Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa
File:                     5e1fab74-1778-30f0-833e-7e9606d6d74e.roa (raw, json)
Hash identifier:          KT/olt6lGzIpKtMf0XINf9Kw0QU/l+tNq59+3+bX8XM=
Subject key identifier:   0B:B5:B7:92:25:F9:48:A3:43:C7:D0:C6:0A:7C:28:45:73:81:08:E7
Certificate issuer:       /CN=4ee37184-86de-48c9-af35-5d102d140fa6
Certificate serial:       010D0C9F4328584ABEB0D97933CD006584590300
Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     401538
IP address blocks:        23.130.156.0/24 maxlen: 32
                          2602:f766::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:d9:79:33:cd:00:65:84:59:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=ad026a57-ed70-46a0-baa4-7c12514cb134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:06:62:8a:5b:aa:0a:50:9d:2a:16:91:8b:6f:
                    be:fd:1a:b8:3e:35:02:1d:11:82:94:9d:e5:34:22:
                    a4:e2:1a:f8:af:d7:c7:49:d2:9f:3c:d9:52:94:2c:
                    6f:b6:0a:45:91:67:21:c8:7a:6d:4f:b0:29:be:a7:
                    03:f3:51:d9:d9:24:3e:c9:17:e1:40:fd:f2:31:35:
                    2c:1e:33:da:77:01:c6:82:8c:7b:47:ae:e2:9a:a7:
                    6c:84:da:38:ae:de:6b:50:13:be:89:41:d7:89:8a:
                    28:44:ff:17:f2:9b:d3:a3:dd:07:b4:33:ce:21:e0:
                    c4:ed:15:b6:49:d4:0c:52:b7:6b:eb:25:d3:e1:e5:
                    57:90:ad:4a:43:ef:e4:6d:5a:4c:63:a0:65:f1:54:
                    42:4f:0d:86:2e:85:7e:14:5d:ca:51:f0:95:bf:cf:
                    f3:38:a0:4e:ea:cb:0c:53:a8:98:4c:0f:f9:27:bd:
                    67:6e:14:1d:bf:28:35:9a:43:80:e3:9a:96:2c:5b:
                    ee:44:99:ea:85:57:9d:1f:0f:80:17:dc:37:09:f0:
                    40:ac:b3:25:aa:89:26:56:9d:64:2e:d6:ee:44:1c:
                    96:7b:57:27:3e:70:1c:c1:9c:6d:58:5f:39:70:61:
                    81:67:e6:7b:9f:7c:77:ed:c2:35:38:51:20:96:dc:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:B7:92:25:F9:48:A3:43:C7:D0:C6:0A:7C:28:45:73:81:08:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl

            X509v3 Authority Key Identifier:
                keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.156.0/24
                IPv6:
                  2602:f766::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:96:12:f2:24:73:18:e8:d1:3d:48:af:69:bc:62:55:82:
         52:d6:89:9f:24:2d:d5:af:02:fa:18:69:63:42:2a:a3:86:9d:
         74:c4:55:f1:0f:0b:95:8a:a5:30:ea:2c:b9:9c:12:1a:41:32:
         c6:06:03:ef:54:f9:51:f4:b0:2b:fa:74:fb:1e:17:98:1a:eb:
         50:93:25:89:9f:5e:0b:5d:f4:b5:fe:e2:cc:c7:04:c6:b5:5b:
         66:0b:1f:bc:8e:b7:76:a9:33:d0:92:08:85:c2:e8:38:1c:15:
         8c:36:c7:9d:64:16:ed:25:66:7e:ee:27:e2:75:2b:46:d8:ff:
         85:9f:0e:d1:24:b3:6b:50:82:57:9b:e0:39:32:5e:ff:f2:6e:
         9f:0a:29:f7:9d:49:ea:ee:38:03:1c:67:01:bf:e7:73:67:73:
         7b:3a:4e:d9:c7:d3:be:ef:cf:c1:d1:60:94:7b:d9:e0:9b:f8:
         b6:da:aa:61:82:e5:75:47:8a:08:f6:21:a5:f0:6f:54:b0:75:
         9d:0a:df:4e:5d:a4:25:f3:c0:01:c9:b8:09:05:ae:57:f5:b5:
         8b:7f:cd:a1:89:5e:b7:04:b9:d1:be:f9:0b:99:bb:5e:13:00:
         3a:44:05:8b:f3:7b:b9:55:84:fa:2f:73:2e:00:7e:6c:13:2f:
         61:5a:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:31 2025 by rpki-client