Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa
File:                     d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa (raw, json)
Hash identifier:          OBNmy6Dfm46D9++xAexZLrIMAvz28Nnlt2RVi13yyjE=
Subject key identifier:   B0:B4:D9:A3:6E:AA:30:85:86:06:87:AA:C8:8D:B5:FF:F2:41:EE:8D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A2C20291E91CE99847C08B500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.32.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:29:1e:91:ce:99:84:7c:08:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=7738004c-3d55-468f-ad98-a358727db0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:56:3e:7c:61:c4:60:54:02:b5:68:fc:2f:07:
                    40:3c:88:c1:32:8d:d6:ef:21:f0:59:b7:98:2c:3f:
                    4a:7f:75:73:78:c3:77:80:05:d7:09:ca:ee:28:b7:
                    da:9b:d2:5d:f3:a0:4f:aa:a9:c6:15:91:a1:92:45:
                    e4:28:78:96:95:12:3e:65:65:90:57:81:85:b6:b2:
                    16:18:ec:70:1e:f9:6d:fa:26:ab:76:9f:1b:2d:db:
                    b8:fa:0e:5b:88:06:cb:df:4b:8e:da:ae:07:6b:69:
                    4e:9d:a1:bf:c5:3a:7d:f5:c5:d7:a1:fc:25:60:b3:
                    fc:bc:24:b7:77:dc:45:4d:b9:fe:45:4b:a1:af:24:
                    29:d2:e0:93:32:8f:6c:bc:0e:3c:8c:ae:1a:0a:9c:
                    1d:c8:71:b6:9a:3a:44:47:09:e4:01:4b:54:97:46:
                    20:de:ee:01:d5:2b:71:3e:52:79:f9:fa:59:de:dd:
                    cf:56:4b:23:66:91:09:73:d6:93:86:89:f5:56:22:
                    a6:4e:6c:0d:6c:d1:42:cd:af:3a:8d:c2:1e:af:31:
                    8d:a3:69:3b:f8:f0:98:62:5a:89:ad:2e:1f:98:5c:
                    28:cc:f0:36:e8:c0:e7:9a:37:a3:ec:e0:b6:4f:87:
                    65:9f:30:37:5f:39:e9:9b:cf:da:31:3a:77:92:77:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B4:D9:A3:6E:AA:30:85:86:06:87:AA:C8:8D:B5:FF:F2:41:EE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e5:44:6d:4e:f9:a4:41:f1:c2:22:fd:c4:82:fc:ef:d3:61:
         62:e7:cf:21:f9:39:bb:01:36:aa:e5:f3:6f:8a:71:fc:99:63:
         4e:65:4d:04:36:76:b0:d1:5c:c9:d3:d2:c6:65:0c:f9:4b:95:
         ca:ea:17:10:50:db:5b:a4:01:35:c3:dc:ed:6f:a2:08:2c:0a:
         d7:2d:f8:62:bf:78:af:38:78:36:43:fd:aa:4f:3e:88:12:62:
         8f:01:85:10:ba:d0:6f:0e:ba:91:08:ff:25:70:6a:6c:38:33:
         dd:ba:35:ad:e8:d4:4d:5d:4e:48:83:90:f2:6f:b9:97:bf:a8:
         eb:8e:84:6b:1e:55:1d:39:54:a0:2c:fc:0a:ba:9e:03:c5:14:
         3d:71:84:48:ea:07:03:72:5a:e6:b5:ea:c8:51:d6:32:c4:7e:
         a4:fb:6a:84:5a:ff:f3:0a:39:40:ee:42:36:fe:0c:ce:14:35:
         ab:df:00:72:f0:bf:62:ca:32:02:0c:d7:13:70:1d:1b:e3:c8:
         5c:4d:e0:d9:e1:5a:4e:ab:e2:ea:ea:91:aa:1c:f0:a0:ea:a3:
         7d:3b:f7:2d:a7:cf:cf:9a:4f:e2:7b:26:29:d4:d8:7d:11:0f:
         19:e4:31:5a:93:e4:7d:2e:73:84:ca:c8:40:7e:b1:fa:a3:36:
         be:dd:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:56:30 2025 by rpki-client