Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa
File:                     72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa (raw, json)
Hash identifier:          czfqAV4IAavrmEn/N90z65sshiNLIw0k2DqdQzTYSwM=
Subject key identifier:   A2:FA:0E:6E:24:8E:C8:CD:A4:6D:45:13:09:41:6A:42:AC:94:FC:52
Certificate issuer:       /CN=25cf742f-4f64-4e51-b004-d972a8dd5948
Certificate serial:       010D0C9F4328584AA590F6207796E2B4F1EB0B40
Authority key identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa
Signing time:             Sat 26 Jul 2025 13:01:04 +0000
ROA not before:           Sat 26 Jul 2025 13:01:04 +0000
ROA not after:            Fri 24 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        23.129.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:90:f6:20:77:96:e2:b4:f1:eb:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf742f-4f64-4e51-b004-d972a8dd5948
        Validity
            Not Before: Jul 26 13:01:04 2025 GMT
            Not After : Oct 24 13:01:04 2025 GMT
        Subject: CN=d4292a22-eb9d-4c09-a7fb-7f1cec422ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:83:0e:5c:47:c2:bc:f0:40:df:85:84:5d:
                    c4:98:5b:60:b3:bd:13:12:8f:ae:db:44:4e:5a:4d:
                    18:7d:f7:7e:bb:2f:e8:ec:18:bd:c3:cd:5b:60:e6:
                    57:d4:00:fe:58:d9:91:6f:d4:11:95:9f:9d:b6:d6:
                    78:58:dd:58:ab:d6:20:48:02:28:1d:da:93:58:8c:
                    81:a6:95:37:b7:ab:1d:b4:46:7c:47:d3:98:be:8f:
                    89:6c:44:ae:af:5d:f8:49:bc:3b:5c:aa:46:57:38:
                    75:9a:cc:0f:79:93:8f:5a:04:f7:f1:d5:43:41:e3:
                    b1:b9:32:1b:c2:2c:6c:af:e8:4c:fc:5d:1d:49:c8:
                    b3:c5:d1:17:aa:fe:5c:dd:ab:e9:3f:7f:57:26:de:
                    07:8a:ac:19:0a:e4:31:21:6e:b2:65:37:47:b1:83:
                    d5:d2:f5:0d:a1:5c:d5:c5:71:20:06:3e:aa:b3:76:
                    59:75:c4:0e:0d:3a:48:02:7f:20:9b:0c:7e:a7:73:
                    45:d9:56:e6:29:01:4d:4a:1a:3c:33:c1:d2:84:f7:
                    e3:e6:23:35:9b:90:fb:d2:7a:64:c0:02:0f:bc:f4:
                    1a:f0:40:b8:9a:a0:b1:72:72:34:21:d3:b3:79:67:
                    e5:3b:28:40:93:ab:ab:89:98:96:da:00:c0:8e:a3:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FA:0E:6E:24:8E:C8:CD:A4:6D:45:13:09:41:6A:42:AC:94:FC:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl

            X509v3 Authority Key Identifier:
                keyid:07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:5f:04:17:d5:a9:d1:5a:16:c6:9c:f6:e8:1d:a4:c2:08:
         a3:79:97:95:aa:b2:ac:e3:41:49:49:7c:1b:0f:76:ed:28:2c:
         3d:90:17:07:af:c9:79:e6:02:24:51:5c:e6:da:83:00:f1:fb:
         73:89:0e:c3:b4:2c:c7:fc:2d:11:5c:b4:e6:8b:12:23:26:cb:
         1b:e6:da:18:fc:ed:3c:4e:5b:5c:96:a0:ea:51:7b:d8:f5:de:
         90:95:29:b2:7f:4f:85:40:8c:2d:3c:b8:f9:df:ad:fd:01:a2:
         aa:b6:23:ed:54:9b:c3:c3:d1:1b:cc:a4:c4:a9:01:de:3c:67:
         da:39:6e:4c:01:54:5d:e7:2b:f5:e3:df:bb:fc:f4:a2:3a:c7:
         3b:a8:7e:b8:ee:e5:5e:a0:ae:40:99:08:62:a7:e7:93:30:6f:
         09:44:a6:cf:4a:c9:95:b5:27:fc:b5:49:41:d9:13:a9:ee:44:
         7f:93:bd:d2:78:ba:19:f0:1d:f4:17:3d:71:c4:62:5f:71:14:
         ba:2d:5e:2a:02:c9:73:1c:6c:bb:9f:22:8e:07:43:59:05:f4:
         f5:31:2c:69:33:f5:85:24:5d:f1:26:0c:24:a5:ea:cc:02:56:
         f9:35:d0:f6:27:3c:de:8d:bb:38:70:42:53:9a:17:0f:ad:ee:
         94:23:05:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:52 2025 by rpki-client