Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/e0accc93-63d1-3c21-b64c-4277eccbb948.roa
File:                     e0accc93-63d1-3c21-b64c-4277eccbb948.roa (raw, json)
Hash identifier:          iK5XdxoTx3bOaJvh9/OU4ornOMKPv52Fh++T6e31+ro=
Subject key identifier:   75:FE:53:28:E9:D3:60:8C:83:BD:6B:C5:8F:57:5F:A6:3D:F9:25:D0
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F43285849C79F5D321669697EEF3BFF80
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/e0accc93-63d1-3c21-b64c-4277eccbb948.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     26904
IP address blocks:        23.247.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:5d:32:16:69:69:7e:ef:3b:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=26e2dc34-5b7b-41ac-b068-985ce48b6dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:1d:61:d9:73:78:06:16:56:3f:95:d3:c7:
                    54:dc:53:3c:4c:65:de:ec:2a:01:dc:e7:6a:7d:d2:
                    32:0c:01:c1:73:f6:fa:3d:4c:c8:4a:28:6d:24:8b:
                    65:43:70:a5:38:9f:4a:24:8a:17:eb:d5:b6:f1:8a:
                    8f:69:37:33:7c:4f:b6:3a:82:14:2f:6a:4d:e2:b4:
                    a1:08:8b:73:2c:1f:88:6d:33:c5:09:d3:85:40:e5:
                    b0:b4:23:42:47:ab:d1:8b:9e:bd:2a:61:98:32:72:
                    0e:ad:4a:d8:db:0a:7b:9b:e6:02:ac:2a:6d:49:28:
                    e8:c4:70:e2:6d:c1:21:14:13:1e:3e:b1:fe:ef:f4:
                    df:28:ca:d2:c1:7b:1e:aa:48:3a:85:a0:0c:e7:ac:
                    93:90:e7:09:25:75:42:8f:12:39:22:79:2d:d2:86:
                    4f:47:08:f2:d3:5d:71:ed:ec:99:a1:aa:7b:f3:7d:
                    19:83:50:f8:29:a0:2e:5b:8d:18:98:56:8d:0e:1c:
                    51:62:9d:ea:b1:21:7e:18:b4:f6:4f:6b:1b:47:e4:
                    5b:8b:58:b5:1b:0a:2a:a0:bf:d0:f7:a5:ea:10:00:
                    a7:c3:10:f4:2b:fe:c6:42:ce:d3:fb:90:6b:64:c5:
                    2b:bc:60:07:76:f4:cd:37:ea:71:e4:37:7d:02:ff:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:53:28:E9:D3:60:8C:83:BD:6B:C5:8F:57:5F:A6:3D:F9:25:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/e0accc93-63d1-3c21-b64c-4277eccbb948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:57:4a:d1:6b:7e:c7:b1:d2:5c:c8:d0:49:68:a4:52:36:76:
         4d:2a:75:68:98:43:f5:44:d2:f4:08:36:27:28:f9:7b:db:a2:
         cc:a5:60:e7:dd:87:25:24:4a:9b:88:21:06:e5:a9:08:18:c0:
         3b:b1:02:53:26:2a:cc:f0:d2:15:b8:f6:71:30:83:42:ec:e6:
         83:35:dd:54:c9:51:1b:30:a4:68:17:9c:41:ba:73:f4:8f:40:
         b9:b9:31:3d:b0:d4:37:c7:61:2a:11:58:bf:a0:53:3d:bb:1c:
         92:ce:06:fb:5b:e9:4f:da:96:c7:4c:a2:23:35:7d:36:7d:c0:
         be:29:28:79:2e:e5:ee:fb:6b:13:05:e4:d9:c7:d1:ec:58:06:
         fa:b1:e0:ab:1d:78:cf:4c:20:04:b1:59:69:d2:04:a4:2f:b4:
         cf:d0:62:01:7d:0c:dd:8b:84:87:30:9e:79:0d:1b:f2:d8:13:
         5f:cf:99:9c:c9:a7:b1:5e:67:38:bc:d1:a7:fd:f7:1a:05:be:
         eb:e1:a2:93:3a:03:0f:9e:4c:38:2a:50:8a:f0:57:fc:80:dc:
         c0:c2:f7:4a:0e:f0:65:52:e8:50:9a:39:1f:ec:4e:fa:6c:57:
         8f:e7:37:f0:86:03:4c:a8:3e:46:7a:6e:54:88:fc:bb:ed:8e:
         9c:04:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:30:36 2025 by rpki-client