Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/76457ce9-bb8a-31fb-b219-743fad294918.roa
File:                     76457ce9-bb8a-31fb-b219-743fad294918.roa (raw, json)
Hash identifier:          Vdb/0klqi6xomYqBbbcH6XO4/OZiRrSmtk51H0Ebnws=
Subject key identifier:   89:A1:F1:95:5A:80:AA:0E:C1:7D:88:96:E8:CF:59:10:57:D0:9E:91
Certificate issuer:       /CN=83220b5e-8104-4c4e-bbce-305b174b684a
Certificate serial:       010D0C9F4328584A331AEEDB3EF1CD42E042EF80
Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/76457ce9-bb8a-31fb-b219-743fad294918.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     53698
IP address blocks:        23.174.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:ee:db:3e:f1:cd:42:e0:42:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=efa75354-927f-4f78-90d0-3c93ad3c03ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:59:01:0c:8e:c8:72:5f:61:f5:a7:db:30:a4:
                    38:76:03:a9:e1:8d:0c:54:c0:ee:45:aa:86:96:06:
                    43:ed:68:a2:da:b6:0e:d1:0b:ec:05:87:a0:c2:f2:
                    5e:7f:04:8c:3e:c8:ea:1a:0a:56:0c:3c:2f:39:d6:
                    37:c8:1f:ce:23:d2:a9:33:0f:d7:08:bb:91:8a:bd:
                    17:75:a4:ca:b5:92:4b:3c:ae:6e:4c:a7:1f:e6:48:
                    68:cb:2f:6d:b8:b2:cc:bb:95:31:dd:a0:85:6e:08:
                    3f:6d:e9:ec:c8:75:8a:1c:5b:48:41:c2:05:af:7b:
                    82:cd:c7:58:4a:02:2c:2a:d7:8c:ed:ab:b8:c1:37:
                    76:f2:5d:a7:a7:56:df:50:f9:8d:2e:00:a5:8a:5f:
                    8f:de:27:be:fd:b1:5a:81:09:76:98:1b:79:9a:69:
                    f3:85:0c:88:2c:83:b9:f9:ab:4c:33:d2:db:55:f1:
                    a9:a9:74:85:c6:68:d8:26:66:0c:29:90:5c:56:49:
                    88:5d:be:d1:22:5e:ad:46:6f:82:99:40:a9:6f:db:
                    58:58:fb:29:85:b3:75:8e:2d:b3:0d:5d:2a:56:68:
                    d7:2e:1b:ac:e0:32:3b:63:93:5f:8d:c4:1c:bd:cf:
                    5b:2d:76:87:71:86:78:13:0b:08:e4:d5:53:55:fa:
                    4e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A1:F1:95:5A:80:AA:0E:C1:7D:88:96:E8:CF:59:10:57:D0:9E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/76457ce9-bb8a-31fb-b219-743fad294918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d1:3d:8e:78:af:e2:bf:84:c6:98:3d:74:18:a5:a3:e4:42:
         a8:22:97:c8:65:2c:a4:1a:d1:a0:9a:b7:83:4e:b2:b1:c6:60:
         a0:8e:a2:03:8c:2f:c7:dc:a1:76:61:f6:7b:0e:f2:24:25:6c:
         63:3c:41:1c:92:7f:a3:8f:25:ee:62:18:d6:d3:24:b9:ba:5d:
         cd:a6:a7:08:93:29:8d:81:f1:b7:84:82:20:b3:a5:ed:e9:25:
         55:9a:ec:51:a2:7f:69:55:b7:44:08:10:c7:41:f8:86:16:12:
         ac:6f:81:70:5d:9b:95:a1:56:79:d2:04:6a:74:b3:09:11:66:
         e3:83:8c:c1:37:ad:90:b8:58:95:16:4f:db:42:f6:6c:9d:f2:
         2c:b5:9e:65:e5:79:6d:5e:58:44:9f:bd:d9:1e:48:05:56:32:
         e1:3d:82:35:a6:a0:fe:46:c0:88:3a:da:04:0c:9d:e7:ae:37:
         a6:9c:52:3c:a8:0f:56:0c:5f:67:85:a7:e4:5a:c9:ac:f9:c2:
         63:f6:7a:91:e3:1d:c2:f4:4d:7b:a5:34:18:3d:52:ae:e1:75:
         c2:cb:92:72:48:f7:2c:d2:2f:f5:06:51:20:1c:87:d3:21:cf:
         64:e0:e0:49:07:84:ce:19:8b:e8:43:72:13:f1:fd:54:e9:b9:
         9b:c5:78:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:47:46 2025 by rpki-client