Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa
File:                     d1c12072-6c1b-3b2a-b15f-9a20316659df.roa (raw, json)
Hash identifier:          AHzfuLHLmGaPHTZ+Oq4cymBoONOAM6ofH+/hHxXm8dg=
Subject key identifier:   58:86:26:1C:93:48:68:97:81:C1:B2:DB:13:44:1C:40:11:20:35:65
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584AD23BACB3CE172D7DEE177200
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     20454
IP address blocks:        23.235.244.0/24 maxlen: 32
                          23.235.245.0/24 maxlen: 32
                          23.235.246.0/24 maxlen: 32
                          23.235.249.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:ac:b3:ce:17:2d:7d:ee:17:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=34590328-6e94-4a84-a2e0-4e9c7e72c833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:25:af:c7:28:81:a3:99:7c:30:76:d2:d1:
                    7e:d1:7d:09:e9:f0:fd:e5:63:ca:29:f3:55:77:8e:
                    73:0e:3e:a3:ac:1a:11:ec:66:73:0c:cd:16:d5:60:
                    04:32:06:4c:27:18:d1:34:83:cc:66:f4:8a:69:2f:
                    b8:9f:69:05:a4:7a:8a:fa:63:d6:e4:cd:5e:3a:af:
                    0c:31:81:7a:97:aa:41:c8:08:71:50:aa:4f:b7:36:
                    5b:b2:b1:35:19:d5:38:4c:e0:ca:4f:b3:34:65:17:
                    82:56:1a:0a:9a:56:5b:a0:3b:4a:08:b4:ef:c3:1d:
                    ba:d1:e8:84:6f:2b:e0:e6:87:dd:f7:1e:78:78:4b:
                    81:a2:28:33:71:bb:bf:c7:51:51:33:7d:f1:4b:85:
                    e3:9c:f2:52:01:1c:6a:84:da:93:09:4b:b4:48:2d:
                    81:30:e0:39:a6:5d:a6:d1:1c:b2:de:50:83:1d:ab:
                    23:55:38:f3:43:40:c5:38:5e:39:16:66:98:12:b2:
                    ca:f0:68:4f:cd:fe:17:7b:e9:4c:57:44:77:59:ec:
                    06:2b:ab:c3:93:00:f5:60:03:85:85:c7:fc:07:14:
                    1f:0a:9f:c7:6e:14:9a:92:3c:56:51:ef:86:79:b7:
                    d4:c1:49:1a:17:e7:f2:32:6e:53:2a:e3:fe:9a:17:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:86:26:1C:93:48:68:97:81:C1:B2:DB:13:44:1C:40:11:20:35:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.244.0-23.235.246.255
                  23.235.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:cd:f1:e0:94:d7:67:52:50:55:43:df:7b:47:82:24:60:40:
         6d:61:0e:75:e0:47:bd:54:b4:58:89:37:e7:1b:f4:e2:98:bb:
         90:20:64:a5:f7:e9:1c:b3:86:fa:b4:1b:fa:d8:08:78:41:4d:
         6b:aa:b0:9e:72:82:c2:e2:76:5d:84:23:d8:9d:46:f9:b8:d5:
         32:5d:b8:8b:ba:80:68:33:0d:4f:09:8f:73:d3:a0:0a:25:45:
         e3:d6:75:1f:e3:3b:86:e6:8d:7a:67:38:d9:e6:c8:4f:8b:2d:
         e4:8c:68:7a:e0:b5:69:88:f8:4c:58:41:ba:b3:4e:34:71:1e:
         41:3f:bb:06:43:ea:96:58:69:7d:76:5f:5d:73:0f:f6:fd:ae:
         c4:1f:7f:ae:25:aa:f2:d9:2b:6d:f6:a6:72:89:a2:1b:a6:ba:
         87:06:70:7e:fc:cc:0a:f8:89:54:df:7b:5f:36:fa:52:80:86:
         b4:39:c4:07:4e:e8:93:c8:48:5e:6a:cd:88:7b:4a:ce:7b:86:
         e1:f5:a2:86:fc:91:63:85:ef:72:09:66:4b:9c:03:f0:bb:66:
         c7:b7:d2:4f:e1:2d:86:c0:0c:08:85:e3:4d:ce:65:9c:57:53:
         ed:32:5c:00:9d:10:d2:1b:10:64:9f:b1:ca:46:58:de:a5:be:
         01:da:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:14 2025 by rpki-client