Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ec044255-eff3-3318-b917-533fe44b029d.roa
File:                     ec044255-eff3-3318-b917-533fe44b029d.roa (raw, json)
Hash identifier:          KYhdNzuPq2KwlAyLM+ekUQPwQFaD0yzv2xnZ5Tt7iXg=
Subject key identifier:   91:F7:94:28:5C:0A:2B:6D:2D:F5:E3:89:DB:55:38:CC:0C:2C:3C:BC
Certificate issuer:       /CN=52f26f5a-86c1-4542-9ca9-e43777bd570c
Certificate serial:       010D0C9F4328584AA6F62F3BF69B5F1FA5AC7F20
Authority key identifier: E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ec044255-eff3-3318-b917-533fe44b029d.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        23.187.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2f:3b:f6:9b:5f:1f:a5:ac:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f26f5a-86c1-4542-9ca9-e43777bd570c
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=ecffc6dd-4cef-436f-8bc8-b408451efc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:52:d4:c0:c2:62:4f:e5:47:9e:9c:06:87:
                    43:b4:46:13:1c:52:57:01:67:be:13:e2:61:5b:59:
                    9b:a5:78:76:7f:a2:6f:90:c8:95:09:85:31:97:8c:
                    b9:b8:f9:12:ad:5b:67:27:61:1a:bf:3c:ab:91:ca:
                    d5:9f:8d:76:98:d6:16:55:19:ae:d8:d9:3b:3a:d4:
                    b8:55:14:39:3a:b0:f3:90:9d:fe:6e:dd:7a:9d:39:
                    db:5f:6c:9a:73:7c:7d:06:cf:2b:82:57:b1:31:f8:
                    7a:9d:c9:d4:c4:dc:0b:a4:72:14:71:b4:4d:8e:4c:
                    1e:83:43:a3:a7:49:d3:e4:81:a5:f3:cb:53:33:fe:
                    17:7b:6e:3d:06:ba:16:ee:3c:71:03:94:8d:22:8a:
                    8d:7b:c9:a7:00:38:28:f1:92:88:69:20:e7:09:c8:
                    6a:39:98:00:15:9d:d7:9d:50:97:cc:b8:96:19:8d:
                    e4:5e:1b:30:18:15:c2:f9:6b:fd:86:4a:59:ef:87:
                    ed:23:43:87:64:b2:db:c7:73:28:e0:65:19:5e:c2:
                    fc:0e:ce:aa:07:53:50:11:c4:30:0d:1e:4d:f5:5c:
                    d7:8e:ae:84:ef:1b:3c:e6:05:d6:16:ce:6d:66:11:
                    ee:72:57:f0:55:56:79:40:a6:15:d0:5b:e6:c1:a2:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F7:94:28:5C:0A:2B:6D:2D:F5:E3:89:DB:55:38:CC:0C:2C:3C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ec044255-eff3-3318-b917-533fe44b029d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cf:95:98:24:a7:71:4f:ca:ce:8c:52:28:95:44:bf:82:cf:
         52:54:f0:bf:35:63:54:91:09:0b:e2:b8:d5:1b:97:e1:15:60:
         e1:c8:2b:01:de:f0:f1:dd:65:61:ea:c4:92:a2:56:3a:32:31:
         41:a3:67:77:d4:02:81:99:cb:3e:45:4f:50:2b:0f:8a:e9:eb:
         03:f5:28:10:38:9c:3f:c4:17:82:22:f2:d0:5f:4c:bb:f9:25:
         14:f2:7e:e0:5e:5e:f9:df:58:c9:b6:3f:99:cb:12:cd:44:b0:
         e2:79:14:a7:f4:28:5e:a7:01:dc:52:fc:7d:77:ca:32:33:34:
         26:cb:10:3e:6d:28:13:fe:c0:2c:ea:1b:6c:19:0b:7f:62:b4:
         1c:25:d1:7d:2c:cc:89:f7:2a:fe:70:f5:82:d6:69:70:64:c6:
         33:f5:67:25:d6:36:84:88:ce:ae:34:b3:f3:1b:d1:af:04:5e:
         5c:3b:08:98:a4:85:e7:98:81:ff:07:88:09:a4:41:8c:95:12:
         9f:56:6d:99:4d:26:45:dc:0c:f4:2a:63:03:05:a4:c5:34:7c:
         57:7a:15:f7:32:e2:9f:79:25:17:ad:38:51:3d:b7:36:8b:2f:
         ae:6d:f1:58:28:b5:83:32:2b:54:91:4d:d0:93:fa:74:da:33:
         50:87:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:34:56 2025 by rpki-client