Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39f0f3f-4e9f-3dc1-857b-3cd1617636fe.roa
File:                     f39f0f3f-4e9f-3dc1-857b-3cd1617636fe.roa (raw, json)
Hash identifier:          cXlGKlMn5ZeAr/lfHnpnXgsYaw7x4SPeeUkOMQhbhhQ=
Subject key identifier:   1C:B2:EA:59:4D:84:9A:A8:F7:DA:29:FC:3C:B8:CE:F7:74:F4:6C:C7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499AF4983C4069B03EA4C59E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39f0f3f-4e9f-3dc1-857b-3cd1617636fe.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.213.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:98:3c:40:69:b0:3e:a4:c5:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=074b1911-de7c-4370-8fff-fca269f57992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d9:4f:a3:26:94:4e:bd:3b:c0:58:18:ab:db:
                    a4:46:6e:df:6a:66:49:a7:bc:4d:8f:2f:aa:fc:a9:
                    51:4b:a0:19:19:e5:b4:b7:36:77:23:c8:5a:51:cf:
                    a8:19:43:de:54:08:61:c5:7a:a2:79:3e:7e:d4:10:
                    04:80:00:30:9a:69:5f:5e:44:8d:54:77:16:aa:00:
                    db:a2:2d:b0:91:76:6f:10:a2:9c:f5:54:4f:a0:58:
                    60:17:bf:ee:b6:e2:57:3c:d9:36:b6:14:30:58:0a:
                    90:fe:82:b7:b9:fd:be:72:6c:56:f6:e2:e8:ab:50:
                    96:33:8c:e4:db:c8:b8:c3:09:6a:fc:ae:04:5f:32:
                    2d:17:bc:b9:f6:6c:b1:62:a9:65:99:21:09:05:15:
                    b5:2d:55:36:b3:c2:f9:ac:f9:89:48:43:26:4f:c1:
                    c6:b2:16:f8:1a:56:cc:38:f5:25:9b:e0:0a:28:1c:
                    0e:73:0b:51:79:4b:8b:dd:b0:e9:86:c4:3c:54:e3:
                    86:ae:41:b6:1a:c6:62:a0:94:f8:d7:42:2e:95:37:
                    dc:14:e8:bd:97:7e:c6:d2:07:67:45:e4:78:a2:db:
                    b2:e2:ca:29:0e:23:8b:12:41:8f:13:4e:45:85:c5:
                    4e:01:b4:68:f2:b7:c3:38:15:2e:85:fd:d4:52:5a:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B2:EA:59:4D:84:9A:A8:F7:DA:29:FC:3C:B8:CE:F7:74:F4:6C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39f0f3f-4e9f-3dc1-857b-3cd1617636fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:94:94:af:06:52:3c:14:31:3d:20:ba:65:86:18:f4:0b:d3:
         aa:34:13:1d:8e:d4:16:49:8a:85:c7:b3:98:7a:39:56:93:62:
         0d:6e:47:18:54:b0:58:87:e2:46:5f:a2:18:a0:4a:79:f4:3e:
         57:66:ef:f3:a7:65:bd:0b:fd:d0:a3:35:1e:e7:3e:48:9e:ff:
         b1:56:b7:ca:a1:34:d9:79:ff:ca:7a:fe:53:3f:ef:f8:0c:8b:
         17:71:0f:38:3d:74:46:c2:6a:f5:10:09:0a:89:c6:0d:94:d0:
         52:88:32:3a:a5:fc:aa:26:fd:3b:9b:c6:1c:7d:e0:0d:57:a9:
         1e:0e:ba:ca:eb:2a:af:43:cb:70:0b:4c:8f:50:85:99:ee:c2:
         13:2b:ea:c2:3b:7e:2c:f3:9d:20:8b:9a:fb:57:b0:26:dc:12:
         47:ae:9a:a2:33:7f:7b:d3:1a:5f:94:07:7d:67:03:b9:b1:7f:
         eb:2d:b2:04:29:94:d0:3f:71:19:93:fd:47:e4:73:70:1f:f7:
         74:6a:68:19:2b:d1:da:18:c6:32:01:f6:86:09:f4:b9:d6:9f:
         40:5a:27:be:17:91:d5:62:1e:50:02:f0:46:dd:be:37:a4:1f:
         e5:ed:3c:41:d1:f3:33:2b:c8:5e:0f:61:37:b1:49:50:8a:82:
         bd:b6:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:41:34 2025 by rpki-client