Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61056ad9-f13f-349d-b7a3-338282adb5d3.roa
File:                     61056ad9-f13f-349d-b7a3-338282adb5d3.roa (raw, json)
Hash identifier:          wqDRF+f93BU3KHbZHlOG9Z8XOJmGEACfzYznoT84mbE=
Subject key identifier:   8A:71:9F:3B:F4:E6:43:32:2D:50:5D:9E:57:AE:17:6E:99:DD:1B:BF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849FB452E5F539BE808B269D480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61056ad9-f13f-349d-b7a3-338282adb5d3.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        64.237.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:2e:5f:53:9b:e8:08:b2:69:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=a5dd265e-9b19-4154-8f09-af703743c965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:e5:c1:b2:e5:9b:e8:c6:74:48:21:7a:04:
                    ae:0e:cf:9d:5e:c8:d9:52:24:2c:a6:e7:90:45:17:
                    38:6c:82:70:f0:86:58:3d:ed:09:d1:e9:4a:f9:c4:
                    0c:08:42:8d:67:90:dd:49:aa:85:82:f6:36:c8:06:
                    67:5a:3d:36:8d:39:3e:c8:7f:5a:83:79:ce:06:6d:
                    ee:64:b1:05:d1:84:98:c0:ef:e9:df:47:28:29:58:
                    d3:26:c9:12:b5:3c:69:fa:b0:8b:3b:2a:37:38:8d:
                    45:e7:e5:f8:6c:3b:8c:30:0e:84:b7:b0:f4:b2:5f:
                    c0:be:cc:da:a7:ea:43:d0:d4:90:ad:d3:4e:9f:b4:
                    56:98:12:df:88:59:b5:ed:72:5c:42:51:9d:f2:7e:
                    f2:16:f3:1a:c9:7a:82:a3:d2:54:18:d3:c2:34:70:
                    10:6d:dd:36:dd:0b:cf:b9:3e:04:b0:20:a6:e2:56:
                    35:03:09:d2:f8:ac:0d:25:08:f6:e9:11:dd:f8:85:
                    39:fc:bf:61:0b:f3:1b:e2:13:06:26:f4:19:c2:6a:
                    39:48:ce:05:6f:76:68:d6:bd:0e:f4:3e:e5:97:7d:
                    02:bb:1d:d0:01:9a:09:84:32:c1:64:2f:a4:93:ce:
                    bd:ea:55:f0:9f:a0:91:2d:9f:36:8d:3e:93:c3:73:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:71:9F:3B:F4:E6:43:32:2D:50:5D:9E:57:AE:17:6E:99:DD:1B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61056ad9-f13f-349d-b7a3-338282adb5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a8:40:3c:dd:ed:47:e3:15:0a:23:54:d2:c4:90:65:a3:27:
         83:bb:07:8b:94:78:4b:b3:fc:62:eb:5f:55:4f:e8:ac:a4:74:
         e3:ae:da:40:85:70:a8:df:5c:e4:ff:ac:a2:73:95:b0:13:85:
         4b:90:14:18:81:dc:64:45:92:0e:f6:d5:12:7d:c9:15:d2:65:
         5a:16:50:3f:d7:94:91:54:6c:09:21:a6:d2:15:3f:81:15:00:
         d1:5a:94:b8:d6:8c:23:a7:a5:70:77:01:20:56:69:9e:f8:1c:
         96:1b:54:0a:48:8c:a9:e4:bf:77:6a:d1:28:66:a7:51:0c:65:
         57:68:3b:82:05:c5:af:40:93:78:82:17:fa:60:0e:ac:24:1b:
         48:ec:bb:95:61:2f:e5:bf:e5:a0:2d:ac:01:79:66:b6:2d:f1:
         7a:d7:38:7b:aa:5b:2a:5e:60:9f:77:92:f0:3f:5e:5a:58:83:
         58:ba:d0:3c:7e:f0:60:ab:59:7c:80:74:0c:3b:b8:c3:7c:59:
         20:d0:98:b5:88:4f:ad:39:26:28:81:0d:28:8c:b1:cb:5d:e0:
         f4:79:9b:7d:86:e6:06:ea:15:32:0a:7f:80:d1:26:f8:48:84:
         dc:c5:c6:a9:f5:c5:44:9e:a2:ac:66:f6:7d:b5:5d:d9:cc:68:
         0a:0b:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:42:43 2025 by rpki-client