Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/6b6443a0-cb19-30e9-83ff-997349a7b259.roa
File:                     6b6443a0-cb19-30e9-83ff-997349a7b259.roa (raw, json)
Hash identifier:          nUpQqs6yw+VdetNAx09X6hL6Xz1/wWqnysCTHcIrrZY=
Subject key identifier:   33:D2:8B:89:25:3A:D4:15:14:3D:58:8D:76:51:96:6B:D4:52:52:79
Certificate issuer:       /CN=04c216c1-5924-4a66-9346-a1f215800ceb
Certificate serial:       010D0C9F43285849912F2B71004798BC86F8FE00
Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/6b6443a0-cb19-30e9-83ff-997349a7b259.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     399889
IP address blocks:        23.184.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:2b:71:00:47:98:bc:86:f8:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=031b4b66-a2ff-4ad8-a817-bdc1dc2c6ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:5d:bf:4b:06:04:16:14:a2:a3:fd:58:41:
                    e4:38:12:9f:0c:9d:6e:c7:42:ef:4a:8f:49:49:d5:
                    14:b7:cb:25:8c:0e:d1:ed:8b:e8:5b:1c:cb:fb:67:
                    d0:3c:26:c1:3d:e0:63:35:27:5a:34:09:5e:47:26:
                    d4:9b:35:1a:19:a7:8d:62:93:db:24:84:26:90:66:
                    3b:38:40:61:27:d5:97:33:f8:b9:81:7f:5c:c1:02:
                    ba:ce:0b:c4:89:31:b0:30:b8:fd:05:b2:9a:6d:ed:
                    a9:48:f4:80:44:0f:da:01:8e:69:7e:53:79:a9:8e:
                    e6:64:35:42:1b:f2:2a:df:05:0b:4a:9a:cd:56:a8:
                    9a:ca:2f:39:33:65:39:d1:27:4f:16:9f:54:8b:e2:
                    11:d4:b1:d2:3d:6d:39:b1:31:1b:63:f1:24:ac:de:
                    08:66:d0:00:82:cf:87:7b:26:37:ce:32:49:72:15:
                    5a:b5:71:cc:56:ac:f2:09:32:99:ac:9b:a2:26:b2:
                    13:63:f8:1a:cc:87:cf:66:fd:2f:6b:c4:b3:1e:95:
                    76:db:75:51:67:8b:d0:1f:42:e9:1f:4b:71:0a:80:
                    eb:9f:09:b2:45:78:3b:6e:b8:9f:51:92:aa:19:b0:
                    ba:6a:f0:71:a6:1c:15:db:13:96:4d:1c:68:39:d7:
                    78:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D2:8B:89:25:3A:D4:15:14:3D:58:8D:76:51:96:6B:D4:52:52:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/6b6443a0-cb19-30e9-83ff-997349a7b259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl

            X509v3 Authority Key Identifier:
                keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:85:ff:4d:72:6e:84:6f:04:8f:b5:04:1e:31:29:69:97:e9:
         54:19:bd:d3:af:3b:27:fa:7c:46:ec:92:cb:5c:aa:49:ac:77:
         87:de:56:ab:6c:4a:52:da:2a:0c:0d:b7:a4:8b:81:a0:31:70:
         d2:e2:0a:2d:32:0b:c5:25:99:32:7f:7e:4e:2a:21:6a:1a:ea:
         da:f8:c7:36:b7:a1:dd:04:15:f8:60:7d:a3:9b:a3:91:c6:d7:
         b0:87:04:ec:da:40:ad:74:85:a7:32:b0:1e:7a:3e:e8:68:5c:
         4a:0a:6f:7c:d6:7e:4c:d2:23:1a:ff:55:fd:8a:51:d0:be:2e:
         c0:dc:ea:c7:75:9c:1a:cd:44:9b:8a:bf:97:71:8e:a8:71:3e:
         fc:f4:d2:e4:f8:8b:21:06:11:8c:f4:56:c9:9f:66:b1:11:54:
         1e:69:59:2c:d5:ae:1c:15:cc:88:98:7c:01:aa:80:1e:a6:e0:
         3c:85:0d:a8:3d:c6:a3:49:f7:11:8d:d7:04:7d:01:14:f7:c6:
         89:8d:1a:0b:ce:55:32:36:28:dd:30:d0:92:e8:92:23:83:71:
         11:2c:80:db:10:bb:4f:a1:78:1c:09:76:8b:00:26:90:88:75:
         a0:75:d8:6c:68:88:95:a8:53:57:41:d0:d9:bb:63:e1:d4:94:
         24:28:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:13 2025 by rpki-client