Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa
File:                     efbeebc8-e654-325a-9221-7b430f463318.roa (raw, json)
Hash identifier:          rB/6H39BW2G2mLlK/ZAAWOQBj14HibJgZkBqmtm374s=
Subject key identifier:   50:CF:38:10:3C:94:DB:36:94:81:70:2D:2F:7C:CF:B7:B6:DB:CA:A7
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F4328584A45403BEA26DC86CCB6EC7270
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     0
IP address blocks:        107.180.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:3b:ea:26:dc:86:cc:b6:ec:72:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=51db549c-858e-421c-b77e-d4e28ebec9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:57:93:7b:f6:85:73:a8:9c:ac:1a:93:6a:32:
                    bc:1f:24:fb:a3:58:59:b9:bc:89:41:a8:36:d7:47:
                    27:66:14:31:fb:f3:57:7a:99:99:88:b1:cc:b7:26:
                    79:2b:07:f1:96:33:89:a2:e7:79:b4:23:38:21:ea:
                    2f:19:97:bd:4c:21:82:78:ee:73:97:68:07:51:2a:
                    53:2a:4b:0a:2a:2c:df:90:bf:e6:fe:cc:26:81:5c:
                    b5:d3:c3:28:cb:19:3b:09:9c:2d:64:41:22:9f:ad:
                    3d:3c:b3:a4:ed:67:cb:8a:a8:d1:83:5a:f7:8e:6d:
                    31:6b:32:93:03:ec:b6:a5:8a:f7:16:a0:0e:0d:ff:
                    8a:b2:f4:3a:9f:f5:17:64:bf:01:86:8f:45:39:b7:
                    20:87:60:a5:eb:12:9e:da:63:22:d1:a9:d4:13:2c:
                    a3:48:29:0b:35:06:72:3c:e5:18:0e:1e:17:b8:ee:
                    cf:74:0c:86:8f:b1:67:39:d4:c1:4a:46:62:e9:13:
                    ad:3f:03:1f:cc:98:4e:2e:4b:65:23:5d:2b:99:8f:
                    f5:53:b1:8e:84:a1:57:c2:a9:ce:ff:2e:42:f5:72:
                    e6:10:fe:a6:de:ea:ff:1d:9d:63:61:68:5f:d8:50:
                    ef:a6:cd:89:ab:51:51:80:47:a8:da:5a:1c:11:58:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CF:38:10:3C:94:DB:36:94:81:70:2D:2F:7C:CF:B7:B6:DB:CA:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7a:70:73:58:81:49:8b:5d:0c:09:14:6b:f5:1e:44:64:be:
         b5:27:37:4f:e3:05:25:03:52:8b:70:ab:06:6c:f3:dd:81:fe:
         55:ad:6d:0a:5c:77:e8:85:7d:93:20:c6:39:a3:50:c6:94:e3:
         f9:06:a5:ee:72:81:ba:bb:6e:56:a1:d0:dd:e0:e8:db:cc:cb:
         65:1a:a8:bf:65:7f:07:77:c7:70:48:9e:08:6a:82:a7:c3:b5:
         82:0c:a4:46:2d:7b:0f:21:08:27:3e:50:1f:b9:48:47:9c:e0:
         97:8a:1e:f4:6f:3c:e6:b0:b2:5d:ac:69:84:81:85:a9:31:63:
         f2:3f:ba:ea:5e:a6:1c:8d:fa:f7:86:28:ce:00:72:28:7f:7d:
         56:d3:53:8f:af:32:45:e4:a8:55:26:b6:5c:8c:28:93:0b:8c:
         d9:46:5c:17:64:34:2c:a5:b7:16:4c:fb:dd:12:65:90:0c:71:
         e7:3b:c0:6d:aa:1d:3f:d7:31:07:01:41:b2:cc:d9:2a:0a:41:
         bc:a9:e1:a3:01:77:51:89:bc:a1:db:a4:31:bd:cf:24:b3:48:
         c4:b8:57:f6:30:e7:ab:56:68:92:36:ba:e5:8d:62:ba:f9:ee:
         57:cd:b7:d3:4c:3f:0d:c1:27:cf:25:5f:85:3d:73:0c:e9:c1:
         89:76:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:51:16 2025 by rpki-client