Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/b5490758-29c6-3dee-8f6b-3a687067e265.roa
File:                     b5490758-29c6-3dee-8f6b-3a687067e265.roa (raw, json)
Hash identifier:          k7nmVzX49p2SQ/ajzWatsHHJmxlThjUFw0xYydvym5o=
Subject key identifier:   3E:40:5A:2A:4A:21:9A:BF:AB:2C:C2:1A:41:13:1D:08:38:8C:07:F4
Certificate issuer:       /CN=5a050d35-445a-48e3-baa6-4d4bdc3fa308
Certificate serial:       010D0C9F4328584AA590F43CEBB273BE2E2F8300
Authority key identifier: EF:49:AA:6A:1A:20:F4:AA:DD:A0:BF:67:27:F9:10:63:23:D8:9C:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/b5490758-29c6-3dee-8f6b-3a687067e265.roa
Signing time:             Sat 26 Jul 2025 13:01:04 +0000
ROA not before:           Sat 26 Jul 2025 13:01:04 +0000
ROA not after:            Fri 24 Oct 2025 13:01:04 +0000
asID:                     152179
IP address blocks:        23.137.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/5a050d35-445a-48e3-baa6-4d4bdc3fa308.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/5a050d35-445a-48e3-baa6-4d4bdc3fa308.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:90:f4:3c:eb:b2:73:be:2e:2f:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a050d35-445a-48e3-baa6-4d4bdc3fa308
        Validity
            Not Before: Jul 26 13:01:04 2025 GMT
            Not After : Oct 24 13:01:04 2025 GMT
        Subject: CN=4a25f5e2-f2d4-451a-8acc-befd0fc0ec4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:26:8b:2c:41:0e:33:85:9a:2f:79:cf:f6:
                    17:16:b0:7b:7e:89:6c:eb:64:e8:33:3d:47:f2:6f:
                    f8:4f:17:24:10:fb:7a:35:e4:89:ee:1f:08:03:5d:
                    6c:03:7c:f2:03:a1:33:5d:ee:be:5c:b7:4d:c5:bc:
                    ea:07:7f:f4:14:2f:9e:c0:2a:26:bc:56:88:7e:25:
                    7d:6e:b7:a0:79:f2:f3:e6:5a:63:f6:4e:10:0e:76:
                    6d:f3:91:b1:31:47:03:ad:bf:03:b9:45:ff:09:47:
                    a4:ed:12:c3:64:c6:61:cb:19:25:89:9b:12:d3:a9:
                    21:54:97:b4:13:70:8a:3b:73:a1:4d:32:d6:f2:29:
                    64:9b:a9:3e:20:6f:69:c4:43:3b:a6:71:28:08:92:
                    b6:c5:7c:bc:f3:bb:ef:d6:75:f9:07:dc:1a:b3:e1:
                    37:cd:0a:17:fd:34:2f:eb:b3:50:7f:4e:be:f2:55:
                    e6:32:f5:a9:d4:80:a9:c4:a5:9b:7a:07:a3:bc:34:
                    a7:b4:1d:18:51:b7:cb:e7:ac:61:62:ac:e3:35:5c:
                    5c:28:fc:cb:66:7c:57:cc:5f:14:a4:78:39:7e:50:
                    aa:06:f5:c6:5c:88:e1:c2:fe:5d:56:35:49:7a:ba:
                    13:a9:d5:c1:ea:ff:72:3e:b1:0c:a7:79:2e:f2:09:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:40:5A:2A:4A:21:9A:BF:AB:2C:C2:1A:41:13:1D:08:38:8C:07:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/b5490758-29c6-3dee-8f6b-3a687067e265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/5a050d35-445a-48e3-baa6-4d4bdc3fa308.crl

            X509v3 Authority Key Identifier:
                keyid:EF:49:AA:6A:1A:20:F4:AA:DD:A0:BF:67:27:F9:10:63:23:D8:9C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ba:06:0e:ed:3c:97:9c:a7:c9:e5:a9:b0:4a:45:78:d2:cb:
         77:85:62:b0:a7:36:1b:ad:13:cf:a2:6e:02:37:67:22:e1:aa:
         c3:f5:c3:ce:94:0f:f5:28:13:7f:fa:aa:cf:ba:6e:a4:4b:c3:
         1d:43:ea:61:c5:57:26:0a:e0:7b:6e:46:03:45:55:cb:e3:43:
         53:05:03:3e:69:2f:2e:b7:bd:97:39:12:17:00:1f:13:b3:2a:
         36:99:f7:95:fa:55:7b:b8:38:93:ea:59:9a:c8:e1:20:ab:1e:
         b9:6c:9b:e8:03:63:2e:a8:92:d9:2e:c3:da:5e:1e:0e:7e:a2:
         a1:f8:ee:70:5d:13:3e:c4:a3:df:0a:84:76:7b:53:2c:27:3c:
         3d:06:bf:2f:3e:72:41:1b:0d:d5:f2:5c:82:44:9f:7a:73:b3:
         10:6e:dc:9f:94:15:d0:72:30:b6:5b:97:6a:ef:d1:b5:d8:a9:
         82:4e:fa:95:8c:5b:c6:ca:c7:cb:3e:9f:69:36:eb:c5:02:de:
         87:11:de:06:8f:bd:02:b3:6d:b7:12:4d:6f:a1:ae:39:a9:fc:
         42:b7:f3:51:c1:49:02:fb:73:37:2d:7e:6c:94:54:00:fc:db:
         94:55:de:26:d6:f4:75:86:d0:40:37:bb:88:62:78:7e:95:3e:
         88:02:87:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:31 2025 by rpki-client