Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/467fe62c-59a6-3719-9f43-46a4f0f44c06.roa
File:                     467fe62c-59a6-3719-9f43-46a4f0f44c06.roa (raw, json)
Hash identifier:          AL8uUzG0LRdgSRTWxdc/I3+bqzaT2YxJTxDwydyjgng=
Subject key identifier:   E5:FF:B3:B7:E2:AF:DC:B5:A4:51:7C:5F:A6:BA:BE:82:67:34:E8:A1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7A4B560244294E4D63E1A080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/467fe62c-59a6-3719-9f43-46a4f0f44c06.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     16625
IP address blocks:        23.213.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:56:02:44:29:4e:4d:63:e1:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=76ed5e32-5405-4ef3-95d5-85820daeb7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:6a:1c:4c:51:93:e5:a1:39:89:b5:0d:a2:
                    5f:d6:dc:d0:55:52:84:30:c4:34:0d:6b:e3:dd:b1:
                    17:ee:a9:0e:b5:f4:19:fc:d0:22:7e:53:d3:a1:dc:
                    9d:ab:dc:61:43:fe:24:53:78:78:75:88:c8:64:c6:
                    f4:37:12:6a:3a:27:d2:6b:9a:e6:5f:f2:46:df:ab:
                    de:53:81:ec:37:1f:3a:e6:bf:b9:7d:8f:04:bb:43:
                    e2:54:82:94:89:88:98:3c:8e:3c:e0:40:96:03:0f:
                    b7:bf:61:fe:01:93:6a:24:43:8e:7e:76:02:83:50:
                    fd:46:7b:85:d2:67:4e:f5:fd:f8:6e:7e:ff:9a:04:
                    00:1d:f5:44:84:60:c1:f0:66:5e:cf:a6:37:e8:d2:
                    8b:bf:2b:54:be:0d:ac:62:ac:65:19:d5:b8:55:b3:
                    91:c9:4e:25:17:1b:d2:c2:19:52:5a:d2:ed:e0:3d:
                    52:4b:ec:00:3a:83:59:23:bf:89:ff:28:cf:13:7e:
                    4f:f1:32:5a:17:e5:f4:d9:89:f5:3b:15:11:7a:5a:
                    36:bc:e8:5a:e3:60:14:aa:93:20:88:3f:ae:37:b3:
                    23:9d:93:66:4d:27:54:35:37:35:49:85:af:bf:c6:
                    21:c7:f2:0e:ca:a4:8a:4f:c6:4e:c8:45:c7:a4:fb:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:B3:B7:E2:AF:DC:B5:A4:51:7C:5F:A6:BA:BE:82:67:34:E8:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/467fe62c-59a6-3719-9f43-46a4f0f44c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:92:d7:2b:15:c9:f3:17:4a:e3:74:9c:72:10:e2:f0:37:0d:
         5d:9a:53:71:ea:92:b8:34:b6:5d:1d:99:ca:f5:64:8a:71:d8:
         81:74:af:af:c1:11:df:ac:84:dd:27:23:89:8f:d0:64:0b:1c:
         01:7b:ff:fa:99:73:04:a3:68:6f:03:ae:e7:09:86:53:3f:eb:
         f0:ed:27:72:4d:0f:21:10:de:77:ab:37:97:f8:2c:52:4f:59:
         74:89:00:b3:49:29:85:43:07:00:d8:14:00:77:2d:71:bc:28:
         e0:7b:47:b4:67:bb:32:53:95:c2:7e:93:87:71:a0:17:be:5e:
         e4:5c:5c:ab:4a:8b:eb:99:a0:9d:c4:11:ae:fc:2f:e8:3b:1c:
         01:ee:86:a1:1b:4f:23:7e:62:c7:ea:1e:b8:3f:8a:35:46:b0:
         fd:f7:12:6e:02:2c:bc:52:67:b6:35:d0:e7:e3:f6:41:61:ec:
         87:56:7f:fd:98:6d:c7:a4:ad:fa:17:fa:37:a2:8c:d9:a9:02:
         a3:76:46:a1:ce:8d:ac:39:78:f0:64:51:ca:c6:fe:7f:76:35:
         42:69:3e:a7:19:f0:4a:df:55:80:34:06:6a:11:e3:c0:51:ed:
         c5:0e:d0:f8:bd:e8:f9:1b:a2:f4:4d:b7:bc:e6:93:af:8b:7f:
         92:b8:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:47:37 2025 by rpki-client