Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/131661e4-3aef-3b43-b303-e6e0f47e7930.roa
File:                     131661e4-3aef-3b43-b303-e6e0f47e7930.roa (raw, json)
Hash identifier:          yYC6OR8iQR0ohKo53444VI//zZfSNrj6LW+2RRQV4AI=
Subject key identifier:   56:A9:2F:A7:C1:BE:43:66:84:C5:2D:F7:76:13:07:25:D3:48:20:6B
Certificate issuer:       /CN=75c2d703-b68a-47d9-8657-d65247155419
Certificate serial:       010D0C9F4328584A5E605B0B84E10B311FBE1F00
Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/131661e4-3aef-3b43-b303-e6e0f47e7930.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     266777
IP address blocks:        23.175.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:5b:0b:84:e1:0b:31:1f:be:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=bbf3ebc3-0d64-44b6-91b7-feb5f1e9e528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8f:63:bd:16:b7:41:94:ec:47:ce:48:9d:b2:
                    12:00:ad:7d:24:df:5d:1f:34:03:88:99:42:1f:98:
                    af:86:b5:cc:25:9d:9e:78:f6:a0:52:d8:19:fb:54:
                    26:f1:30:0b:0c:38:e5:fe:d7:83:50:8b:22:3b:22:
                    b1:72:7d:ac:3c:75:d9:44:ca:78:67:d2:6d:04:9b:
                    55:53:62:11:8b:af:c5:ac:d3:12:42:ee:74:44:95:
                    b3:88:98:93:76:76:c4:ef:1a:21:40:c5:24:3f:1e:
                    d9:77:43:63:63:45:b5:03:6f:8a:c6:72:9c:d0:bb:
                    16:f3:3c:a8:24:d2:1f:68:4d:52:20:a4:1d:c5:19:
                    10:35:ec:18:10:b0:3e:e4:82:93:e6:3a:4b:d0:89:
                    83:6b:a7:26:0b:31:46:5c:00:8e:1b:22:9a:3a:2b:
                    c0:3d:45:b9:04:81:d2:86:07:8e:61:23:bf:29:74:
                    ae:c4:ab:73:fe:74:f6:df:d3:69:45:17:b3:5d:99:
                    ad:b9:3d:00:74:4d:35:25:fc:37:bf:35:ac:b8:10:
                    05:11:0e:98:04:62:0e:bc:08:90:64:f6:da:6f:f3:
                    ec:cd:10:84:a6:35:b9:29:d1:70:f7:ab:e9:dd:34:
                    be:d2:3b:e0:38:66:78:34:ab:b5:3c:ef:7a:f9:3a:
                    2a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A9:2F:A7:C1:BE:43:66:84:C5:2D:F7:76:13:07:25:D3:48:20:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/131661e4-3aef-3b43-b303-e6e0f47e7930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl

            X509v3 Authority Key Identifier:
                keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8d:f0:d1:5f:52:4b:ac:af:b0:3c:2a:f3:65:a2:78:a1:23:
         07:61:12:94:d1:14:0f:6f:b8:27:95:5b:a7:e8:3a:e8:ae:0f:
         e6:10:d7:de:23:24:d9:04:ee:af:81:0d:83:a2:05:70:c3:87:
         7f:7e:36:e5:40:cd:72:db:46:bb:fd:e4:fa:f8:57:d2:c8:22:
         37:e2:20:dd:a0:0a:d5:83:48:58:2c:f6:48:40:de:19:d2:f0:
         fd:ef:8d:5c:5b:00:00:26:61:8a:98:4d:ac:ac:23:b0:d8:cc:
         0f:a4:82:06:7a:76:83:5b:10:2b:c5:52:57:12:d1:b0:09:aa:
         e9:26:7c:f1:f4:d1:06:6f:4b:0c:eb:48:e8:e3:2b:32:b3:45:
         60:05:11:d4:e5:f9:ca:ca:8b:72:81:2b:29:ff:0d:e3:2f:d4:
         38:e5:15:a3:d0:de:ba:ad:9d:08:61:aa:88:41:7d:da:5f:e8:
         50:2d:7a:aa:e3:bb:6f:24:ae:ff:51:09:5b:e9:45:e1:81:67:
         32:30:ab:3c:81:91:d0:ae:d0:4a:ac:46:73:60:42:72:ad:6f:
         79:dc:5a:c7:7e:2d:a8:ff:28:bf:f3:e7:79:6f:41:bc:59:b2:
         dc:ea:09:c0:be:97:18:04:da:3e:03:39:0f:7f:a2:1c:df:dd:
         79:b9:ca:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:04:17 2025 by rpki-client