Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/81d5d23e-e749-3cdd-90a2-d46ba8244068.roa
File:                     81d5d23e-e749-3cdd-90a2-d46ba8244068.roa (raw, json)
Hash identifier:          TMVc3s0rct3s6/5ikfJrj2QSvjbFRITYzf3laaVSDp4=
Subject key identifier:   63:7B:2F:9B:04:0C:B4:D6:23:59:39:0F:0C:BD:2B:80:B2:7F:D8:08
Certificate issuer:       /CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad
Certificate serial:       010D0C9F4328584AAC8B7BBB0D3313E399867700
Authority key identifier: C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/81d5d23e-e749-3cdd-90a2-d46ba8244068.roa
Signing time:             Tue 29 Jul 2025 01:00:48 +0000
ROA not before:           Tue 29 Jul 2025 01:00:48 +0000
ROA not after:            Mon 27 Oct 2025 01:00:48 +0000
asID:                     53850
IP address blocks:        23.129.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:8b:7b:bb:0d:33:13:e3:99:86:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad
        Validity
            Not Before: Jul 29 01:00:48 2025 GMT
            Not After : Oct 27 01:00:48 2025 GMT
        Subject: CN=a493998a-abac-4730-b815-4127900d9fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:1e:5c:55:fc:f4:6f:ff:46:5b:ed:2f:dd:
                    55:45:de:51:98:2e:80:f0:98:df:bc:9d:f2:f3:01:
                    da:db:60:c2:bd:2c:1c:14:ad:d5:1e:fc:44:59:16:
                    88:0a:06:1e:cd:0a:1d:22:30:24:3a:2a:2a:38:d1:
                    ee:68:44:95:1b:1a:d6:99:1e:8b:7e:ee:a2:81:cf:
                    96:d0:78:2a:2e:5a:27:11:38:14:f8:25:cc:58:ed:
                    c7:39:ce:e8:6d:c6:75:7c:b6:6f:8a:df:47:56:75:
                    f1:35:b9:14:ba:ef:96:00:86:96:e2:08:36:ca:00:
                    57:0e:dc:f1:09:16:c4:43:33:9e:86:d4:19:fb:40:
                    5f:84:be:d4:bc:b9:cd:cc:64:e3:6f:26:e6:8a:94:
                    e2:2b:2b:d2:73:34:13:a4:5f:44:58:97:3c:1a:74:
                    2b:2e:39:7c:bd:ac:90:98:aa:84:51:94:a3:bd:85:
                    8a:63:a4:0b:42:f8:5f:9c:e9:48:44:b2:b9:f0:8c:
                    e1:15:8b:4f:9f:e4:c7:0e:9d:1a:37:6e:4f:c3:e5:
                    be:3e:11:43:7e:d9:40:55:f8:26:65:87:d2:c4:3c:
                    80:09:30:83:c4:e8:09:c1:f4:b2:c1:55:a7:d2:ba:
                    c8:10:fa:7f:53:f8:7a:0c:19:6b:76:95:c9:08:2a:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7B:2F:9B:04:0C:B4:D6:23:59:39:0F:0C:BD:2B:80:B2:7F:D8:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/81d5d23e-e749-3cdd-90a2-d46ba8244068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.crl

            X509v3 Authority Key Identifier:
                keyid:C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4f:ad:6e:ab:2b:16:dc:5f:eb:2d:db:b1:17:bc:ff:c5:94:
         25:43:87:84:13:ce:44:71:3d:56:ff:71:41:9f:db:29:41:eb:
         82:6f:b8:21:2a:c5:f5:ab:44:1e:5f:ca:ad:76:b2:80:ec:ec:
         c3:8d:f0:19:45:83:6f:f8:49:43:99:4c:f1:83:6b:e5:9f:9d:
         7b:06:07:b7:b0:26:bf:d0:b3:ea:26:6e:6a:7d:7c:1e:34:e5:
         54:b8:00:fa:36:fe:67:09:5d:30:a6:f4:45:c9:70:cd:2f:8e:
         c3:7b:cc:2c:d1:f3:b5:43:d2:2a:e1:4a:61:fa:ca:8d:28:be:
         ea:8a:e8:cd:9b:b8:c9:15:8d:9d:ce:fc:ac:22:0e:ec:7e:a8:
         66:fa:26:d1:0f:8d:58:a8:1e:f1:6e:b9:13:3a:3e:df:be:1e:
         dc:d9:b9:bf:ab:68:dc:af:88:43:1b:3e:ea:f6:a2:15:84:80:
         57:5b:51:fb:54:6e:da:74:1a:75:7b:61:8c:4b:17:dd:19:c2:
         6d:44:1b:09:45:80:f0:5d:ec:11:e0:b7:57:d5:d6:16:5f:00:
         b7:5b:82:bd:12:b7:c1:3b:0c:32:52:3f:b9:0f:8e:92:0d:fe:
         aa:06:42:39:1f:12:12:fa:61:de:d7:6a:92:2a:a9:fa:51:06:
         ae:8c:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:21:21 2025 by rpki-client