Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
File:                     7eab64af-78b7-3d87-9f08-54d27ec7277e.roa (raw, json)
Hash identifier:          iXIWwZcHs7aZjRDDLw51ZFN5Zrl1iGgNrzajRQE9wfE=
Subject key identifier:   40:46:DE:64:D4:1C:5F:BB:09:31:89:8C:39:C8:EE:24:BF:0C:AD:B5
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F43285849CE9A3CDE67C69B929679C800
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     7034
IP address blocks:        23.152.160.0/24 maxlen: 24
                          2620:13b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:3c:de:67:c6:9b:92:96:79:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=8b61f0a2-2fb7-43bd-9041-d30d77e151b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:73:a5:f5:44:bf:4d:e9:d6:93:0c:55:29:
                    d7:c1:16:4b:5b:97:6d:7c:bc:26:f4:b6:e7:ff:d1:
                    88:9f:40:63:39:af:44:ab:6a:13:d0:b5:9c:a0:2d:
                    eb:dc:01:bb:27:ae:88:33:b0:06:e4:5c:9a:88:33:
                    5b:98:ed:a0:55:44:5c:08:92:44:9d:39:09:00:bb:
                    f6:06:b8:1d:f9:29:b6:a6:13:47:b4:55:15:94:c4:
                    68:da:20:88:99:07:10:8c:fa:f6:e9:2c:70:f3:05:
                    9b:b7:84:0d:ae:0d:cf:bd:a0:5e:8f:76:52:e1:ac:
                    9d:45:6f:61:c3:26:85:95:3c:a0:0c:2f:6b:50:0f:
                    56:f9:a6:c4:2f:83:a0:2e:56:bf:d2:e9:f8:96:ec:
                    f7:3c:ec:b2:e1:9b:18:b1:fe:2c:02:7d:c9:85:d5:
                    cc:c8:57:cb:56:cd:e2:87:78:73:a8:88:5e:9d:76:
                    01:e7:44:f0:d4:40:dd:19:cc:f7:9c:f4:c9:48:e3:
                    67:f9:91:be:27:a7:01:93:70:4b:67:c8:82:33:be:
                    bc:01:54:37:0b:2e:9f:a7:d3:ba:3a:51:58:ae:35:
                    af:51:b8:ba:90:c1:eb:37:f7:16:4f:10:00:43:ae:
                    3f:92:5a:75:eb:42:1e:4f:8f:0e:07:c9:cc:5f:5b:
                    d5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:46:DE:64:D4:1C:5F:BB:09:31:89:8C:39:C8:EE:24:BF:0C:AD:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.160.0/24
                IPv6:
                  2620:13b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f3:f7:d5:52:16:7f:ab:b1:7c:1f:67:e3:fd:55:e9:80:c4:
         f1:19:50:a1:ca:27:44:ce:1f:79:43:89:6e:21:e2:ca:67:c8:
         79:bb:72:e8:fa:3e:52:bf:28:90:de:cd:68:55:28:df:fc:44:
         af:9e:ee:99:18:4f:bc:18:bc:0a:e3:80:53:c0:28:c3:91:2a:
         fd:b0:f5:b4:8c:b9:76:9f:b7:d2:da:99:c0:b2:7a:85:ea:a9:
         da:b9:19:7b:d0:76:02:aa:6b:f4:69:dc:5f:3c:68:57:aa:5f:
         8e:b2:0d:74:cf:7c:d7:46:fe:ca:e6:13:8d:88:f7:07:5b:9c:
         e0:8e:c3:68:ad:ae:99:c4:d0:1c:1d:56:cc:12:9f:5e:03:5d:
         8d:54:b7:44:47:a8:8f:2f:f8:db:d2:85:46:35:61:59:6a:4f:
         0e:db:63:1d:f4:95:07:1e:f3:e6:96:a6:48:8d:91:8f:37:1c:
         ed:ef:c3:54:e1:86:42:a5:b6:e2:e4:26:1b:af:8d:da:8e:99:
         8f:4e:a6:bf:08:20:af:b1:ea:9d:38:0d:33:a6:a0:73:49:fb:
         b3:b1:d1:68:7d:5e:ac:90:08:1f:48:0b:65:62:3f:38:82:5a:
         6d:23:83:26:25:b0:4d:f0:67:9f:d6:73:e2:58:1a:4f:11:12:
         9c:6e:b4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:10:59 2025 by rpki-client