Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/dc7f7f08-5bf6-378c-9fa3-d4eb7e03c722.roa
File:                     dc7f7f08-5bf6-378c-9fa3-d4eb7e03c722.roa (raw, json)
Hash identifier:          LCWBDGuSL6aJWKz3US+3s05vEDa9nqeb2DiHLo7wGaI=
Subject key identifier:   77:96:DD:78:45:A8:5B:6C:1A:A7:82:EE:45:2A:8E:DB:03:5B:86:B6
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584A07D539ADC9FABEE851B80C26
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/dc7f7f08-5bf6-378c-9fa3-d4eb7e03c722.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     62679
IP address blocks:        23.227.40.0/24 maxlen: 24
                          23.227.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:39:ad:c9:fa:be:e8:51:b8:0c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=5074086b-b0cb-4358-b054-1c4cbedfd8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:88:30:f0:87:a8:a9:57:91:58:4f:e4:61:a7:
                    97:3b:15:6f:e5:38:2c:99:7f:3c:77:a1:5c:46:7e:
                    f6:5a:50:a9:d2:86:15:1d:20:c2:a4:a2:f5:85:5d:
                    87:a9:6c:55:41:da:57:a8:d2:c5:5a:dc:06:ea:c8:
                    f2:b5:da:c3:af:7d:44:2a:89:9b:38:46:d5:12:e4:
                    24:22:e1:13:66:55:36:14:30:e0:64:53:5f:ab:43:
                    7c:58:04:ec:9c:c2:84:c4:5f:1f:bd:a7:48:20:3d:
                    f8:e6:22:42:a2:e7:cd:c8:1c:98:f2:e1:87:3f:6f:
                    f5:c7:65:1a:f9:b3:fc:53:28:62:d6:17:d4:58:79:
                    4c:80:2a:35:90:34:9f:f5:de:d5:e5:52:ec:1c:6c:
                    cb:53:af:65:2b:41:bc:82:78:f5:96:ed:36:ac:c5:
                    e0:ae:84:02:e8:89:82:58:28:52:46:c3:b1:5c:f1:
                    34:82:8c:32:3f:5c:b6:73:95:c1:db:fe:2b:58:50:
                    09:f6:53:c0:b9:1c:e7:bc:25:5d:e8:a5:2a:6f:c8:
                    1a:8f:81:16:21:92:aa:d3:32:7b:7a:89:06:b6:7d:
                    e9:d8:90:ba:a3:7f:c3:b6:59:66:71:75:f6:23:dd:
                    ef:2c:f4:a6:31:84:1a:08:92:57:62:c3:68:6e:3b:
                    aa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:96:DD:78:45:A8:5B:6C:1A:A7:82:EE:45:2A:8E:DB:03:5B:86:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/dc7f7f08-5bf6-378c-9fa3-d4eb7e03c722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:8e:6a:3a:73:2a:d3:69:fe:cf:2b:a1:51:0c:89:e0:21:55:
         97:a2:cc:43:1a:59:76:89:a6:35:f5:e4:b5:44:54:90:85:7f:
         78:0a:86:4c:70:c4:53:4a:90:1f:74:cc:14:f5:95:dd:8f:c9:
         ff:89:54:2c:9e:d4:b3:d2:25:79:d4:46:cc:cf:4b:1e:45:66:
         f4:48:2d:68:0a:8d:a7:5e:de:53:84:88:45:64:cb:0b:96:a3:
         c8:f3:c3:fa:7b:0f:be:98:ce:b9:92:13:74:32:e6:17:26:e9:
         ac:74:79:50:ba:9c:fd:43:09:12:a3:92:ba:c8:ea:ea:38:ee:
         f9:c8:86:19:89:60:9f:d8:35:54:7b:28:a9:ae:8c:b5:85:c8:
         aa:9d:8f:60:df:7f:9e:fb:e9:d4:88:56:e5:98:43:66:1b:bb:
         db:8d:55:d6:2f:d2:ed:bd:40:9a:02:c6:f5:94:5c:f6:38:9d:
         02:16:e1:00:1c:de:5d:6a:26:fd:ee:ae:c2:ec:f5:10:29:e9:
         d6:a8:f6:08:cf:e4:2c:be:8e:a8:b8:49:96:cd:6b:c7:03:37:
         4c:45:42:ad:7b:51:9b:36:d1:53:d1:d3:1f:b1:a4:59:cb:c7:
         8f:48:fd:30:2e:c9:ac:82:22:a5:b2:df:f5:9f:98:32:14:d7:
         7c:42:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:16:51 2025 by rpki-client