Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/f52450d5-b314-3192-811a-f4ba62efb940.roa
File:                     f52450d5-b314-3192-811a-f4ba62efb940.roa (raw, json)
Hash identifier:          /Zw67XMGEMPyQcdnEvc0txwgQT5epT0U2uXHv5IM9vM=
Subject key identifier:   06:AA:07:8C:27:77:5F:B1:EB:AD:C2:DE:B5:6B:AF:E4:4D:51:66:D5
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584AC2E0F6A7F9B26B821F8B3A80
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/f52450d5-b314-3192-811a-f4ba62efb940.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     399533
IP address blocks:        23.151.16.0/23 maxlen: 24
                          64.112.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f6:a7:f9:b2:6b:82:1f:8b:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=b6e74b5e-bbf8-44c2-9ed4-26f00cae71a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:97:1f:ea:44:6c:48:9a:72:38:dc:38:6c:
                    36:b9:fe:b3:03:4b:f1:36:3d:92:e4:ce:4a:be:4c:
                    6f:6f:22:54:a9:bf:37:78:aa:f3:2c:61:d6:0e:45:
                    a8:14:2b:8f:fd:5c:a9:f0:32:ba:c6:eb:d1:82:29:
                    44:ef:3d:8d:03:48:d4:90:a8:de:55:11:47:36:b8:
                    bd:59:b6:6c:11:4f:35:f6:87:26:db:d5:42:e7:f4:
                    f9:0f:36:4e:13:4a:ae:ed:15:d1:16:39:80:29:7b:
                    e4:b9:99:83:5f:63:14:18:c6:c2:34:f4:4a:e0:6c:
                    a4:6b:5f:98:f2:8e:06:c4:a2:fc:ea:f7:0b:41:7e:
                    87:c9:17:d4:08:39:a6:fc:7d:4b:af:92:64:62:af:
                    40:96:be:e3:08:5e:26:00:40:ba:d8:9e:d3:03:eb:
                    6c:2e:fa:02:15:19:1e:ce:e3:b8:f0:d0:a1:3b:db:
                    17:97:53:dc:2f:3a:fc:f0:5d:62:98:d9:d4:bf:2f:
                    0f:65:60:57:5c:75:26:85:53:d4:23:1b:a4:b8:dd:
                    72:d5:67:f7:86:13:26:97:7e:40:b3:d0:0d:6e:51:
                    3c:7b:47:d4:96:be:e1:9b:d6:ee:60:ed:09:dc:ba:
                    23:b2:22:8d:aa:57:a2:59:d5:c9:30:99:e3:a9:fc:
                    ac:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AA:07:8C:27:77:5F:B1:EB:AD:C2:DE:B5:6B:AF:E4:4D:51:66:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/f52450d5-b314-3192-811a-f4ba62efb940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.16.0/23
                  64.112.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:38:e8:95:ca:8f:a9:ac:bf:13:2d:b1:1f:7e:bf:d9:b6:3e:
         04:ae:23:75:83:bc:f3:94:01:4c:de:04:b3:49:17:ce:e7:9e:
         dd:d4:ca:24:c3:a3:5b:0d:97:94:a4:f5:59:88:dd:64:a0:1e:
         31:7d:ad:53:7e:9b:7b:c1:d0:e6:d5:e1:a2:92:f4:6e:a0:bd:
         55:90:68:5f:17:42:6d:29:eb:10:50:8f:f9:db:3a:19:c2:94:
         e2:22:c7:0b:77:aa:41:c2:37:8b:6c:8c:fb:91:0b:6f:e2:dc:
         59:c8:61:d0:7b:e1:b2:4b:f3:12:59:33:50:30:cb:98:e0:88:
         3b:9e:34:cb:ee:b4:5c:0a:a9:ee:79:2e:23:4c:d8:ea:91:01:
         db:ec:9f:24:cb:11:19:cd:c7:55:2b:06:52:37:ff:b9:47:da:
         b9:e6:84:79:7c:67:1c:95:cf:93:0c:d7:17:09:00:34:5d:5c:
         0c:e5:12:e5:2f:77:1e:2d:e9:9b:42:7f:6f:95:e1:5b:9d:04:
         9f:9a:fe:b4:5b:95:47:43:73:24:00:5d:bd:7f:45:3a:0f:84:
         5b:80:ca:ec:41:49:46:3b:71:95:e7:fb:6a:9e:52:59:f0:53:
         e4:7f:e0:1d:06:7e:2b:82:d4:32:dd:a2:9f:38:aa:7f:c9:b5:
         5b:f4:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:20:50 2025 by rpki-client