Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/512c87ba-8af9-3c04-82e1-6f6dc80bad0d.roa
File:                     512c87ba-8af9-3c04-82e1-6f6dc80bad0d.roa (raw, json)
Hash identifier:          elS7nqoRJ5mdXeuers7bHOyD7lImVkK/0Ahi2KtRTbU=
Subject key identifier:   42:AF:A2:76:64:BB:00:74:67:09:B8:AD:DA:A8:FC:4A:9F:AB:92:F9
Certificate issuer:       /CN=ba46f857-c44f-430d-b73b-7a14eec4c813
Certificate serial:       010D0C9F43285849E75C80242B3A15DC94AA6100
Authority key identifier: BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/512c87ba-8af9-3c04-82e1-6f6dc80bad0d.roa
Signing time:             Mon 19 May 2025 09:51:56 +0000
ROA not before:           Mon 19 May 2025 09:51:56 +0000
ROA not after:            Sun 17 Aug 2025 09:51:56 +0000
asID:                     55799
IP address blocks:        23.162.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:5c:80:24:2b:3a:15:dc:94:aa:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba46f857-c44f-430d-b73b-7a14eec4c813
        Validity
            Not Before: May 19 09:51:56 2025 GMT
            Not After : Aug 17 09:51:56 2025 GMT
        Subject: CN=9c03064b-41be-4320-b096-0cf21b1c9a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:1f:41:93:6f:e9:01:9c:21:01:24:7d:d4:
                    5d:56:60:53:b8:96:da:7c:99:58:21:18:3a:40:0d:
                    f6:77:d1:d8:10:04:4e:22:b7:28:13:b6:4c:53:ed:
                    eb:76:51:c1:b1:ad:c6:97:d4:dd:cf:10:c7:cb:ab:
                    1e:bd:92:b4:ef:14:10:09:b5:c1:b4:1e:5f:0a:65:
                    63:f9:d6:64:9b:4f:4b:7b:5c:ab:4a:d1:7d:7b:6e:
                    f2:d1:ed:ce:99:d0:5c:70:44:58:e1:b9:9b:24:20:
                    ef:7c:91:f7:50:3d:a5:5c:a0:3d:43:d7:00:ad:2c:
                    6b:92:76:77:f7:5e:e4:a8:84:ee:9c:4b:e7:cd:b6:
                    c8:66:18:aa:7f:d8:8c:7b:bb:bc:36:ff:d1:bf:a8:
                    97:08:5a:0f:0b:02:7b:18:b8:4e:3d:e2:de:ad:4e:
                    9e:b9:a1:50:ae:bd:32:e1:4a:6a:00:6c:0a:1b:4f:
                    00:b0:85:a5:80:a0:5a:dc:00:2c:34:ba:b6:66:49:
                    0e:ad:94:d5:7f:f6:29:f7:3a:f3:54:a5:01:fa:f8:
                    8e:b3:7f:df:27:0b:96:86:3e:3b:ba:8f:2c:a7:5c:
                    f1:d6:d9:a0:16:fa:04:6d:92:85:56:1c:91:47:60:
                    2c:18:57:48:9c:f6:f3:4d:45:cf:aa:6c:07:1d:ea:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AF:A2:76:64:BB:00:74:67:09:B8:AD:DA:A8:FC:4A:9F:AB:92:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/512c87ba-8af9-3c04-82e1-6f6dc80bad0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2d:26:0d:84:d6:34:d3:e6:ce:35:f6:b8:94:9d:c8:8a:99:
         c7:c7:a7:5f:8e:48:6c:b3:3a:e6:12:a6:30:87:0f:16:63:d9:
         db:26:36:6f:e3:81:c5:65:17:86:7e:ad:64:8e:14:64:37:f5:
         37:68:f9:43:bc:e0:1b:19:51:68:35:63:7c:e6:23:1a:a8:c8:
         28:ce:a0:18:af:18:49:e4:d8:ca:ec:71:f3:a8:22:15:59:44:
         dc:97:4a:b3:e5:0c:99:72:76:17:fb:d2:0d:1a:c7:87:db:b3:
         f0:63:18:01:2c:3c:4b:f0:77:76:af:7d:d8:a3:58:04:b7:f9:
         f3:bf:48:58:24:34:6d:e0:a6:fd:f0:95:f4:36:56:03:19:c9:
         79:7e:d5:33:34:ba:8a:f2:04:0b:90:de:3f:a7:7e:7b:0b:84:
         be:03:af:ea:73:ed:63:8e:8b:9a:f5:a8:91:cb:37:1e:15:60:
         11:0f:d8:6e:68:cc:31:00:54:be:ff:fe:62:af:6d:93:8c:52:
         31:b4:c0:c0:9b:7d:69:ec:f8:de:81:86:4d:bf:56:5f:88:96:
         d4:59:35:cc:2f:9d:9b:66:da:d5:b0:73:92:87:78:a9:36:c0:
         b0:7e:23:36:18:d7:46:99:90:4a:2e:1c:35:86:cf:16:36:c0:
         35:be:95:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:04:55 2025 by rpki-client