Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/feaa3fa6-2447-32fd-ad36-4efe68408777.roa
File:                     feaa3fa6-2447-32fd-ad36-4efe68408777.roa (raw, json)
Hash identifier:          nuZK5EyhNLlG5pUL6fs1cwCLQInn2ONv985edm4M6TA=
Subject key identifier:   CA:A5:8E:75:BD:0A:65:51:8E:59:AF:30:C4:4D:18:01:AC:C1:8F:E1
Certificate issuer:       /CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
Certificate serial:       010D0C9F4328584A4A0D31CACD9F650FF218EB80
Authority key identifier: 88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/feaa3fa6-2447-32fd-ad36-4efe68408777.roa
Signing time:             Mon 23 Jun 2025 18:17:10 +0000
ROA not before:           Mon 23 Jun 2025 18:17:10 +0000
ROA not after:            Sun 21 Sep 2025 18:17:10 +0000
asID:                     27485
IP address blocks:        23.184.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:0d:31:ca:cd:9f:65:0f:f2:18:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
        Validity
            Not Before: Jun 23 18:17:10 2025 GMT
            Not After : Sep 21 18:17:10 2025 GMT
        Subject: CN=95c8fe46-c4d3-47ed-946f-05c3823142b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1d:2f:87:f1:b4:88:a6:9a:ec:1e:dc:3a:23:
                    29:aa:d1:2d:07:50:38:37:94:f9:a1:93:13:62:0e:
                    12:53:60:df:12:31:78:37:17:bc:67:b6:db:a6:35:
                    d5:76:17:74:ed:50:ef:c7:e6:51:c4:55:b8:2d:4c:
                    54:8b:ea:ec:35:b5:44:4a:71:6b:50:f9:d7:a6:4f:
                    fd:83:96:09:40:38:62:00:e2:5f:e6:4b:ba:31:9b:
                    12:72:b2:c9:15:02:1c:76:41:02:d8:6f:e9:4e:b0:
                    b6:79:ca:3d:1a:00:30:93:60:d3:85:31:63:7c:d0:
                    f9:ac:0b:bb:db:1c:a6:50:1c:f7:4f:53:12:f0:e8:
                    50:0e:ae:ae:4e:6a:0f:9f:17:d2:2a:69:fe:00:f4:
                    2b:31:cc:68:69:49:7c:98:88:b0:00:9a:b6:e0:f5:
                    94:d9:dd:e8:f4:d4:0e:2a:70:14:59:69:84:28:ad:
                    66:72:1a:a1:e3:e0:a2:cc:1b:a6:c5:9c:a5:e4:6e:
                    e7:6b:ab:8f:f7:fb:b1:ac:76:32:cd:a1:1d:00:86:
                    77:a7:fb:59:99:94:09:a4:74:fb:d0:af:f2:5b:f5:
                    19:81:b3:53:8e:b2:2f:17:0c:64:4b:80:77:75:0c:
                    4c:4f:08:98:05:1e:4e:bd:89:40:ed:f7:65:cc:96:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A5:8E:75:BD:0A:65:51:8E:59:AF:30:C4:4D:18:01:AC:C1:8F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/feaa3fa6-2447-32fd-ad36-4efe68408777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl

            X509v3 Authority Key Identifier:
                keyid:88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b6:9c:e8:95:83:38:bb:c8:3a:7f:9f:58:40:38:03:01:20:
         c8:8e:ca:92:83:04:ee:4a:08:cb:1c:fb:43:f7:28:ea:0f:fa:
         06:02:5a:c0:08:84:fc:04:a8:3a:b6:a0:00:0d:05:a4:04:98:
         27:6d:c8:c6:54:94:2f:32:21:b4:0f:2a:d9:d6:3e:da:74:5a:
         d2:29:30:17:dd:a9:0a:d3:8c:23:91:40:3a:cc:95:47:53:94:
         33:c3:40:16:59:65:19:7c:e3:bb:04:cb:b4:69:2f:93:55:fd:
         78:3b:8b:51:7e:49:74:20:0e:d2:27:69:9e:52:07:0e:e3:05:
         1f:9c:72:69:d6:05:91:d5:1c:de:e4:29:21:8a:c2:94:f3:f2:
         8f:44:1b:0b:1f:d4:0e:94:9c:93:cd:f7:c3:55:3a:46:5b:83:
         b5:de:e6:ef:6d:bb:44:4b:37:2d:b5:83:f8:fa:fb:32:7e:88:
         f0:1e:c7:6e:68:bc:c0:a7:db:4d:53:10:23:d8:ec:63:1f:10:
         f5:74:7f:3f:38:be:d4:4f:41:0a:03:ca:16:f1:37:a5:5e:1c:
         86:da:52:c1:56:96:75:ed:e3:77:b2:92:6f:58:ca:d9:c2:01:
         5e:8d:c9:b0:da:2c:81:3e:a2:61:b9:35:41:65:d0:3e:7e:43:
         e9:32:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:23:03 2025 by rpki-client