Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ef61eb0-4548-35b3-bea6-fcbc28498c16.roa
File:                     4ef61eb0-4548-35b3-bea6-fcbc28498c16.roa (raw, json)
Hash identifier:          p4B8CZaBPc8j5rucUy4WMp56PzEt6azohLlIGQbo2Kk=
Subject key identifier:   5C:4A:46:B9:DE:D3:FB:82:93:C4:95:AE:66:83:E1:A0:A4:F9:CC:95
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7D1605120327B5A1BFE56B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ef61eb0-4548-35b3-bea6-fcbc28498c16.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     16625
IP address blocks:        23.214.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:16:05:12:03:27:b5:a1:bf:e5:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=3fd031e6-b495-4aaa-9573-e043fa34abcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:cc:4d:5b:79:55:19:e2:57:2d:5a:a4:59:
                    10:f0:9b:ae:fc:f4:0d:cc:1c:5d:d0:6b:16:6d:f7:
                    ba:b1:10:e1:5b:03:dd:d7:1b:8e:68:a2:7e:1e:aa:
                    ce:7e:a7:8c:86:97:48:10:ef:78:9b:55:1d:6e:f3:
                    e7:f3:1c:8e:ca:dd:bc:c5:d4:61:b8:b6:f8:f2:fe:
                    ce:11:59:22:ee:05:c0:0b:77:5b:8b:79:24:b9:a5:
                    59:e7:b5:72:42:60:65:8c:99:e7:8c:18:3b:01:5f:
                    ed:7e:2c:7d:f1:76:c3:1d:68:65:09:82:1a:e0:4b:
                    32:3b:22:69:b8:8a:c1:fe:fc:ba:50:3a:66:a8:ee:
                    bb:49:5a:c7:ac:90:6c:4e:4e:a2:5c:14:e0:be:e7:
                    1f:81:19:6d:d4:42:f9:80:4b:93:78:3e:41:fa:da:
                    7c:2f:96:01:a5:0b:ff:ce:a4:78:a1:7c:9e:63:f9:
                    f8:b5:ad:9a:29:40:11:00:df:b0:96:ec:38:fa:f5:
                    c9:83:74:12:0c:31:c0:30:e9:46:51:c8:d4:c1:e8:
                    ec:ce:4c:8e:22:9b:a8:20:8f:00:88:97:a1:fe:b5:
                    3e:ae:ee:dd:9c:c8:23:4e:31:d9:b5:d9:b7:8d:d0:
                    57:27:c2:df:c6:85:0e:81:30:85:85:c5:47:66:da:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4A:46:B9:DE:D3:FB:82:93:C4:95:AE:66:83:E1:A0:A4:F9:CC:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ef61eb0-4548-35b3-bea6-fcbc28498c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:1d:1f:f7:10:ad:5b:bc:4a:a9:91:86:ba:cd:11:6d:d2:ad:
         ed:e7:d7:fa:d0:8d:11:02:10:f7:05:72:62:e9:dd:78:ea:c5:
         8e:7c:c9:a3:b4:9e:1e:2b:af:46:c0:60:20:58:e9:53:6d:c8:
         8f:e9:80:4d:32:1a:40:36:03:5d:a0:47:a1:bf:c8:4f:b5:e7:
         6c:1f:08:09:e7:f6:19:16:06:58:9c:2b:33:46:f7:2f:7e:fb:
         ec:43:ab:04:01:ab:4f:73:9d:33:b3:b1:b5:35:73:3f:a9:84:
         35:d0:58:21:d4:49:da:98:82:ca:ab:6e:42:e2:a7:54:be:55:
         12:43:ba:df:ff:8b:60:25:ec:05:4d:6a:30:79:25:c5:69:23:
         dc:bd:c2:92:80:0f:ce:6c:c1:24:ac:b4:e7:68:b7:f1:82:d0:
         ef:41:85:37:12:91:d3:bb:b6:8a:34:cb:80:65:d9:72:21:89:
         dc:75:cb:c4:5c:c8:16:ea:9e:54:f7:0f:ee:01:f3:c6:e5:0b:
         31:4a:96:84:f0:f1:d8:6c:28:70:91:cb:8e:95:f0:eb:94:19:
         b6:71:f2:14:b4:7c:6b:b4:26:33:76:50:c9:df:f6:78:5f:29:
         64:3e:6d:57:2e:78:77:80:3e:61:66:9b:d7:d6:1a:c7:4d:65:
         1d:ad:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:17 2025 by rpki-client