Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/a776eccc-d7da-36ff-b1c7-e4d6ee8deac6.roa
File:                     a776eccc-d7da-36ff-b1c7-e4d6ee8deac6.roa (raw, json)
Hash identifier:          JZeQCXdsSw+gbcp9zzDE6vva3X1bEjaQk6vTJs/oaFw=
Subject key identifier:   DD:5E:8E:1B:32:7B:8C:B9:2C:37:E0:10:40:C2:15:7D:60:FC:F9:4C
Certificate issuer:       /CN=f330fac3-f4ae-4421-9305-7e1649195c36
Certificate serial:       010D0C9F43285849A97682F13737285454579AC0
Authority key identifier: EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/a776eccc-d7da-36ff-b1c7-e4d6ee8deac6.roa
Signing time:             Sun 27 Apr 2025 05:44:13 +0000
ROA not before:           Sun 27 Apr 2025 05:44:13 +0000
ROA not after:            Sat 26 Jul 2025 05:44:13 +0000
asID:                     31898
IP address blocks:        23.136.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a9:76:82:f1:37:37:28:54:54:57:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f330fac3-f4ae-4421-9305-7e1649195c36
        Validity
            Not Before: Apr 27 05:44:13 2025 GMT
            Not After : Jul 26 05:44:13 2025 GMT
        Subject: CN=7ab93219-ea47-45fc-a734-ad82455535c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:ce:cf:02:d8:c4:a7:67:09:fa:6f:ac:f6:
                    1a:fd:22:ca:ff:4d:95:19:66:5f:17:56:9e:86:f7:
                    f4:a9:a9:76:af:e2:0b:af:35:1b:9e:93:2a:3a:62:
                    44:cd:19:3e:df:f5:20:6d:94:ec:ab:64:44:b0:2d:
                    3c:f6:4d:2c:ac:60:de:56:16:24:2d:7c:19:2a:49:
                    67:09:23:08:93:ff:7b:67:38:94:9a:4d:d8:1c:ee:
                    6d:6c:39:ad:59:3f:90:28:08:72:14:55:e2:ed:80:
                    98:ca:bc:53:ba:f1:d1:14:c5:a5:65:66:13:25:68:
                    dc:16:aa:8d:b1:7c:5d:9b:69:b3:39:f4:a7:95:b6:
                    89:2b:26:c1:ac:aa:58:4e:06:8c:9b:c4:0a:00:59:
                    d6:ea:5e:1d:5c:57:17:89:a5:10:67:23:5d:92:0e:
                    23:64:ab:3d:b3:84:cf:eb:2e:92:b9:08:b2:cc:70:
                    ec:a7:93:6a:da:50:bb:8d:e4:6d:8d:e9:61:bd:c1:
                    81:bd:16:12:1e:1a:10:f9:00:fe:7b:ad:c9:06:4a:
                    81:54:d8:90:ec:f8:9a:46:69:5c:e8:2d:10:06:89:
                    ce:de:33:68:36:31:0e:6f:36:30:e1:14:27:a1:20:
                    76:d7:e5:79:d9:dd:3a:7c:1b:80:45:6e:0d:60:e4:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5E:8E:1B:32:7B:8C:B9:2C:37:E0:10:40:C2:15:7D:60:FC:F9:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/a776eccc-d7da-36ff-b1c7-e4d6ee8deac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl

            X509v3 Authority Key Identifier:
                keyid:EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b3:91:f0:93:f9:57:1f:ab:09:ac:5f:24:4e:fe:d4:1a:83:
         16:f9:d8:1a:99:c5:34:66:b5:3b:ee:cf:ef:bb:75:62:ed:8d:
         40:f1:bc:4c:81:49:c6:b4:7d:a2:84:3f:d8:46:26:83:de:94:
         89:f6:83:eb:a4:02:f0:a3:8f:e9:18:9a:31:c2:7e:36:15:e0:
         ad:3c:92:38:da:64:6d:9f:45:08:31:17:96:58:8d:0a:48:93:
         4c:53:c6:7a:3c:2f:57:a9:7a:c2:43:a4:a4:ec:8c:51:65:41:
         ec:6b:42:3c:5f:34:b2:b2:46:3e:c1:fe:e5:ee:59:fd:f4:c6:
         04:68:72:9c:bb:f2:bd:a3:cc:84:bf:6d:84:a1:b6:6f:a2:bf:
         0f:cd:79:2f:fb:8e:e1:90:67:d6:dc:ee:c0:df:9a:1e:79:fd:
         3d:d5:c8:d6:d8:86:70:ad:53:96:e1:ce:a6:63:ef:a1:1d:0a:
         9e:fb:51:89:6a:eb:98:34:64:73:ce:08:f6:ab:91:c2:51:6e:
         e1:32:cb:ba:0e:03:ac:4d:a7:5c:43:1e:2d:03:1c:a0:96:69:
         8c:8c:88:30:d9:c2:bc:ff:cd:8f:50:9c:39:2a:79:a2:de:a9:
         00:04:0a:42:58:5a:24:9c:c0:5c:78:7c:ff:be:d3:37:25:46:
         6e:96:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:45:16 2025 by rpki-client