Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50ada21f-50f5-3663-8d70-d7de1b076b25.roa
File:                     50ada21f-50f5-3663-8d70-d7de1b076b25.roa (raw, json)
Hash identifier:          aoEq+0s4yuMEVdLIJtl9kYvKG1g6k5chs+RvTR3LAIg=
Subject key identifier:   CE:1A:15:BE:2B:E2:46:A5:D2:CE:66:37:8D:8D:98:6A:98:7B:79:47
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498769BE523C95ED2C33CA8740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50ada21f-50f5-3663-8d70-d7de1b076b25.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     35994
IP address blocks:        23.200.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:be:52:3c:95:ed:2c:33:ca:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=53aab0ae-15c0-42f5-bdef-5145ad9e0b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:8f:cc:7a:ef:78:e5:76:99:21:d7:60:1a:
                    81:dc:a7:cb:ff:be:06:8f:53:d0:0a:c5:02:07:bd:
                    fc:61:f5:ff:69:2a:07:19:d8:88:24:37:b1:2f:b0:
                    6f:86:0e:3a:12:0e:5c:a1:27:1e:4d:02:01:ab:c3:
                    7c:70:f2:1f:88:a9:83:1d:d8:bb:e0:85:6f:b0:55:
                    a2:8f:a1:63:1e:83:9b:a3:57:f4:ed:3d:07:55:71:
                    42:c2:2a:1c:9a:b1:0d:60:bd:e2:41:6c:00:7a:b7:
                    a8:b9:7c:a7:4b:d3:fb:f3:04:82:69:ea:c6:8b:81:
                    13:e7:c6:59:c3:79:b0:e1:3e:66:49:5f:f6:1a:58:
                    c0:72:61:ba:32:4d:f9:d8:60:da:b9:32:10:19:b8:
                    79:39:b2:cd:b3:47:7c:29:44:c8:e8:57:cb:65:48:
                    84:61:ce:1b:29:27:65:6b:7e:d1:67:be:1b:ab:40:
                    9d:26:3e:92:4c:7b:a9:b7:a3:22:30:29:b6:68:e5:
                    77:f3:1c:e5:dc:d6:47:d5:d4:c1:90:ee:27:49:69:
                    09:5f:2b:93:49:5e:30:67:00:63:b1:3b:4c:7d:c9:
                    16:d2:bb:72:8b:93:59:49:f8:59:77:95:27:91:22:
                    fd:78:10:9e:ab:b9:f5:dd:88:40:51:08:76:a6:7f:
                    5d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1A:15:BE:2B:E2:46:A5:D2:CE:66:37:8D:8D:98:6A:98:7B:79:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50ada21f-50f5-3663-8d70-d7de1b076b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:82:96:0c:26:35:cb:74:16:ff:ad:4c:f0:88:bd:90:a7:fc:
         e5:0d:eb:f9:b9:1e:18:87:b6:73:a7:62:4b:26:05:9d:6e:5a:
         2f:4a:36:0c:38:5f:3d:91:77:e9:85:c8:46:11:51:02:eb:40:
         b8:d9:a0:37:e0:95:30:ca:91:24:5f:66:df:00:1e:98:25:65:
         f5:bd:d8:4d:4c:c8:2b:d3:75:89:ea:4d:60:ac:96:76:21:06:
         62:eb:a1:e5:38:ef:29:b9:70:58:3f:60:f8:a7:8d:bd:de:26:
         11:68:d0:5f:ac:2f:08:90:00:3d:0f:05:ea:00:59:cc:14:e3:
         d9:44:31:0a:59:13:09:77:53:d2:d4:13:e9:64:f1:5d:0f:d2:
         99:3c:9e:fb:b3:e9:00:6f:fc:61:73:45:f8:7e:dc:3b:8b:c2:
         7d:bd:d4:3b:68:65:76:be:23:a1:b7:96:de:1e:8c:43:40:49:
         f5:67:26:15:04:42:00:6f:c1:88:51:9c:0c:dd:e0:12:91:1b:
         1e:fd:4a:83:36:48:6d:f5:c0:82:b6:cf:aa:91:7f:ec:e4:f8:
         b4:01:45:63:1c:7c:84:8f:51:54:30:e8:96:88:15:d7:2b:5e:
         b3:9b:84:17:d7:b0:c9:59:6f:28:6b:1b:a1:b9:51:2b:b7:c5:
         51:52:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:13:33 2025 by rpki-client