Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/1851881d-7393-35db-afa6-fe88c5a57eac.roa
File:                     1851881d-7393-35db-afa6-fe88c5a57eac.roa (raw, json)
Hash identifier:          WRIrQOzOVP9KIMi1+1r6/9rz8jSF07I96pjq5C27fDQ=
Subject key identifier:   FB:F6:6B:3F:4A:0C:A4:8F:A6:1B:61:43:98:A3:B7:0B:B2:10:B9:AC
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584A374AD7ED6FFFEC56EFF93500
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/1851881d-7393-35db-afa6-fe88c5a57eac.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     7992
IP address blocks:        23.91.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d7:ed:6f:ff:ec:56:ef:f9:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=46c2fdbd-7fcb-42e3-9d18-329badacc5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:ce:fb:83:ee:a8:4c:69:9d:9d:54:68:d6:
                    1a:fe:85:55:ba:d4:15:7a:5d:b1:b2:bc:4e:b3:4c:
                    cf:51:24:de:9d:f6:71:70:ea:26:a4:ce:89:f0:79:
                    41:45:da:ec:a4:4d:ee:55:4d:a5:c7:f5:20:2e:fb:
                    a2:8e:f8:01:7a:ee:35:dc:0d:f8:d7:00:6b:f5:ed:
                    79:a4:af:c6:a5:d3:3d:54:9f:9e:cf:77:26:bb:ba:
                    07:a0:eb:cb:99:99:8a:51:9b:3a:d8:f9:66:69:71:
                    cf:a1:07:ce:f6:f5:1e:fa:a4:c8:43:7b:d5:21:51:
                    4e:3c:54:f4:2b:5a:9d:41:fc:24:2c:4a:60:24:30:
                    d6:ca:3a:81:c2:d0:84:54:09:a0:26:33:8a:e6:c2:
                    4b:5d:c6:ae:a4:85:3f:90:dc:38:fb:6b:73:73:ae:
                    4c:38:fe:20:da:bc:39:9f:28:dc:12:c9:4a:de:95:
                    6a:72:0e:15:e2:bf:3e:c8:05:70:9f:8c:5b:82:26:
                    a0:45:75:5f:de:e5:aa:19:44:b0:c1:d6:c8:01:4c:
                    1a:ae:05:e3:ac:9b:06:f5:cd:0a:a3:a5:60:0b:28:
                    4b:30:9f:9d:3b:28:60:e4:7f:0d:6b:e0:e0:b6:32:
                    8d:23:ae:df:7a:f2:62:f8:00:98:e9:a0:c0:c2:30:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F6:6B:3F:4A:0C:A4:8F:A6:1B:61:43:98:A3:B7:0B:B2:10:B9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/1851881d-7393-35db-afa6-fe88c5a57eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:33:44:05:27:cc:6d:7b:67:a7:2e:35:ea:f7:69:80:ac:f1:
         ed:bf:ed:85:47:bf:e8:fa:07:1c:69:85:e8:6b:90:ec:06:36:
         1f:d7:90:3a:9d:d3:4c:39:0a:47:18:55:43:10:63:b0:11:c1:
         bf:d3:93:03:4c:d2:7b:1f:64:aa:c2:c4:f8:cb:5d:33:9d:67:
         98:09:df:24:ef:c8:53:e2:ad:84:8f:b3:a1:f0:56:6c:1e:43:
         93:6d:0b:84:20:40:20:a0:5d:4d:c1:3b:e4:9a:c1:c0:f5:c8:
         12:67:70:d1:0d:66:f4:2b:91:ef:f3:f6:fd:a1:8e:1d:60:df:
         31:5c:f7:c9:0c:af:7e:62:9e:81:66:c5:b4:7a:2d:e2:d9:dc:
         0e:03:6d:9e:9d:d4:0c:f5:f2:55:40:56:24:7d:13:c1:20:0c:
         5c:bf:ee:0f:28:75:52:3a:fb:a7:85:af:c2:89:15:93:31:b7:
         68:06:48:69:a3:7b:16:7c:ab:21:7d:98:ab:f1:bf:17:df:29:
         5f:1d:75:b4:d5:04:8a:19:d4:6d:4e:cc:d8:5f:35:c5:e5:00:
         1f:5c:c7:07:2c:99:f1:4d:57:21:d7:cc:b2:86:6b:ca:47:47:
         fc:75:7c:84:0a:ba:13:50:92:e8:c3:29:44:f1:1c:b3:52:c7:
         e8:48:41:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:04:57 2025 by rpki-client