Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/67afccfc-971d-3664-bda2-59ef795c9140.roa
File:                     67afccfc-971d-3664-bda2-59ef795c9140.roa (raw, json)
Hash identifier:          cOe8VBQtCylNoSU8xp7ew1yiANvSpC6P8GEywtJYVCM=
Subject key identifier:   1E:8A:81:95:C9:20:63:79:1C:3D:AD:CD:A5:8F:D3:B1:0C:76:03:B2
Certificate issuer:       /CN=344c647c-2bcf-4b84-a292-fe7e96b86354
Certificate serial:       010D0C9F4328584AC9DBA637B5E37C353F01DEF8
Authority key identifier: B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/67afccfc-971d-3664-bda2-59ef795c9140.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     63150
IP address blocks:        23.187.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a6:37:b5:e3:7c:35:3f:01:de:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344c647c-2bcf-4b84-a292-fe7e96b86354
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=245b892a-12b1-4846-8594-2a7aa06d26db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:ee:ec:c8:e1:a1:f1:44:d1:e5:c9:b6:79:
                    f9:44:c1:51:fb:f4:e7:41:b1:bc:48:e2:0f:cc:09:
                    00:df:28:a0:a3:30:90:9a:c3:f0:91:5b:ec:e0:f8:
                    51:b1:c5:b0:b2:fa:92:7d:72:3f:89:b8:b2:a4:61:
                    ef:d5:20:d2:30:3d:8f:90:a9:6e:a4:5c:6b:10:31:
                    62:9e:aa:e1:4d:14:11:3c:f0:d6:5e:1e:57:2b:49:
                    47:d1:ba:25:78:86:ef:84:7a:d7:63:bb:6a:1d:ef:
                    e4:f4:aa:83:19:af:f2:06:8a:9e:31:b8:46:5c:55:
                    55:36:cd:25:3c:23:6b:75:76:2d:86:01:fe:43:1e:
                    92:42:0a:35:5b:47:a8:ad:c2:1b:ab:d6:fc:42:22:
                    45:9f:2c:d6:35:6e:42:bd:ae:c6:09:ec:e3:1f:e4:
                    6f:08:cb:11:e8:86:1e:42:18:69:fc:00:23:b7:11:
                    76:59:75:fa:5f:5e:68:f0:74:90:6a:81:ca:57:79:
                    f4:dc:0b:25:ed:b0:90:1e:b8:ec:48:9c:5e:24:ac:
                    a3:6e:c9:72:fc:7d:6d:85:e6:6f:10:25:71:95:f8:
                    60:e8:6d:88:8d:33:b5:c5:dc:ad:24:5f:d4:6b:bc:
                    f7:4a:ba:d6:3f:b1:3d:7a:d8:24:2a:06:8e:09:b0:
                    02:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8A:81:95:C9:20:63:79:1C:3D:AD:CD:A5:8F:D3:B1:0C:76:03:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/67afccfc-971d-3664-bda2-59ef795c9140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl

            X509v3 Authority Key Identifier:
                keyid:B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:65:65:96:0e:d8:50:ec:09:7f:22:82:04:6d:1f:61:bb:14:
         a0:67:4b:e3:58:b7:9e:f6:31:2a:3b:81:e6:1f:bd:ac:4e:29:
         0e:40:4b:8d:3c:4f:06:cf:eb:32:70:1c:93:88:3a:63:a2:ea:
         10:76:f5:fb:f7:75:6a:e7:bb:53:e5:0d:84:97:69:f9:0d:17:
         97:c8:43:bd:58:e5:25:82:07:58:10:aa:a6:27:70:1d:a6:32:
         77:f9:de:aa:fb:7f:67:8b:b1:4e:ba:29:c5:82:a7:91:6d:36:
         d5:e6:f1:a4:dd:11:66:7a:f6:59:4d:ab:64:b5:25:47:eb:f9:
         a7:95:02:11:b3:8c:0e:b8:d4:75:84:a5:bf:01:a0:9b:33:43:
         7a:e1:6d:14:24:8a:57:08:c3:28:8f:10:12:06:fe:3a:66:8b:
         76:88:5a:ea:5c:85:69:9e:e9:d5:1f:d1:08:90:8d:83:a7:59:
         0a:c0:a2:00:31:52:0f:c4:49:0e:2b:d2:0f:6f:d3:26:62:06:
         4e:bb:8a:00:7a:9a:d2:a0:ab:af:e7:f9:60:3e:87:e5:57:91:
         e4:7e:8a:24:bd:9c:6a:25:ad:41:a9:16:77:0c:13:b3:af:90:
         de:a9:c3:91:88:6a:c0:d4:1c:21:02:6a:9f:77:bb:e4:a7:e0:
         f2:24:9e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:19:32 2025 by rpki-client