Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa
File:                     ebb0be46-5340-3989-b64b-7de27da0d802.roa (raw, json)
Hash identifier:          wecdvfG9XIDtkXRg4f3V3ELKWwthX4QdIpcpi2DuCFQ=
Subject key identifier:   DC:1F:28:88:F0:6A:A3:C2:08:17:5C:5B:D6:9F:5D:4A:17:FB:C5:82
Certificate issuer:       /CN=21f498b5-84f8-4255-a971-76e62e3a212d
Certificate serial:       010D0C9F4328584A2C200C9280DC65C8AC3BE0E0
Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     29803
IP address blocks:        23.136.100.0/24 maxlen: 24
                          2602:f6ab::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:0c:92:80:dc:65:c8:ac:3b:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=447e63dd-d010-449c-8c77-edec1fefa64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:c6:82:e6:a5:a1:2e:57:f1:d7:66:f9:81:
                    7f:92:bf:47:17:cf:3e:f0:bd:06:59:a0:1b:9a:77:
                    94:ad:e0:68:78:8b:9b:64:76:ab:0e:65:cf:19:02:
                    93:09:f2:db:96:91:37:48:04:0f:10:38:27:7b:94:
                    1d:79:ca:8c:2a:a7:30:28:51:8d:d1:7f:ef:48:0e:
                    16:8a:1e:d4:b1:40:59:ac:81:5c:b5:fb:02:d2:88:
                    9b:73:3e:14:98:15:26:b0:f2:77:ee:18:23:10:df:
                    7d:a1:97:55:24:45:f1:55:5d:cb:1d:6a:39:75:c1:
                    cd:77:b9:d1:c8:6d:d3:58:a8:a7:22:83:d1:ff:f3:
                    c3:7f:8f:1f:dc:93:aa:c6:33:83:4e:38:50:8d:70:
                    69:8b:5e:7b:34:32:c3:0f:a7:9d:05:2c:0c:b4:96:
                    0c:d0:81:35:3d:6e:16:63:72:73:ca:31:72:05:c8:
                    ae:85:94:7e:08:82:90:46:35:da:07:e9:80:1b:20:
                    55:e4:12:f2:5b:26:89:88:4f:8f:5b:b5:56:39:1b:
                    67:e1:78:24:af:3c:a9:cc:b3:5d:16:f2:ae:62:82:
                    54:de:a8:ce:89:75:27:25:66:88:c4:4d:f6:bf:12:
                    17:07:4d:f0:9e:62:a9:57:15:c3:26:20:5b:e8:3d:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1F:28:88:F0:6A:A3:C2:08:17:5C:5B:D6:9F:5D:4A:17:FB:C5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl

            X509v3 Authority Key Identifier:
                keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.100.0/24
                IPv6:
                  2602:f6ab::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f4:c5:1f:2b:64:75:13:f2:a4:7c:06:62:70:71:c9:a3:26:
         42:bf:a4:3f:eb:4b:0b:95:9f:da:ea:5b:3a:cc:61:b6:9c:ad:
         63:44:90:86:39:cd:4d:c5:5e:89:56:84:86:a5:81:0a:ed:82:
         be:2a:a7:3d:fd:b2:cb:c6:e3:b2:6c:3a:b4:40:c4:dc:92:07:
         7d:d2:d2:59:36:19:80:ba:9c:78:a9:46:3f:46:e1:b0:e4:a9:
         5c:6e:34:2d:2b:11:01:62:58:5c:8d:80:a7:9c:42:35:02:63:
         88:5e:0e:f0:9f:fb:35:48:e1:51:4b:28:83:7e:6f:c0:6f:6d:
         14:64:b0:c1:d9:ce:b5:48:3a:de:d9:c2:c9:43:d6:ff:9d:af:
         d1:6b:84:7f:44:12:f7:48:27:b4:82:66:72:68:78:fb:d8:45:
         0b:d0:ac:f7:d6:29:bc:e7:32:f6:96:ab:ff:af:f9:76:98:3f:
         e7:01:94:94:96:a0:7a:dd:5a:69:64:9b:85:81:2f:72:0e:e6:
         2b:bf:4d:c9:88:60:dd:48:61:9f:c1:74:00:88:d7:17:b9:18:
         8f:ad:99:80:2a:68:36:e2:18:9d:2a:60:75:91:40:8f:a0:b2:
         b4:88:0a:c0:b7:42:82:17:3b:d0:e0:ad:f8:8a:65:f6:19:12:
         1d:74:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:36:01 2025 by rpki-client