Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/5cc4e495-b07d-3d7a-b08a-64b6b4edee86.roa
File:                     5cc4e495-b07d-3d7a-b08a-64b6b4edee86.roa (raw, json)
Hash identifier:          V856t75N5idi9Bswh5WKwCX7vKKWEmaq7QOpL+B2now=
Subject key identifier:   94:A1:AB:87:EE:38:40:B7:95:90:3E:49:F7:27:1B:7A:61:8F:24:C5
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584AD23BC2B8932851FDB0361480
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/5cc4e495-b07d-3d7a-b08a-64b6b4edee86.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     7018
IP address blocks:        23.234.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:c2:b8:93:28:51:fd:b0:36:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=c91eff9b-289a-43e1-a826-0192b56d0d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:9e:56:0a:b0:9e:22:3f:3f:59:35:27:a8:
                    00:c8:d3:37:18:f0:a3:1d:2e:9a:f1:01:4b:7f:5a:
                    74:f5:2f:b2:b0:45:98:c5:b0:56:78:3d:ae:89:26:
                    a4:af:e7:46:77:6c:23:ad:a8:4d:41:7e:27:7c:ef:
                    31:4a:db:3d:af:06:c9:9f:ff:41:f0:c7:c4:6c:90:
                    62:e9:a4:e5:fd:89:61:94:fe:31:da:e6:26:74:d2:
                    78:c3:c4:68:d4:d1:f5:b0:64:10:b1:8c:77:37:3f:
                    e5:c1:33:e1:96:0d:a3:b1:ce:ec:76:2c:08:9a:e9:
                    c1:16:60:ac:15:de:d5:50:56:c8:94:83:89:82:35:
                    91:58:bc:41:e2:07:97:a6:4b:c1:45:d4:a7:50:d3:
                    4c:2e:38:b7:59:1d:0e:ec:7d:51:c1:ce:f8:22:91:
                    8c:18:3d:34:57:fb:d7:58:c9:7a:69:3e:87:24:b5:
                    3c:51:07:9c:4c:7b:9b:3b:e9:5e:d3:43:1b:0d:11:
                    f1:33:21:d1:15:ae:38:a7:c3:9b:47:11:bc:12:88:
                    72:a5:4f:f7:35:70:ee:52:2c:dd:4c:eb:0d:b6:b2:
                    ac:f8:3d:9a:ad:23:be:5b:01:b2:e9:aa:75:82:0a:
                    13:2e:63:40:00:51:b5:af:3f:90:59:1e:6e:dc:e8:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A1:AB:87:EE:38:40:B7:95:90:3E:49:F7:27:1B:7A:61:8F:24:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/5cc4e495-b07d-3d7a-b08a-64b6b4edee86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:25:b1:cb:dc:10:27:a1:d6:88:bd:df:69:94:f4:00:c6:7c:
         59:d3:01:9e:83:e0:77:04:57:65:1c:49:d6:17:47:a6:03:cf:
         08:79:01:62:c1:a7:76:65:0d:4a:94:77:9a:fa:66:07:00:93:
         01:cc:22:22:5a:a1:80:1c:08:ca:df:c2:04:48:b2:3e:bf:0b:
         22:0e:cf:66:ea:9f:86:2a:ee:c2:1b:84:a7:8f:d3:66:6f:cb:
         14:63:d9:88:a6:e0:b1:16:24:6c:2f:ad:3a:de:49:2f:9f:c1:
         d9:08:ca:20:31:3e:ce:d5:29:c3:2b:4c:86:74:33:b7:39:51:
         97:10:71:8e:e0:a2:e2:fc:29:1e:b3:50:85:1c:a8:c3:17:4f:
         05:06:41:3f:54:0e:2d:10:60:fb:d0:fa:d0:0d:66:e3:e7:fb:
         76:16:15:a6:03:47:bf:7d:a0:be:04:56:b3:74:ba:3e:9a:b9:
         32:b3:96:d6:90:16:fc:39:cf:30:78:4d:89:e0:46:8c:2d:0b:
         f4:ce:59:7e:c3:c7:d7:78:b9:ee:e4:bf:d4:93:0d:25:58:6a:
         60:67:78:d2:da:1d:a5:c5:10:d2:95:88:02:6d:f0:73:65:aa:
         5d:18:06:2a:02:93:5b:a3:04:04:fb:58:46:b8:ae:2a:91:a1:
         74:23:b8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:16:32 2025 by rpki-client