Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/97b21b24-5a21-3ea5-abdc-4998083eb8e4.roa
File:                     97b21b24-5a21-3ea5-abdc-4998083eb8e4.roa (raw, json)
Hash identifier:          QLe6cHhaomqDSO+xTZedTZT9bierHRAXnh4YSDKFWmg=
Subject key identifier:   C8:63:A1:20:73:42:40:64:71:86:05:82:D1:C5:02:F5:01:7C:42:4E
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584A2C9E03940583ACB4E5310420
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/97b21b24-5a21-3ea5-abdc-4998083eb8e4.roa
Signing time:             Fri 13 Jun 2025 05:14:42 +0000
ROA not before:           Fri 13 Jun 2025 05:14:42 +0000
ROA not after:            Thu 11 Sep 2025 05:14:42 +0000
asID:                     53388
IP address blocks:        23.140.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:9e:03:94:05:83:ac:b4:e5:31:04:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Jun 13 05:14:42 2025 GMT
            Not After : Sep 11 05:14:42 2025 GMT
        Subject: CN=1d464b60-f169-4e29-80a5-7baae178ca02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:6d:63:5c:b5:07:03:22:c8:f8:c8:f5:07:
                    e5:12:c8:a0:95:83:bd:67:62:db:5b:8c:02:7f:7c:
                    df:7f:57:d8:55:32:cd:3f:5e:de:40:30:05:73:7c:
                    d2:0c:ca:26:4f:67:b7:7c:c3:09:88:9d:9a:b9:74:
                    19:aa:3d:54:a1:e8:29:1c:c0:ed:3a:95:59:4b:8d:
                    fd:82:b4:b7:8b:92:f0:f5:b8:ed:85:f3:b4:58:54:
                    a9:53:ca:8e:46:49:0f:ca:91:9f:0c:dd:af:55:c1:
                    79:c2:63:6e:e5:10:12:49:0e:ab:d7:0a:f6:d2:59:
                    fb:cc:00:06:7b:64:32:f0:b4:5a:61:46:09:50:7b:
                    e6:a7:6b:15:d8:2c:4c:7f:bd:1c:53:64:47:08:1a:
                    32:f3:53:b0:06:3b:8c:1e:0e:77:bb:d3:58:f9:6b:
                    e3:64:fe:f7:b5:04:e5:db:e9:5e:b2:ed:9e:a7:65:
                    2e:ef:03:e4:82:31:97:27:7c:67:a4:1b:c2:7d:7a:
                    c4:4e:79:99:6a:d9:52:4c:85:51:31:84:0d:37:b1:
                    9a:a8:6d:19:98:b9:5d:71:8f:05:fc:59:de:d3:5e:
                    a4:e6:c1:8a:32:9e:64:08:1c:31:5e:df:1e:75:ab:
                    4b:9b:2d:af:a6:fd:c0:dc:fd:eb:d2:8b:07:a5:70:
                    c3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:63:A1:20:73:42:40:64:71:86:05:82:D1:C5:02:F5:01:7C:42:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/97b21b24-5a21-3ea5-abdc-4998083eb8e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f6:a8:3e:c6:fe:94:34:b8:2c:df:88:bd:f9:c1:45:1c:84:
         9c:a6:75:89:01:7e:70:6c:31:ae:03:77:c8:ad:2f:2d:0b:5b:
         76:6c:58:e3:60:69:3c:dd:ed:70:ed:51:a2:d1:a2:71:07:e3:
         ca:c5:5d:8d:e7:14:0f:4b:79:5d:13:03:74:82:c5:b6:ec:34:
         69:11:eb:5e:f1:13:43:95:cf:31:5b:67:fb:db:23:94:de:9c:
         8d:93:73:26:bb:05:97:c9:c7:4a:75:e0:87:04:0f:93:76:a4:
         d5:9d:8b:b8:7c:32:1d:aa:fa:f7:3b:68:73:99:a0:57:5b:c3:
         82:0c:08:8f:7d:b9:74:7c:ad:95:5a:64:b9:da:af:aa:b8:6d:
         d2:ed:12:f6:c2:51:f4:a9:44:b9:c3:46:34:25:35:b2:29:e2:
         eb:ce:fe:f5:c6:a3:71:6b:95:3c:12:e7:f9:13:95:d9:2f:0a:
         f7:36:08:52:c7:78:9f:ac:fe:b6:90:26:28:67:6b:86:91:6b:
         c9:65:f1:b5:ea:39:52:04:fd:07:95:cc:d0:63:bb:cf:03:ad:
         d8:fb:5c:c7:25:fb:1f:92:3b:73:04:83:88:1f:44:90:ba:8d:
         3f:e8:97:9c:09:ba:4b:68:25:ea:d6:49:19:5a:c1:d1:8e:2d:
         af:2f:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:29 2025 by rpki-client