Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa
File:                     c3ce66bf-4cb7-36f4-a357-e0e778927525.roa (raw, json)
Hash identifier:          GnMFHX2GqeiaxkNLTaIBb04XJ1Jeyaw6eqlj2AAqj7w=
Subject key identifier:   86:B3:42:EE:AF:73:05:44:FB:22:AB:90:C2:50:B8:8B:31:C5:10:40
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F43285849DF5A66AB3B620E6EC9337D80
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     1239
IP address blocks:        23.239.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:66:ab:3b:62:0e:6e:c9:33:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=9b6d0a6d-fd00-4569-8263-7a7e753c5fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:15:27:e4:03:00:f9:06:72:c1:93:ff:69:
                    ae:09:6b:2e:37:ee:ea:c2:5d:69:c1:0e:79:83:76:
                    51:84:4d:21:75:75:9f:95:a1:72:f9:91:8a:b9:81:
                    2f:08:27:bd:d6:c8:0b:b7:91:ca:2d:d1:9e:16:88:
                    9d:f8:18:72:22:eb:83:56:f4:89:92:a1:71:65:87:
                    04:82:2a:bb:23:ac:8d:da:29:cd:42:e5:bf:68:8f:
                    47:0c:69:71:a5:8e:13:07:c9:1d:b8:31:38:02:d5:
                    97:b5:28:36:51:fb:cf:81:95:d5:92:1d:ce:01:c8:
                    a1:96:70:ec:b9:b3:31:18:95:d6:73:c2:6b:02:58:
                    f1:a8:5f:18:26:71:98:42:2d:8e:1d:e4:a3:64:54:
                    0c:4c:6f:ae:7d:2a:f6:fe:c7:06:e1:72:12:cd:1c:
                    7e:80:40:0b:a5:5b:09:ee:bf:1a:7c:07:a5:eb:37:
                    d5:0d:c3:6e:99:44:69:c0:fc:0d:26:b5:d2:1f:28:
                    f0:c8:ed:a9:89:02:14:aa:2e:d2:ad:95:02:b3:29:
                    f3:4c:4f:e6:08:07:3b:05:eb:b8:b0:51:62:8d:5d:
                    21:ab:ca:3d:5f:50:7c:13:e6:70:73:24:65:0a:15:
                    77:16:ee:83:f8:89:7d:f2:f4:28:28:95:49:10:82:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B3:42:EE:AF:73:05:44:FB:22:AB:90:C2:50:B8:8B:31:C5:10:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:74:59:24:bc:0a:49:56:2b:b4:69:3b:c9:8d:e9:47:c7:61:
         63:6c:c0:ab:a5:98:02:81:80:aa:17:f8:39:d3:77:1b:29:1d:
         6a:53:bd:1b:d1:71:7c:e8:9d:55:84:9c:f6:e7:dc:70:35:7f:
         09:55:b6:90:a4:79:f6:1a:6f:a2:4d:2e:d8:fb:44:37:cc:aa:
         54:21:f9:51:38:26:0d:d9:ee:70:53:00:0f:71:5f:fd:71:ec:
         7a:b4:96:7c:31:61:11:42:e4:f4:ca:e9:d6:b9:3e:e3:eb:5c:
         a5:d3:f4:73:77:26:d2:5d:e3:35:50:af:84:d2:14:9a:5f:bc:
         66:f8:29:0c:01:e6:c6:84:2e:fc:ac:be:5e:6d:cb:da:b3:ee:
         5d:bd:5e:4f:fa:e1:0d:24:eb:ae:5b:17:69:0f:34:21:2d:76:
         a8:0c:cf:00:3d:41:fa:e2:8f:4e:83:97:5a:c2:66:87:65:f2:
         b8:1d:c2:95:50:ad:12:da:2f:c7:a7:a3:c2:c3:f7:12:96:b0:
         ef:4e:64:db:43:a3:62:4a:a8:99:f2:40:5b:ed:40:a2:c5:c0:
         27:b1:d5:8d:8e:93:13:52:df:5e:52:93:fa:de:7a:2b:a8:1c:
         5a:aa:5c:a3:c8:d1:5f:13:5f:cc:d6:52:1b:b0:46:35:af:27:
         3e:a7:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:26:31 2025 by rpki-client