Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa
File:                     6f898a92-27c5-34f5-ab5d-94a7194d0508.roa (raw, json)
Hash identifier:          xXFzFrpWp3ILJypYTLAVinNZcvG2hEVbC2N2EFEJxEk=
Subject key identifier:   99:DB:7B:63:E8:95:18:01:A2:9D:D3:F2:55:BE:2E:86:D1:6B:10:EB
Certificate issuer:       /CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94
Certificate serial:       010D0C9F43285849D42F94384152446B21C0ED00
Authority key identifier: 06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     10753
IP address blocks:        23.132.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:94:38:41:52:44:6b:21:c0:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=7003f523-5217-4b51-9449-59f79e71f98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e8:9c:18:bf:9a:30:14:50:48:06:1c:e1:08:
                    7b:76:b3:17:6d:46:e9:4c:97:ac:27:8f:8e:3a:6a:
                    86:4d:ba:6a:b4:79:cb:3e:3d:6a:de:32:e9:64:0e:
                    3b:b9:f7:02:b3:85:6e:17:a5:c4:6a:1b:aa:3c:18:
                    f0:a9:9b:10:d1:af:81:f3:d5:9d:5b:4b:82:e1:e7:
                    0f:ff:4a:af:c3:52:18:37:a4:3e:41:e2:46:64:ce:
                    c7:8f:bd:13:03:24:31:57:49:42:6b:62:63:ce:a5:
                    5f:3c:9d:cb:f1:60:47:c5:b8:7e:d7:68:cd:53:84:
                    5f:40:bf:94:7b:d6:aa:52:08:c0:6f:1a:32:66:33:
                    3f:a8:18:a0:29:3c:71:89:0c:13:ec:e7:d0:00:4a:
                    cf:81:b5:34:e0:54:fb:7c:a9:e7:82:85:f7:20:90:
                    f2:1c:a7:2b:8d:15:da:c0:20:46:e9:35:3e:1e:25:
                    d7:15:4f:29:b0:2b:33:45:7f:4d:2d:be:bd:0f:8b:
                    1d:a7:9f:c7:18:a6:3e:f6:5b:c7:91:b4:c3:7e:ad:
                    dc:6d:fb:fd:3d:f5:26:81:be:30:3c:d9:51:86:ec:
                    ea:1c:fd:fe:08:0b:de:6e:8d:d0:d1:df:81:40:da:
                    aa:d8:34:48:fc:98:25:33:a3:f9:84:27:7d:63:08:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DB:7B:63:E8:95:18:01:A2:9D:D3:F2:55:BE:2E:86:D1:6B:10:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl

            X509v3 Authority Key Identifier:
                keyid:06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:12:10:04:25:d4:1a:99:70:6c:01:0e:98:96:55:82:4d:e9:
         ad:05:69:92:d0:f0:7c:cb:26:4f:e7:db:98:a9:c5:7c:7e:27:
         ea:3c:a6:5e:f2:a8:97:d4:ce:8a:eb:fe:cd:9e:1a:8f:a8:02:
         f6:50:b0:f3:68:57:f7:8d:cf:7c:f5:42:99:f4:7c:62:ac:2a:
         a0:45:fc:23:58:28:bf:2f:db:16:ce:76:6d:9e:dd:c9:d1:e4:
         cc:d4:a9:fb:e3:09:54:1e:60:13:cc:fb:13:3e:ed:a1:e5:f5:
         8b:92:8e:1c:9d:b3:32:44:46:4d:28:ff:e1:ec:51:f1:5a:68:
         17:d5:be:db:5d:6c:25:14:ff:72:e0:0d:63:7d:15:f8:fe:3d:
         54:fa:d7:a9:11:58:7b:87:b4:00:d3:7b:b5:ba:df:c2:3d:ed:
         66:c5:60:7c:84:4b:00:1a:0d:89:7d:9c:19:a5:62:6e:fb:b3:
         26:47:94:c2:48:b2:b5:f2:38:c5:ba:ea:e3:ee:e9:5c:1f:33:
         d1:ee:14:e5:1b:4b:6a:8c:77:7f:c9:80:0e:0c:63:fa:07:29:
         bf:b1:b8:d7:c0:fb:4d:74:70:48:3b:3f:f6:81:18:7a:55:f8:
         fd:63:a8:d2:95:b5:0c:fd:5a:16:0d:a8:80:21:68:5d:c4:97:
         b0:2e:79:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:38:45 2025 by rpki-client