Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa
File:                     b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa (raw, json)
Hash identifier:          taIiHgDXRLyH9Tu/EWW9rAChvLG09xziy3PqUTjbeJY=
Subject key identifier:   10:2D:60:91:BF:B2:48:66:46:A0:28:9F:33:9F:75:23:15:6F:8E:F5
Certificate issuer:       /CN=a9dc842a-d5cd-4c00-95d8-2542c58d42ee
Certificate serial:       010D0C9F4328584A3FAAD4E20EBB1DCA75734680
Authority key identifier: 8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     394019
IP address blocks:        23.139.248.0/24 maxlen: 24
                          199.79.156.0/24 maxlen: 24
                          2602:fb32::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d4:e2:0e:bb:1d:ca:75:73:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dc842a-d5cd-4c00-95d8-2542c58d42ee
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=a923b6b3-b4c3-456a-b209-7ef1b70d8b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:0f:7d:a8:77:b2:41:df:22:ac:33:7f:5c:
                    3e:bf:78:ad:56:d8:84:56:aa:78:0c:ca:7d:67:21:
                    41:7e:65:53:8e:72:b6:95:8b:e5:b4:a2:fc:5a:3a:
                    4d:d5:19:db:29:fd:00:58:84:52:59:ca:7a:a8:df:
                    5e:64:a2:57:9d:d3:ec:75:f9:19:22:54:d1:67:97:
                    ef:c6:f4:87:d9:19:45:28:b6:39:bb:9a:98:18:7f:
                    77:06:9f:bd:4e:8b:ca:3b:31:a4:ec:3c:07:a5:ce:
                    1d:4e:b9:9b:0f:5d:0d:67:62:65:ef:8c:e9:d4:6e:
                    76:84:e7:92:97:0d:fb:62:8d:a5:97:9d:e3:d1:28:
                    82:45:d5:61:97:5c:24:81:96:1e:9c:bc:6c:3f:48:
                    a3:f2:f1:bd:e3:68:f3:b0:33:2a:db:14:7d:12:e0:
                    53:12:70:9d:f3:53:f1:6d:b8:b3:06:70:4b:1a:0a:
                    de:9d:0c:76:f3:29:6e:f0:20:a1:23:d2:51:44:3d:
                    9e:52:a6:83:6d:e4:b9:f6:b2:89:8d:b6:f2:87:19:
                    7a:2b:78:33:21:84:95:f4:e0:f4:4b:2f:17:af:37:
                    3f:aa:24:9b:2e:86:4d:20:c9:7a:de:91:31:b7:b1:
                    0e:95:bf:d0:46:43:7e:e8:e4:4c:dc:2c:09:44:68:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2D:60:91:BF:B2:48:66:46:A0:28:9F:33:9F:75:23:15:6F:8E:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.crl

            X509v3 Authority Key Identifier:
                keyid:8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.248.0/24
                  199.79.156.0/24
                IPv6:
                  2602:fb32::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fe:fb:20:b7:29:26:1e:c3:64:56:4b:54:f8:05:2a:1d:96:
         f4:d7:39:96:39:9b:5b:06:85:a5:db:f4:ec:c1:7a:7e:3d:ae:
         24:c3:94:42:fe:b3:0a:71:cb:b9:e7:3b:33:17:d8:3a:d6:7b:
         e4:b7:7f:53:50:92:75:10:83:f2:ee:a6:75:1f:31:0d:f2:4a:
         70:32:3a:9a:6e:c2:bf:28:c3:92:5e:e8:77:81:c6:e8:09:65:
         90:43:5c:f1:85:a7:57:a7:b4:1b:21:9a:26:cd:ae:cb:36:c4:
         61:b2:3d:9e:f0:48:d0:98:d3:b2:5c:38:15:b3:fe:91:44:a9:
         f9:14:4e:68:c4:36:1b:c0:58:5c:b5:65:48:f8:c5:38:1f:ac:
         4f:ae:a4:95:43:29:c3:80:a0:3a:c4:00:96:90:bf:c4:60:ad:
         f1:64:1f:f9:95:4b:56:b4:32:05:40:fa:ba:d9:06:9e:49:87:
         f3:8b:44:cb:e4:73:24:46:4b:77:2e:cc:7c:a1:9c:8f:90:59:
         4e:81:75:7e:cb:25:d8:48:01:78:39:d2:56:f9:9b:3b:6c:f5:
         5d:5d:e9:42:66:18:af:7d:6b:27:3b:fc:0f:06:df:ef:db:21:
         92:6d:68:b6:c8:9d:66:82:c8:01:94:90:95:f6:dc:b1:8e:e8:
         1c:5c:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:03:15 2025 by rpki-client