12:2f:4f:67:14:77:73:17:aa:87:
         ef:7d:b0:a4:a4:99:33:4a:f8:3b:3d:aa:fb:ea:89:77:52:8c:
         71:57:ca:61:0e:00:7c:0a:64:08:44:ca:ab:0f:16:04:4a:a5:
         1a:09:ce:51:1c:66:e6:8f:24:65:18:1e:12:85:24:e8:15:4c:
         f8:f1:73:13:b5:da:98:d9:7e:8c:4f:5b:bc:78:f9:4a:fc:1b:
         a8:ec:17:78:70:26:a4:71:1a:ae:ad:50:9d:22:03:b3:b6:1b:
         b7:b4:83:cd:e8:71:29:00:18:c5:8d:0c:63:86:f9:7d:06:e0:
         3a:a6:b6:62:0a:76:e9:74:99:da:ec:b6:05:89:87:e8:67:74:
         2d:ac:1f:7c:49:a9:89:7e:6f:0e:23:d7:da:91:91:b9:16:ac:
         28:a0:fb:af:0c:6e:c6:1d:b2:b1:fc:98:d7:3d:cc:4b:21:6f:
         34:ab:14:e7:2e:56:7c:c2:58:b4:fe:35:da:95:bf:f7:48:d5:
         e9:40:47:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:02 2025 by rpki-client