Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa
File:                     4f328c30-9c44-33ba-ad3f-f36534bc620e.roa (raw, json)
Hash identifier:          urZi5PsncaGkjFvvD4P/MJpHR6KxCSC5GF9T4TE97/c=
Subject key identifier:   05:5F:30:D8:8F:74:8B:01:AF:E3:EA:05:E9:D3:19:31:89:3B:B4:C6
Certificate issuer:       /CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
Certificate serial:       010D0C9F43285849D594EE006B50AFF04C3A4980
Authority key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     30671
IP address blocks:        23.160.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ee:00:6b:50:af:f0:4c:3a:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=1bc9a57c-d304-474d-bb5d-d697f7c79fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:18:86:d4:bb:2f:19:2e:8b:13:b4:54:2f:
                    e6:9d:03:7e:1f:5d:b4:7d:9e:8d:91:51:72:82:0d:
                    71:c3:39:cf:45:6e:9f:44:a1:4a:6b:40:99:be:9c:
                    ce:49:88:b5:e3:e9:9f:38:54:26:00:63:60:6f:fd:
                    7f:12:f4:2a:9d:b3:2e:32:f7:0d:88:42:27:ad:8e:
                    fc:c4:32:69:db:eb:3a:11:f5:99:3d:9a:a4:49:d7:
                    69:ed:ab:33:45:23:03:ab:66:4b:96:53:7d:10:8e:
                    7e:7a:b3:7c:f9:6a:97:09:54:e0:87:5d:0e:92:e5:
                    98:9d:a9:d4:05:11:a3:0b:fd:89:b6:ea:42:cd:11:
                    f1:b6:5c:60:bf:8f:53:ce:61:06:dd:3a:01:3f:af:
                    d9:27:ec:f0:e9:64:62:0c:3f:3c:33:be:e9:75:9b:
                    e0:b9:a5:1f:83:47:42:57:10:64:13:6e:7f:9a:a7:
                    65:0b:3b:b0:4d:39:97:34:14:e3:2b:18:8c:51:b6:
                    45:7b:90:e0:59:e1:88:ce:f5:4f:aa:67:48:c5:4a:
                    e5:9f:a0:f1:59:d9:8d:c1:5b:17:61:8e:eb:3e:a2:
                    57:bd:f4:5d:bf:f7:53:f7:3b:20:4d:b6:ac:92:ba:
                    b0:d7:bc:16:3c:18:fa:b4:87:75:a8:e4:fb:bb:1c:
                    4b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5F:30:D8:8F:74:8B:01:AF:E3:EA:05:E9:D3:19:31:89:3B:B4:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:34:b5:08:60:e2:50:5d:5f:f1:45:ae:0c:f8:eb:d8:d2:
         7f:48:1b:9a:a2:93:6a:8a:bc:c5:c5:18:7a:3a:66:49:b1:0a:
         34:4c:5b:e3:4e:ed:f9:8c:63:d3:4c:a6:4d:6c:df:d4:d0:fc:
         96:88:f5:f6:ee:ea:5c:1f:fa:7f:e3:2c:0a:f0:fd:17:ce:06:
         5a:2b:0f:42:92:9d:1b:5f:0e:5c:7b:df:a3:d2:51:84:40:a7:
         eb:b8:44:8c:7d:a7:b3:4e:a1:e0:3a:a3:56:ba:d0:b4:63:3d:
         72:97:0b:eb:33:b1:d3:eb:95:3c:7a:ca:23:98:9c:04:41:65:
         6d:c9:27:23:3e:50:34:37:a5:10:e1:dc:ee:49:a3:69:37:4d:
         f5:de:42:09:0e:a6:6a:c7:c5:a4:4f:5e:83:a0:9b:d1:6b:97:
         ef:0e:83:b1:9e:ce:bf:79:bd:25:45:d9:f4:fe:dc:95:d1:3a:
         ab:63:df:21:27:ae:f2:1e:8d:1b:d9:f1:93:6e:e8:ac:6e:c1:
         8e:f0:9e:77:2a:6d:ef:72:3d:55:17:fa:a1:de:26:ec:30:97:
         60:6f:b7:d2:e6:74:18:38:92:5b:f1:77:aa:cf:2a:3f:5f:05:
         a4:1c:d4:70:b1:73:45:65:4e:8b:ef:48:c9:f0:c8:a4:4f:09:
         e0:5d:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:16:15 2025 by rpki-client