Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f3535a3-2799-364d-9dfc-46bb3eb63b10.roa
File:                     4f3535a3-2799-364d-9dfc-46bb3eb63b10.roa (raw, json)
Hash identifier:          m736X6iB0Wj3IQMTHhM7JHNqcnGuuE2spsZptZl8zXw=
Subject key identifier:   9B:EA:86:9E:57:CC:11:D7:90:C4:07:BC:4A:05:C5:E4:5B:77:31:A2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849998F410DD5FC21F1751C1180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f3535a3-2799-364d-9dfc-46bb3eb63b10.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        23.34.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:41:0d:d5:fc:21:f1:75:1c:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=0749bd4e-1d04-441d-ba24-f35d96adbd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:04:b3:67:e8:3b:e3:40:98:01:96:82:13:
                    25:5c:07:a9:2a:d0:18:c1:a4:62:80:40:08:81:f3:
                    20:9c:8e:cf:b2:c1:9a:30:51:b3:de:c2:a1:5b:7a:
                    a3:bd:86:61:23:1a:89:7d:7f:59:75:3d:a5:6b:8f:
                    a8:a5:26:5f:f8:b1:50:cb:da:d8:8e:e6:9d:ff:6f:
                    3f:6b:aa:df:fa:7b:bc:a7:e5:f7:b3:31:f5:3e:a7:
                    18:40:0a:a7:96:36:58:02:f8:21:6b:cf:f7:08:93:
                    9a:01:44:7a:d1:ba:05:7d:7a:78:df:08:22:00:c8:
                    91:77:92:f8:e9:f5:3c:8a:98:83:13:a4:b3:67:ce:
                    60:14:7a:ad:41:d5:d8:c5:ff:b8:29:12:8c:6c:f5:
                    23:f5:9f:07:a7:bd:8e:99:e6:11:eb:21:0d:ae:4d:
                    45:61:04:08:c1:f0:1e:77:13:90:39:64:e3:ff:bc:
                    73:2e:79:6b:0a:8e:ff:cf:86:52:09:6f:b2:ad:f4:
                    fa:22:c3:b2:d0:06:e7:e6:4d:19:f8:a6:ac:50:43:
                    b1:8a:63:59:2c:5a:1f:d7:e4:58:21:57:ec:f6:d7:
                    d1:02:23:d0:2a:b0:48:d9:3d:e3:dc:91:6c:26:e9:
                    58:bf:9c:e3:29:5c:56:4d:b3:b1:b5:33:84:84:b9:
                    a6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EA:86:9E:57:CC:11:D7:90:C4:07:BC:4A:05:C5:E4:5B:77:31:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f3535a3-2799-364d-9dfc-46bb3eb63b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.34.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0b:4b:56:d7:b7:9d:e6:cb:b9:c1:a7:51:f4:9c:3b:25:1d:
         ba:a0:15:33:f3:6e:a9:4e:de:62:86:fe:bb:f5:11:55:2c:68:
         8a:2d:fb:5b:d1:7d:6c:76:c6:3e:1e:75:0d:54:f9:04:0a:6e:
         0e:de:61:2d:83:39:7a:63:95:11:22:74:82:49:25:e0:07:f0:
         eb:9c:e4:51:07:15:bd:29:b7:4f:d1:14:24:8a:cc:f9:3a:f8:
         fa:5e:c7:dc:85:a9:79:60:d1:ba:e2:33:5e:8a:a3:45:42:b1:
         a9:90:49:b8:61:5c:cd:94:5b:4b:ba:a2:46:d8:ab:2c:15:38:
         ce:de:84:50:4c:67:9d:4f:4e:3c:00:1a:41:99:22:01:48:87:
         c4:01:c9:13:08:ca:d9:35:58:c1:3e:6a:b1:17:e4:23:1d:a5:
         cf:af:6d:35:e8:fa:a2:0b:83:50:01:1b:a2:69:aa:82:20:b4:
         01:d1:93:7b:d1:4b:18:e2:95:d3:7a:32:c1:b9:33:fc:ed:6c:
         28:0e:15:bf:3f:a0:63:a9:8b:ad:ac:bc:66:32:79:4c:65:cf:
         55:4b:67:5d:ca:9f:54:22:21:b4:9b:bc:29:83:fe:fe:54:4a:
         94:45:24:af:7f:6a:80:9a:d1:29:8b:23:31:21:2f:61:b5:b0:
         08:b6:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:45:48 2025 by rpki-client