Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/32d408f4-04fa-3ac0-bfee-544070de9c18.roa
File:                     32d408f4-04fa-3ac0-bfee-544070de9c18.roa (raw, json)
Hash identifier:          pn6K61/VT7ovqX2Xn4a/9EMr7oE2V1M9I+Okq8DFngQ=
Subject key identifier:   EB:AF:ED:8B:BD:E0:1D:6A:F8:1E:42:1C:D1:99:06:3E:B1:90:CE:28
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584AD7D117B9CAFEDFA5C1A60F40
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/32d408f4-04fa-3ac0-bfee-544070de9c18.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     265753
IP address blocks:        23.227.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:17:b9:ca:fe:df:a5:c1:a6:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=32618cf2-9917-48b3-896f-2dcb07adc946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:f3:6e:db:c4:e4:0f:9f:85:9d:7d:3d:bb:
                    c1:86:fd:36:d5:b5:18:a3:13:65:cc:47:55:ab:3d:
                    12:06:4c:23:16:e2:ec:ad:88:d5:9c:49:67:a0:56:
                    0a:62:07:ba:3d:e4:aa:b3:d4:3a:f1:c1:df:a4:23:
                    a1:e9:e2:86:b1:08:5e:e8:b0:e0:db:fd:94:ed:59:
                    63:bd:6f:45:c1:4c:cf:8d:e2:11:d6:b3:69:4e:f1:
                    d3:27:9a:6e:5c:85:11:65:72:67:5e:b2:08:3b:91:
                    1b:28:ee:b3:e8:4f:57:f5:3e:88:f7:4d:23:0f:8e:
                    8b:01:1f:da:be:fc:b2:91:ab:96:12:da:68:39:eb:
                    5f:f3:67:72:35:84:b1:de:3a:46:ae:c6:e8:dd:38:
                    45:27:ef:89:ba:f1:7d:ae:46:9f:9f:c8:ff:42:09:
                    75:c4:f4:9f:72:c1:14:d4:16:de:7c:97:12:5c:8d:
                    2e:1f:7e:63:47:52:3c:be:90:dd:5e:7c:ab:95:d5:
                    48:60:4b:55:b7:19:12:44:ab:fe:09:ea:63:ef:08:
                    8b:9a:21:8b:e8:a8:24:cd:91:e4:96:0a:ba:3c:94:
                    93:6a:7f:92:7e:6d:51:d8:f3:dc:a5:a0:8a:61:ef:
                    e8:c1:af:08:d7:a0:10:08:df:c9:a6:4f:f5:fa:ff:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:ED:8B:BD:E0:1D:6A:F8:1E:42:1C:D1:99:06:3E:B1:90:CE:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/32d408f4-04fa-3ac0-bfee-544070de9c18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:91:db:29:5d:b9:f2:b5:64:32:68:3f:32:bf:60:01:56:
         47:49:11:8d:2d:94:9d:0c:af:35:a2:24:ee:2e:1b:37:a0:f1:
         59:fc:f2:dd:77:41:a8:40:ce:44:3d:b4:f1:5f:7c:a3:9b:ce:
         52:ed:b6:f1:d1:3f:04:db:cb:cd:1e:39:6e:ad:ae:f1:81:c5:
         9d:5a:54:b9:0d:27:a7:ac:45:f4:ab:c5:09:4c:72:41:33:0a:
         fd:97:12:b5:cd:de:27:05:03:7d:1f:00:e8:4b:5a:61:4d:c6:
         00:d1:13:c1:4c:54:7a:b6:4e:76:d3:2e:1f:aa:a1:fe:c2:44:
         d8:9f:aa:60:34:cd:72:b9:de:59:a2:33:7a:f8:19:b7:49:22:
         db:8b:6d:2f:24:e7:e6:46:35:2e:6c:5a:5d:ba:25:73:15:e6:
         95:ab:e0:f2:9e:72:6b:d1:c3:6d:6f:24:91:88:c0:58:b8:cb:
         cf:f3:61:cc:1a:13:fd:65:1f:a5:69:dd:8d:cc:e1:e0:91:d0:
         69:c5:08:d3:60:59:c1:06:b5:8c:fc:c6:3b:8e:39:ba:a9:4c:
         80:97:fe:40:3c:57:ff:a2:75:e7:2f:b4:20:e2:3e:d1:e5:7f:
         97:3a:a3:8e:7c:01:c3:79:c2:f6:ae:4c:94:8b:4b:2e:be:3e:
         85:e7:19:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:57 2025 by rpki-client