Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/6cce7d42-3d47-32a1-89e1-92240ef28ce4.roa
File:                     6cce7d42-3d47-32a1-89e1-92240ef28ce4.roa (raw, json)
Hash identifier:          gTfKpdTvPtT2D6pBZ6vAae3uoBy/IyJhkbA1PtqjULM=
Subject key identifier:   37:76:68:D6:13:A7:30:EB:2C:AE:21:C9:55:29:30:CE:6D:B7:1A:EA
Certificate issuer:       /CN=cc2d4c2a-348d-4380-bc7d-7ec3ced46b83
Certificate serial:       010D0C9F4328584A90F5F87D5B3D157DB05A25C0
Authority key identifier: 05:D9:33:DD:A3:8D:D5:3A:18:CA:6F:FA:6E:AC:CA:11:7E:65:6A:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/6cce7d42-3d47-32a1-89e1-92240ef28ce4.roa
Signing time:             Sat 19 Jul 2025 03:52:46 +0000
ROA not before:           Sat 19 Jul 2025 03:52:46 +0000
ROA not after:            Fri 17 Oct 2025 03:52:46 +0000
asID:                     401561
IP address blocks:        23.130.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:f5:f8:7d:5b:3d:15:7d:b0:5a:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2d4c2a-348d-4380-bc7d-7ec3ced46b83
        Validity
            Not Before: Jul 19 03:52:46 2025 GMT
            Not After : Oct 17 03:52:46 2025 GMT
        Subject: CN=2316a89e-0876-41a9-83af-19a21f623733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:ff:b2:76:71:73:81:4e:ce:0e:87:87:df:
                    9e:6c:55:50:f5:5c:01:6d:6f:6b:b6:cc:c1:b9:ff:
                    08:3a:ba:05:60:e2:b5:1d:ec:0d:e0:c2:f8:21:22:
                    02:6a:e8:cf:4e:9c:9d:30:de:da:d4:87:74:18:f6:
                    1f:d5:1d:f3:d8:3a:b4:95:9b:2d:08:77:78:be:4d:
                    9d:de:40:14:4c:8d:1b:ab:3c:d2:8b:3b:82:91:34:
                    b0:4d:48:81:a2:0a:a6:3f:4a:7e:4c:7e:ec:7e:ff:
                    32:5d:48:8f:57:1f:b4:4e:8e:b9:b7:51:45:fe:bd:
                    17:20:ad:ba:85:22:fb:8f:16:fa:77:1f:d3:41:b6:
                    f8:94:94:7c:2c:2d:2f:00:20:b3:77:42:37:5a:57:
                    1a:2e:83:17:e8:40:3e:ee:4a:12:e8:08:08:07:b2:
                    ce:aa:27:2b:d4:8a:7d:11:06:02:36:78:31:45:94:
                    d5:40:ea:3d:21:25:38:65:c2:fe:39:25:f2:d0:4a:
                    e4:7f:e6:d5:3c:66:ff:1a:a3:61:72:76:5c:39:01:
                    05:48:a4:7b:e8:33:ed:3f:67:dc:1c:e7:1d:41:75:
                    9f:5f:5d:0f:83:80:3c:9c:18:7f:07:fb:f2:5d:6a:
                    27:0d:0c:bb:ac:f5:61:82:0f:b7:f8:4c:79:00:72:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:76:68:D6:13:A7:30:EB:2C:AE:21:C9:55:29:30:CE:6D:B7:1A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/6cce7d42-3d47-32a1-89e1-92240ef28ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.crl

            X509v3 Authority Key Identifier:
                keyid:05:D9:33:DD:A3:8D:D5:3A:18:CA:6F:FA:6E:AC:CA:11:7E:65:6A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f3:47:2a:74:d4:24:95:5b:73:e7:38:e1:3a:9a:b5:af:3b:
         3e:81:af:a7:cb:9d:88:a5:57:15:3f:55:05:98:3d:93:13:b5:
         19:b1:06:61:2c:41:99:45:dd:97:58:54:c1:9e:34:72:de:57:
         0c:f6:2e:5d:8c:f5:e8:14:e0:9d:49:56:d4:e7:6a:f5:db:a7:
         6d:6e:60:d7:4f:16:62:36:39:bf:da:ed:5f:bb:56:1c:e5:f7:
         87:01:49:89:4f:92:0f:eb:ce:bf:25:d4:44:e7:9f:2c:59:e3:
         d8:c3:24:6b:84:50:4b:2d:27:9b:5d:a6:73:d6:2d:9a:74:78:
         72:de:74:c1:00:0f:c7:1a:8f:d0:d8:2a:b0:78:cf:36:05:83:
         74:9e:98:1b:a1:fc:07:ad:3e:0c:2f:c6:ef:66:ee:f8:c6:66:
         e1:a9:57:06:d3:f0:9a:66:09:7a:90:b4:2e:a9:ef:cf:d7:cc:
         f8:79:35:69:f6:e1:47:0d:71:3c:df:84:d1:ce:4a:75:8a:f1:
         10:ff:af:5b:a2:22:58:33:c3:47:b7:ce:6b:c4:d7:d8:1d:98:
         0d:b2:67:08:36:02:8c:df:ea:49:58:e5:c2:6b:73:fe:09:37:
         67:de:00:65:84:db:1f:4a:fb:a3:67:25:dc:e2:93:40:ec:fe:
         be:63:31:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:47 2025 by rpki-client