Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/00b18ccc-1fa4-3f2d-a950-31284fbee900.roa
File:                     00b18ccc-1fa4-3f2d-a950-31284fbee900.roa (raw, json)
Hash identifier:          5ba3+SFP0DVbt5yGcrCcpNWQcsb1ASauO1T2mvKQrj8=
Subject key identifier:   1B:B6:B7:CB:1E:3E:BE:C6:F7:45:66:E2:C9:0F:34:20:C5:C9:CD:5D
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584AD7D12854F064243381225C00
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/00b18ccc-1fa4-3f2d-a950-31284fbee900.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     51847
IP address blocks:        23.175.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:28:54:f0:64:24:33:81:22:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=d1f23373-73ba-4867-bfac-0ed53ad92509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:ce:ec:60:d3:61:63:1c:c8:a6:62:de:c2:
                    11:73:e2:62:0d:e3:71:26:80:c0:d1:56:b6:b7:f1:
                    db:50:50:8e:52:78:33:49:48:9f:3a:02:58:bf:29:
                    1d:6c:55:d0:ed:82:e0:6e:d1:a0:77:9d:2d:5a:0c:
                    00:aa:04:ca:79:b5:f4:30:97:3c:6a:6d:f3:d9:a6:
                    28:f5:e9:7e:bd:b3:66:66:4e:e7:ee:51:4c:d3:40:
                    15:e5:d9:be:a7:8c:9c:2a:8a:5a:60:74:8c:52:42:
                    09:09:e8:3a:0b:ad:1a:cd:a3:21:27:ec:9f:bb:6e:
                    52:f0:ea:da:be:02:fb:ee:fd:15:b3:90:17:57:f3:
                    5b:74:fe:66:7e:42:5c:b6:d5:1e:3d:34:e6:41:ee:
                    1b:d2:f0:fb:f5:38:34:69:6c:f0:71:c9:96:ac:ef:
                    2c:24:4c:d8:1e:d3:9a:aa:24:08:dd:dc:89:fd:0c:
                    7c:9c:0a:b4:9b:1b:dc:9b:0b:c1:52:49:d7:04:9d:
                    d4:5c:27:99:df:70:b5:11:30:ba:e3:cd:50:a3:3e:
                    07:17:e3:72:b5:5d:09:32:8f:72:41:b1:6e:5b:69:
                    bb:0b:fe:1c:9d:46:60:4a:a4:87:e2:84:e8:e2:7a:
                    f7:45:7c:44:32:96:3a:f5:cb:79:8e:09:8d:1e:b0:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B6:B7:CB:1E:3E:BE:C6:F7:45:66:E2:C9:0F:34:20:C5:C9:CD:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/00b18ccc-1fa4-3f2d-a950-31284fbee900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:67:d4:fb:50:5b:97:c6:9c:5a:f0:7a:65:0a:be:96:d9:42:
         8c:d5:a1:a6:7a:9f:69:65:29:7d:d5:d4:3e:ac:04:f1:48:05:
         0b:7b:fb:08:a3:ef:74:cc:fd:73:24:ff:c8:e0:f0:6f:94:b3:
         70:af:27:a9:10:ae:53:85:23:51:45:92:8f:b5:3d:7c:5b:2d:
         58:4a:50:0a:47:df:28:9f:d0:da:db:7d:74:4a:db:9f:cf:fc:
         7d:f5:5d:c0:f3:94:65:55:a9:52:f1:db:e6:4d:00:b9:94:69:
         53:ca:bd:4a:94:82:74:c6:26:f4:ec:8a:33:9a:2b:0a:e2:d3:
         b9:cc:15:62:2b:c0:a1:64:a4:4d:e7:d2:30:3d:f6:da:86:51:
         1b:f9:6d:8b:95:3e:3c:6e:74:ad:1d:3d:77:41:1e:6f:18:b9:
         90:dc:52:da:d2:d6:c8:4d:8c:61:1c:34:e5:3e:31:33:20:40:
         6c:59:66:8f:ac:c6:57:02:c0:20:f4:84:b2:03:f9:84:72:a2:
         97:a6:c2:c5:7d:74:e8:14:27:b4:e4:16:52:0f:7e:8b:ae:dd:
         64:9e:cd:95:ba:9b:f1:be:46:20:66:ec:79:e8:89:fb:be:1e:
         06:04:46:ba:f7:16:27:a5:f4:96:9b:af:05:ac:23:73:45:17:
         96:8b:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:08 2025 by rpki-client