Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa
File:                     3d670424-fd95-3967-bba2-b42dd43d4732.roa (raw, json)
Hash identifier:          wdBG2GUDfF8j2xhMJ9poSumzP4kUs7PY6BcldxNROkA=
Subject key identifier:   3E:8A:6A:85:47:AD:FD:29:D7:F7:4B:4A:A4:97:60:98:35:0C:F2:78
Certificate issuer:       /CN=4316bfc9-2a2c-4138-ad58-ab51d7cc37d6
Certificate serial:       010D0C9F4328584AA9C0DB0CB29E333355406C00
Authority key identifier: 12:E2:5C:34:5F:1B:37:D1:DC:89:E2:16:D1:1A:07:C0:B5:BD:4C:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     212512
IP address blocks:        23.185.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:db:0c:b2:9e:33:33:55:40:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4316bfc9-2a2c-4138-ad58-ab51d7cc37d6
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=9ccc2bcf-c6fc-47e1-9c35-59832403d578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:f8:62:c1:ad:47:9e:d9:e8:a8:a6:55:bf:
                    07:aa:fd:16:82:a3:39:c9:95:84:4d:10:22:68:86:
                    c1:5c:f6:38:90:40:aa:f4:1f:02:b9:67:30:91:98:
                    e1:08:0d:9a:c4:e3:5d:f6:0b:ea:c9:c8:fc:2d:08:
                    47:a5:83:08:2a:78:fa:5a:0a:6d:3a:44:e9:4b:ff:
                    1d:93:fb:f2:b5:10:f6:6a:64:10:b7:99:db:d6:5e:
                    44:d1:8e:ad:8a:15:a7:81:2a:28:97:c4:06:c4:aa:
                    37:03:4a:38:50:9c:97:e4:f6:79:43:f3:bc:3a:78:
                    c3:fb:41:ce:1e:ca:eb:b4:e8:fe:55:f8:bc:8d:b0:
                    d4:34:6f:f5:ea:52:c0:e3:36:51:65:7a:c3:8d:b1:
                    b5:eb:c6:88:34:a2:08:2c:be:69:63:7b:a5:b8:a6:
                    2c:86:04:05:9e:fb:69:8b:0c:c3:b0:cd:c0:9e:a5:
                    b5:a1:4a:d5:73:b9:40:0e:62:c4:23:89:37:9f:c3:
                    0f:77:58:d7:57:99:83:7e:a4:75:a6:a8:c9:8b:ad:
                    7c:a3:6e:03:72:6c:89:df:59:b4:b8:f1:55:e0:bf:
                    cc:55:b1:38:af:d2:9f:ea:9e:ea:00:c6:ec:13:15:
                    85:2e:48:72:a2:ab:3e:fa:d4:e0:ce:ec:01:58:11:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8A:6A:85:47:AD:FD:29:D7:F7:4B:4A:A4:97:60:98:35:0C:F2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.crl

            X509v3 Authority Key Identifier:
                keyid:12:E2:5C:34:5F:1B:37:D1:DC:89:E2:16:D1:1A:07:C0:B5:BD:4C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0d:3c:45:17:b5:cb:b4:c9:0c:0f:24:70:37:4c:90:ca:78:
         77:ba:ba:43:7b:93:a7:d7:4c:cf:b3:e1:58:fe:34:45:87:27:
         82:81:07:00:93:b4:a9:e0:aa:c0:3f:de:a6:d9:31:13:c2:3a:
         c9:99:41:7b:5f:84:62:c1:c0:3f:90:f6:9b:93:5c:31:7d:10:
         e4:a9:5a:95:61:cb:e5:7c:c4:c5:d8:12:e5:6c:8e:9f:cd:96:
         ee:40:20:23:ae:6d:de:d7:1d:45:a2:26:ca:14:d5:5e:9d:e6:
         f4:e0:d7:31:e0:1e:b7:55:14:23:58:32:19:45:f9:03:85:49:
         5c:7d:f0:55:ad:02:7a:e6:dc:76:2c:91:d6:93:bf:bc:49:ff:
         9d:e7:a6:88:da:40:61:d2:f6:50:80:f4:ae:ca:9c:52:de:a8:
         30:66:a9:80:5e:53:5e:c2:69:b6:d2:03:03:fa:a9:84:d5:d9:
         74:b3:42:57:f8:cc:62:0b:17:d2:b7:e3:d8:66:c3:e3:37:b3:
         b2:50:e8:7e:44:4c:bd:cb:f9:41:26:cb:63:4a:8b:66:93:fc:
         0e:ba:a6:66:05:19:62:c9:45:59:55:ed:71:13:17:2d:60:2b:
         bb:68:5c:f2:5c:9f:95:20:c3:96:10:59:41:86:d6:a9:89:73:
         d2:01:9d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:12 2025 by rpki-client