Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/5c47ca63-7d35-3541-b247-554defca2e70.roa
File:                     5c47ca63-7d35-3541-b247-554defca2e70.roa (raw, json)
Hash identifier:          6hZELvNcf0rLxcGiNOc0DxARr3VlBK18ALl+q2dU4+4=
Subject key identifier:   CD:09:F1:51:22:FC:F4:59:01:DD:E3:08:90:0B:F0:C5:9E:77:0B:AC
Certificate issuer:       /CN=a6c28e56-4429-446d-9891-4fbd9fe90aee
Certificate serial:       010D0C9F4328584A49EA5321DE34F84B32E72900
Authority key identifier: 54:D8:49:B1:75:A5:1A:6C:FD:A1:45:F3:41:D6:E5:05:94:B2:88:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/5c47ca63-7d35-3541-b247-554defca2e70.roa
Signing time:             Mon 23 Jun 2025 17:06:24 +0000
ROA not before:           Mon 23 Jun 2025 17:06:24 +0000
ROA not after:            Sun 21 Sep 2025 17:06:24 +0000
asID:                     53514
IP address blocks:        23.180.120.0/24 maxlen: 24
                          2602:f8da::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:ea:53:21:de:34:f8:4b:32:e7:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c28e56-4429-446d-9891-4fbd9fe90aee
        Validity
            Not Before: Jun 23 17:06:24 2025 GMT
            Not After : Sep 21 17:06:24 2025 GMT
        Subject: CN=6642b24e-5a2a-4d21-97dc-be10d93df652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:cf:4b:28:a6:9b:56:01:c4:ab:7c:16:0b:
                    fb:06:69:0c:04:d5:dd:99:b5:75:69:e7:e3:e9:5a:
                    88:7d:36:8a:50:db:7e:f4:72:cb:29:eb:05:8b:38:
                    14:1e:9e:b7:3e:34:b2:c5:36:99:ea:4b:9d:c2:a8:
                    4f:73:e3:57:e4:fa:4e:2e:0f:4c:ab:c7:bc:f3:ed:
                    28:a1:e0:4a:c0:64:f7:08:b3:30:94:eb:79:32:2b:
                    bd:7b:8d:16:5d:4b:45:c9:31:fa:7b:79:33:a5:2d:
                    4d:3e:d9:73:60:72:cf:47:a3:6d:72:cd:7e:c7:e4:
                    27:bb:d5:1f:6d:0c:cf:f2:2a:a1:d7:3f:f6:bb:17:
                    de:91:92:fb:cd:ed:51:e2:54:1c:52:fd:40:ab:ae:
                    79:d8:23:2c:7a:3e:78:60:84:6c:e6:06:7b:1d:3d:
                    65:83:98:5f:ae:51:e3:11:c4:5b:c2:ac:f2:b9:65:
                    bc:41:e9:1b:a6:1a:05:98:f8:ad:21:70:56:ea:53:
                    57:f9:b7:a3:02:ac:0b:dc:0a:11:5c:d4:a6:4f:35:
                    ad:34:4c:dd:50:a9:2b:e7:3b:73:96:8b:99:1c:0a:
                    40:d8:7e:2e:87:91:f7:2a:da:29:39:a3:51:fb:35:
                    8f:38:74:02:ee:43:ad:f8:c8:79:a3:91:46:2c:d6:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:09:F1:51:22:FC:F4:59:01:DD:E3:08:90:0B:F0:C5:9E:77:0B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/5c47ca63-7d35-3541-b247-554defca2e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.crl

            X509v3 Authority Key Identifier:
                keyid:54:D8:49:B1:75:A5:1A:6C:FD:A1:45:F3:41:D6:E5:05:94:B2:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.120.0/24
                IPv6:
                  2602:f8da::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:e9:e7:7d:09:e3:fa:19:5e:d3:24:71:c1:03:45:ec:27:92:
         11:2e:d0:21:45:c2:d4:d1:9f:a0:ae:a3:e6:f0:26:08:c5:9a:
         9c:67:9f:51:83:0d:ca:d1:6c:1c:0c:7c:86:f3:fa:9a:79:7d:
         25:1a:b9:00:be:69:81:88:2c:c6:0e:35:73:db:f8:97:73:b3:
         53:9e:7d:2e:31:0c:88:69:b9:75:37:91:4d:1e:e5:e6:0d:a8:
         04:21:25:a4:a4:95:2c:ce:0e:83:11:b2:97:8c:54:be:a4:46:
         f7:bf:f8:f4:4e:14:6e:fb:5d:82:b4:81:4d:f9:38:a0:ee:e1:
         f1:52:54:a5:61:2e:16:63:73:07:58:85:3e:28:6e:5e:c8:77:
         b5:26:e3:63:a5:80:6c:89:59:37:4f:92:30:99:b1:a2:31:8b:
         cd:f1:75:4f:fe:5d:26:57:40:1f:20:d7:03:50:21:c6:2c:53:
         ee:d5:1a:91:d6:d4:22:af:2c:e0:d8:dd:41:d6:b7:1a:f5:ea:
         4a:2b:53:9c:bf:dd:37:73:24:83:29:38:da:8c:f9:e4:aa:59:
         a9:dd:78:ae:4f:e2:de:d6:e9:0e:89:ce:81:5d:7c:3e:04:66:
         a9:68:46:8b:12:f5:82:c7:93:ca:29:79:77:22:c9:8d:cf:dc:
         a5:26:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:29:04 2025 by rpki-client