Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa
File:                     284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa (raw, json)
Hash identifier:          tk2Z7NueDFTnKbsTUHZhwcXo1hyZVrDoTvH6O8q20Iw=
Subject key identifier:   A6:32:77:28:DB:57:04:49:5A:F2:98:78:BA:A3:43:64:9D:5C:CD:86
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F43285849C20A1606EE66A880FB40B280
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     22188
IP address blocks:        23.134.96.0/23 maxlen: 24
                          2604:bc40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:16:06:ee:66:a8:80:fb:40:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=40708c06-3ce1-400b-86b2-d1e93e2d5ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:5f:c4:e3:51:2d:1a:c2:9f:9b:fc:78:f8:
                    2b:b6:11:ca:5f:7d:95:6e:91:87:93:f4:88:93:8c:
                    e8:9b:ee:e9:dd:f7:ec:3b:de:0f:67:8f:2d:79:91:
                    93:4c:8e:93:91:aa:d9:e9:d9:01:dc:3e:f0:80:c4:
                    f4:a1:90:5a:3a:60:04:a9:e1:f1:6f:41:04:f0:7d:
                    ee:fd:88:b5:e9:39:9f:f5:92:3a:7f:98:1f:c6:e5:
                    48:b0:88:77:f7:41:fb:77:b0:67:a2:a6:24:90:64:
                    13:bd:70:d7:b9:e3:ff:b7:e5:20:1d:24:78:33:fb:
                    db:37:bf:48:e8:8c:42:6d:a0:19:d6:70:a2:6b:cd:
                    f0:e7:31:af:6a:47:d0:54:cd:2f:ae:b2:7b:57:2e:
                    6e:bc:e6:44:20:b0:13:d1:f2:2e:0d:61:39:93:21:
                    f2:a9:8e:43:31:a8:bc:d0:40:fa:50:19:74:42:25:
                    70:c1:de:f7:4d:9e:b7:a8:32:8a:3b:66:5e:f2:e7:
                    0a:7e:ec:36:55:16:4d:37:64:97:ea:ed:91:19:3b:
                    f0:30:4e:d3:8c:b6:b6:39:e0:f7:e8:52:a5:a2:f5:
                    21:96:0b:d4:85:fd:c7:fe:92:39:be:6b:f9:d3:0d:
                    fd:68:8c:fb:13:97:ca:2a:5c:12:ed:dd:f0:f0:f1:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:32:77:28:DB:57:04:49:5A:F2:98:78:BA:A3:43:64:9D:5C:CD:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.96.0/23
                IPv6:
                  2604:bc40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:6e:2c:f6:eb:09:3f:e7:e8:82:90:cb:9a:a5:5a:94:82:
         4f:bc:65:92:2c:cc:04:ad:36:82:67:d7:b9:f4:ab:75:4e:1c:
         60:e0:5b:24:50:15:f4:a9:4e:90:ed:88:70:fb:38:3e:41:10:
         ba:eb:72:e3:ff:c2:fb:d8:21:d6:58:d6:10:6b:47:a1:35:35:
         bf:ca:4b:f0:a1:34:3a:f1:9e:95:a6:e2:50:44:f7:69:99:88:
         0e:72:c1:c0:d6:c9:44:c4:c3:4a:46:5a:32:77:a4:ef:cd:ff:
         1f:b9:56:6d:3c:94:bc:9b:32:34:6d:73:02:2c:7c:58:fd:03:
         72:5b:78:af:34:06:5a:70:4a:9b:19:fc:eb:96:27:49:d4:d2:
         7c:fd:70:b1:dc:23:73:9e:c5:71:c3:42:2e:13:30:7b:5a:fc:
         fb:d1:5b:ed:8e:df:9b:6e:ce:e1:21:6f:d0:b9:5d:8e:f8:05:
         44:4a:b3:30:48:24:7a:6f:60:ee:0e:d7:02:4a:f1:bb:e1:06:
         8a:16:9d:98:13:9d:00:3d:2d:fc:9d:61:82:44:c0:8f:ef:04:
         06:f7:0b:9e:0d:5c:91:6d:0e:f5:8b:6e:ed:30:74:e7:35:37:
         b0:b3:77:cf:26:e1:6a:fd:9f:5c:41:b0:7d:99:e1:64:a0:f7:
         85:99:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:40:52 2025 by rpki-client