Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa
File:                     0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa (raw, json)
Hash identifier:          aEktj0WbMDKADCwEkLmfs36biHCvCXUXrX9NrdxNl7U=
Subject key identifier:   C1:EC:FB:69:D4:AF:21:AB:81:B1:0B:DC:43:DB:0B:86:31:E0:D3:C0
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584AC2E0DB42D1E0F90A8BBA4000
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     3462
IP address blocks:        23.91.111.0/24 maxlen: 24
                          107.155.30.0/24 maxlen: 24
                          107.155.57.0/24 maxlen: 24
                          128.1.37.0/24 maxlen: 24
                          128.1.45.0/24 maxlen: 24
                          128.1.50.0/24 maxlen: 24
                          128.1.63.0/24 maxlen: 24
                          128.1.101.0/24 maxlen: 24
                          128.1.102.0/23 maxlen: 24
                          128.14.238.0/24 maxlen: 24
                          192.254.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:db:42:d1:e0:f9:0a:8b:ba:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=8cedaae6-b9b6-4490-a05d-5b3d475b3d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:e8:e3:6f:ec:65:5d:6f:65:97:49:9a:d2:
                    73:ba:64:76:00:75:6d:69:70:8d:6c:34:dc:f4:f3:
                    6c:5d:97:b7:27:a5:8e:96:dc:2c:a6:21:4c:88:0c:
                    8c:fa:13:e7:9f:c2:e8:03:0b:97:7a:76:2e:1c:32:
                    93:14:3a:09:32:8e:ae:d0:b2:94:41:20:ff:e4:04:
                    27:30:ed:50:ff:ba:45:ab:ad:98:44:a1:6b:f0:6d:
                    36:ab:42:79:d7:d3:c1:96:b1:c6:2d:56:5f:f5:33:
                    bd:a0:6a:eb:e5:a9:9d:54:00:5b:80:a2:6e:90:e2:
                    e8:6f:af:7d:2f:7b:65:7e:33:13:d1:84:42:1c:78:
                    fc:df:31:1a:ab:6e:b6:07:17:14:90:18:98:71:13:
                    33:97:ac:fe:81:ba:ea:30:95:bd:e3:88:5a:96:30:
                    ae:40:fa:b4:f9:99:2a:2f:86:e9:31:a9:b5:c9:55:
                    00:99:f9:e6:cc:3b:0c:01:62:28:e8:57:45:df:f2:
                    ff:68:28:f7:a2:1f:6a:44:66:06:0d:e0:af:e7:af:
                    15:5d:69:c0:00:e2:23:d2:fb:17:26:f5:7b:78:a8:
                    5e:0e:b3:80:54:a5:09:74:30:b2:4a:c8:05:7f:2e:
                    60:d3:4f:1d:7c:b1:1f:f6:e8:88:02:bb:60:bb:9e:
                    29:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EC:FB:69:D4:AF:21:AB:81:B1:0B:DC:43:DB:0B:86:31:E0:D3:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.111.0/24
                  107.155.30.0/24
                  107.155.57.0/24
                  128.1.37.0/24
                  128.1.45.0/24
                  128.1.50.0/24
                  128.1.63.0/24
                  128.1.101.0-128.1.103.255
                  128.14.238.0/24
                  192.254.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:61:b9:11:d8:9f:0e:b4:50:f6:ef:d9:3f:d5:28:45:c2:1a:
         47:33:c4:3b:77:20:7e:67:0d:1e:10:f7:7b:f5:59:d8:43:3d:
         49:06:7e:66:2c:68:c4:58:a6:5a:33:b6:63:69:94:94:36:1a:
         d5:5d:a0:cd:8e:30:8c:bf:eb:92:9f:59:2f:ef:8d:89:29:78:
         16:bd:51:0d:6d:1e:ba:a9:d9:ea:35:a8:b6:24:82:54:7a:f0:
         8b:e3:cd:f1:60:19:22:c4:51:91:e9:2b:4e:55:10:b5:a1:14:
         a7:26:a1:c2:34:d1:40:96:9d:2c:82:07:7f:9c:9e:7a:d8:f3:
         50:12:73:f8:bc:c1:71:85:08:f4:bb:5b:bf:40:35:6f:9d:7d:
         e0:c0:7f:cd:76:73:11:87:ab:55:06:e2:c7:03:9b:41:a0:7c:
         01:40:4e:14:34:93:f7:08:43:cb:8e:ee:38:cf:ed:0f:61:29:
         af:3e:02:ff:ee:e6:a9:01:0b:93:fc:7d:b0:2b:fd:7c:b0:71:
         f9:8b:95:ba:f0:10:8c:4f:12:e1:bb:84:ae:da:5c:0d:bc:d3:
         3c:62:b5:07:eb:48:0f:b6:44:14:8d:8a:ed:1b:a9:32:94:0a:
         fd:bc:dc:08:9a:41:e1:f9:67:0d:de:f7:18:2e:41:03:0f:2a:
         b0:78:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:44:20 2025 by rpki-client