Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/27674023-4476-36dc-a656-b385ed05cbae.roa
File:                     27674023-4476-36dc-a656-b385ed05cbae.roa (raw, json)
Hash identifier:          +vmaWbTVuxxU8MWBx9bi34Pzxz9y7AFYtrITjcROb14=
Subject key identifier:   E2:FD:C6:3C:1C:2B:FB:78:29:63:48:06:F0:A0:D2:99:90:98:B9:57
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584AC0163DAEA75879EBD0B72C00
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/27674023-4476-36dc-a656-b385ed05cbae.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     19257
IP address blocks:        23.252.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:3d:ae:a7:58:79:eb:d0:b7:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=9e8db5e7-1606-4e98-b45e-d9ccf28bb92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:77:c7:7a:83:07:54:ef:c3:8e:03:44:41:28:
                    ae:f8:ed:50:ba:e1:bc:9b:18:24:6e:89:ca:a3:bb:
                    42:98:e5:f1:bc:85:f3:11:b4:6f:05:f7:7d:3e:b8:
                    ce:ef:6e:a0:54:f6:2e:5f:ce:dd:52:59:b0:ed:0a:
                    7c:64:67:e2:d6:6a:e1:fa:67:a9:74:98:bd:3a:a0:
                    3f:8a:2f:26:c3:30:9d:68:fd:4f:32:ca:0b:10:13:
                    a2:23:ed:ab:cc:f0:f7:de:c2:7d:04:2a:ee:5e:bc:
                    4b:55:6d:f7:b7:be:44:e6:11:da:65:56:62:59:f1:
                    1d:fa:4e:c1:b1:fd:c8:61:79:41:62:89:13:df:48:
                    39:76:82:bc:74:ed:41:a6:86:e4:64:52:c6:1e:e6:
                    74:b3:57:f1:de:91:b6:7b:e0:94:d7:79:2d:22:9b:
                    6c:bc:b5:5e:89:6f:e6:cd:43:d7:29:45:fe:29:28:
                    bd:95:91:47:97:12:d5:ff:6c:11:44:ca:51:22:96:
                    8d:f9:c0:7e:e4:1a:a1:cd:4b:01:ad:d2:1b:c2:c1:
                    72:e3:3f:ad:f4:86:2e:54:f9:e6:fe:ac:b1:90:9c:
                    0d:28:e9:43:e7:fe:69:de:51:d5:74:c4:d1:88:bb:
                    dc:49:73:e4:c0:a6:bf:b0:17:1f:7f:b5:7b:d3:65:
                    5d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FD:C6:3C:1C:2B:FB:78:29:63:48:06:F0:A0:D2:99:90:98:B9:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/27674023-4476-36dc-a656-b385ed05cbae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:40:e7:75:58:90:d6:c1:8e:ef:41:10:58:7d:50:af:8c:3a:
         da:a8:5c:da:13:50:5c:a0:27:5a:e1:1c:9d:c2:9f:ea:7f:f8:
         00:25:4c:5b:8a:fd:26:48:77:f4:71:09:b0:a6:72:67:00:f8:
         05:df:bf:c4:dd:de:67:35:12:4c:81:f4:c8:9c:9c:be:d7:29:
         53:7e:0d:f7:fd:07:06:e5:7d:e0:c5:1f:78:8f:d9:90:f8:20:
         1a:ca:a4:49:9c:7c:e0:b6:45:23:46:e8:14:53:74:61:fb:72:
         f4:98:94:a3:89:63:c4:82:1d:5f:92:d3:03:62:c7:33:cd:b5:
         84:be:e8:a3:5a:1e:a2:f2:17:2a:d4:1d:ee:be:fb:2e:f0:d1:
         72:fe:52:ea:90:d7:d1:0b:58:61:12:d7:fa:b1:4d:07:62:69:
         a6:95:ef:94:f4:52:d0:94:fa:5e:d5:d0:ab:cb:69:f9:6b:f0:
         36:f7:8d:4a:92:38:65:11:39:24:ad:90:b2:95:9d:8d:45:02:
         4f:41:0b:86:7c:11:46:15:a4:fb:8b:23:e5:fc:21:b5:3c:30:
         d0:b8:0b:76:4f:ce:0a:c5:2f:1e:cf:93:3c:07:c6:c3:23:ec:
         e7:61:88:b0:cb:35:a8:50:4f:ab:61:d8:f3:c4:b9:7d:05:5b:
         e5:ab:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:20:53 2025 by rpki-client