Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa
File:                     02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa (raw, json)
Hash identifier:          yWqlu96Dp438CRA12/NeyRYIVP67HqI0fzk1ItKqFGw=
Subject key identifier:   DD:A5:5D:B0:27:1A:FF:62:D3:72:25:99:1B:37:79:A2:44:C6:A0:A8
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584AA42B8C91B2F5AA9A8BB49000
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16417
IP address blocks:        23.90.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8c:91:b2:f5:aa:9a:8b:b4:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=31f54de3-fc96-4b84-a54b-c300e34f35fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a5:df:41:ba:db:c6:ef:6c:04:cc:9a:0c:d1:
                    79:81:5e:b3:38:75:1a:81:63:fc:a2:91:03:7d:b4:
                    ee:65:78:ed:06:9f:cd:cc:df:28:5a:af:7d:e9:cc:
                    29:84:93:7b:7f:76:55:d3:fa:00:15:b3:8a:e5:ba:
                    ec:6e:aa:13:6c:97:b4:4e:af:01:0b:b5:c2:91:4c:
                    98:e5:9e:09:1a:d4:78:da:9a:11:3b:00:52:e6:7d:
                    7f:db:98:00:18:81:a2:10:08:e6:2d:d0:96:b8:b5:
                    e0:26:27:0b:b6:16:19:b1:d6:5a:72:71:4c:5e:14:
                    45:ab:27:99:4d:55:bd:87:1d:b8:0a:68:f8:27:bd:
                    3f:ba:f3:b3:ed:39:8e:7e:12:d4:d0:2d:e3:58:82:
                    df:cd:97:64:e7:37:cd:87:c0:6d:3a:6d:b9:0f:0e:
                    05:43:a9:9e:29:24:f5:cf:86:7c:f9:e6:db:7d:19:
                    aa:30:3b:de:dc:9b:bc:48:9c:fd:b7:0d:49:b4:62:
                    74:b6:06:19:9c:25:0c:57:0c:d5:46:a7:9d:b7:2c:
                    35:d4:29:f4:56:1a:00:60:13:bc:fa:64:9a:f5:10:
                    dd:67:b0:86:d3:2c:fc:5a:08:53:c6:5b:2f:a7:d6:
                    e8:8e:2f:af:c9:47:8c:15:58:32:79:a5:24:11:49:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A5:5D:B0:27:1A:FF:62:D3:72:25:99:1B:37:79:A2:44:C6:A0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:48:3a:e7:bc:58:1f:5e:a2:1a:a5:42:10:a2:0a:71:cb:e3:
         56:4a:4a:03:14:f3:f3:72:94:88:d5:c8:47:20:af:14:39:35:
         ab:81:c2:b6:30:45:4b:66:04:dd:9e:cc:70:04:f3:4e:d1:a6:
         9b:e0:be:4e:19:4e:a6:30:2a:49:a6:fe:c6:86:cf:ef:68:ae:
         af:c2:57:30:6c:d7:7e:88:83:50:bc:2b:5e:af:b9:15:af:74:
         8f:5b:68:23:11:c1:52:de:7f:fa:7a:53:c9:7c:83:ae:43:c3:
         7f:50:5e:05:35:9f:2b:c5:bb:42:ff:15:25:16:c4:74:19:8e:
         07:cb:3b:c7:f0:1a:2d:5c:72:47:03:05:ca:b4:6b:6e:a5:91:
         4b:57:27:30:25:f0:ff:36:4b:42:06:59:b1:9e:74:bf:67:0e:
         cb:fe:9f:9d:79:62:99:0e:06:31:26:81:bc:6a:71:8e:43:8a:
         98:86:bb:1f:98:46:a3:9f:e2:a0:2e:22:cb:8e:cc:2c:e1:fc:
         db:d2:73:ad:23:76:e4:d1:25:35:bd:bd:ae:70:d0:a2:45:4c:
         f4:c1:3e:ec:13:b9:85:96:81:15:f2:f8:d0:74:31:6c:84:5e:
         4a:7c:0e:7c:3c:a0:d9:b3:5a:49:95:11:c3:06:fb:7e:8e:2f:
         6f:fe:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:44 2025 by rpki-client