Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6bdd3fef-8264-3cb8-976f-622fc66ba342.roa
File:                     6bdd3fef-8264-3cb8-976f-622fc66ba342.roa (raw, json)
Hash identifier:          H2mUNjZi3xmfopTYRAsbZE+zmbmYD6T/f2dbqivw2Ok=
Subject key identifier:   F9:BD:FB:90:E7:46:3A:33:4E:A7:4D:49:3E:65:28:2F:5A:8C:04:A3
Certificate issuer:       /CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
Certificate serial:       010D0C9F4328584ABBE62DEEF1004C48299E74A0
Authority key identifier: EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6bdd3fef-8264-3cb8-976f-622fc66ba342.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     15082
IP address blocks:        23.129.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:2d:ee:f1:00:4c:48:29:9e:74:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=db8c689b-1ccb-4483-be5b-aa90a7a968ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:19:49:09:52:fc:da:fe:87:54:c2:e8:16:
                    b2:fe:49:69:89:0a:a2:f6:e4:39:0d:3f:25:a3:4b:
                    25:75:8d:78:c7:fb:a7:8b:5b:ab:fb:3e:74:10:b3:
                    ad:04:dc:78:fe:85:9e:85:28:ec:05:7f:4e:eb:d3:
                    dd:d1:12:2a:fb:2a:34:8c:86:5d:69:ec:c0:aa:20:
                    a0:81:1d:d1:61:f9:2a:d8:6e:32:ad:44:8e:b5:c0:
                    d3:ee:ea:b1:c2:59:1c:cd:cf:f9:5c:db:e6:b8:cb:
                    61:d6:85:ad:ba:86:ad:ca:8b:23:ca:a7:74:20:d8:
                    cc:da:58:88:88:03:b9:70:e5:c0:10:e8:6e:9c:a8:
                    30:c4:02:e3:b4:54:c4:7e:68:e9:9b:7a:cc:2d:d5:
                    a6:ba:b2:bb:2b:ab:56:88:d8:b6:13:78:d8:49:5c:
                    86:af:b7:8a:40:47:7a:9a:c9:a8:31:5e:cc:51:ff:
                    15:37:07:17:fe:f9:21:9d:f2:03:3f:2c:ba:b6:31:
                    5a:7c:0e:7f:75:fe:1a:43:17:4f:a5:1a:9c:d8:15:
                    15:17:79:64:67:57:86:1b:9d:5e:21:e6:b2:ea:71:
                    b0:ff:42:91:b0:3c:14:05:c3:a6:81:92:04:21:64:
                    b9:fd:0f:c7:d1:53:22:97:58:ac:04:3c:94:d4:d9:
                    23:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BD:FB:90:E7:46:3A:33:4E:A7:4D:49:3E:65:28:2F:5A:8C:04:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6bdd3fef-8264-3cb8-976f-622fc66ba342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:57:c0:93:fe:00:96:9a:5c:c9:da:25:f7:fc:b2:78:07:13:
         c5:14:34:40:ed:85:a4:72:3d:d8:96:ff:2a:b2:04:84:b1:ec:
         9f:88:5a:d2:33:6d:4e:eb:71:94:2c:a8:91:8b:dc:e8:06:00:
         42:ca:a6:f6:cc:f1:56:26:e9:6a:a7:25:9a:81:7e:7d:75:8c:
         c9:5a:b4:c4:26:11:a7:69:c5:e3:72:03:a5:78:18:53:cb:f7:
         12:33:10:89:fe:22:b0:13:47:16:49:b6:fc:e1:cd:b7:35:b9:
         39:57:79:32:fe:16:99:63:9e:93:7f:b2:4b:b5:0e:35:1e:9b:
         3b:f2:6c:cd:28:42:d6:f0:a8:1c:54:90:ed:6c:0c:3f:40:78:
         42:48:44:e9:aa:21:85:b6:f4:b3:2c:e7:3d:41:5c:59:58:3f:
         1a:d6:7f:2a:34:cf:de:f5:29:68:70:0d:25:20:04:72:0d:ab:
         52:12:19:80:c6:a7:f1:ef:9d:46:4e:77:2a:8f:6b:63:8c:aa:
         2f:fb:8b:0a:65:be:df:d8:b3:62:69:d2:73:ff:e8:da:94:b1:
         27:d7:d6:18:83:b3:19:26:e6:15:f4:e2:9c:f8:c3:d1:80:2a:
         30:7a:2d:fe:f9:ed:9b:dd:65:3a:c7:92:b6:f3:a8:79:f1:08:
         6c:70:57:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:45:12 2025 by rpki-client