Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa
File:                     7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa (raw, json)
Hash identifier:          gLOmugZeV+EISuilMEd3UdbDUXbtbmZEqbolTW0ytPU=
Subject key identifier:   91:E4:31:66:04:D5:C4:A9:5A:2C:79:51:5B:21:72:08:06:B5:83:10
Certificate issuer:       /CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
Certificate serial:       010D0C9F4328584AD7D10B3EAC1E772252DC2F80
Authority key identifier: 42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     35990
IP address blocks:        23.177.48.0/24 maxlen: 24
                          2602:fca6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:0b:3e:ac:1e:77:22:52:dc:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=b282b9cb-8bc9-4ea1-902a-8a1936b34bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:51:37:0a:65:5d:31:d5:3b:ef:bb:7b:b0:
                    da:00:08:dd:5d:1b:aa:3a:f1:b3:33:15:73:67:f0:
                    81:ac:8a:32:24:8d:e0:4e:4f:46:2e:17:d0:56:25:
                    de:22:a1:47:50:fe:51:d1:92:38:99:42:73:8b:36:
                    29:35:ef:07:bd:35:f0:35:c7:8d:1b:44:56:1e:ef:
                    18:67:6b:bb:de:5c:42:e9:3f:72:75:a9:42:32:9c:
                    b4:95:b4:a9:10:3b:a5:bd:c3:84:ae:3e:85:9d:06:
                    46:d3:e9:d2:4d:ba:9b:3d:77:06:df:09:3d:a4:bc:
                    89:fb:4e:6d:48:85:ef:6a:d4:4b:62:c9:38:a6:5b:
                    16:eb:fe:64:50:76:fc:1e:e8:71:3e:9f:23:5d:ca:
                    d0:f6:58:44:0e:73:6b:4b:1d:6d:56:c9:b4:cd:ce:
                    a1:01:58:8f:be:ab:36:ef:47:1b:54:2e:6a:73:61:
                    86:41:5e:b8:e1:0e:97:b1:e8:ba:76:f5:7f:2c:61:
                    ab:64:ef:6c:f0:5f:7e:21:04:7d:ad:21:53:7e:d5:
                    ad:8c:a9:b3:ae:e2:9d:7e:6d:9d:1b:b2:14:c0:17:
                    95:b5:71:a2:57:a1:e2:96:59:33:cc:f1:ed:33:ef:
                    c9:0f:78:52:b8:53:10:22:e5:ec:27:c3:60:06:59:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E4:31:66:04:D5:C4:A9:5A:2C:79:51:5B:21:72:08:06:B5:83:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl

            X509v3 Authority Key Identifier:
                keyid:42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.48.0/24
                IPv6:
                  2602:fca6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:23:f3:49:e6:ab:e8:20:f3:c2:82:c3:f6:45:97:23:5a:c4:
         9c:a5:3d:6b:91:b6:b6:c3:c4:2b:51:c7:cf:cf:14:bc:d2:51:
         fc:bc:3c:5e:92:ea:62:aa:a3:45:68:24:26:e3:d5:c7:52:57:
         e0:ed:6f:72:7c:82:05:d6:13:87:3a:01:df:24:6c:67:ae:ee:
         c6:3b:45:3d:71:4a:d0:64:67:0d:06:4c:98:3d:27:4a:64:b5:
         aa:fe:2c:85:d7:dc:03:cc:c8:33:cd:f0:38:fb:ba:74:3c:64:
         75:79:98:8b:30:0a:41:bf:2b:a9:55:f5:a9:8f:30:52:b6:3f:
         b5:f8:0d:c9:05:a0:03:c3:a5:24:af:71:d7:2a:62:c8:8a:d1:
         f0:d9:5f:38:1b:a2:86:d6:1e:47:a6:04:4c:f4:6c:4d:c1:a6:
         17:a1:84:50:bf:0a:66:98:7f:b3:cf:01:a3:57:7d:4d:f7:9f:
         e6:cf:0a:42:35:b7:d6:fa:5b:3f:bf:e9:78:f1:a9:23:d6:75:
         61:59:03:75:7b:ed:26:1f:09:13:fc:25:d3:a8:5c:37:de:fa:
         cb:4f:d0:96:9a:38:54:a1:dd:73:e4:50:b5:82:b6:8b:fe:9a:
         99:e6:7e:b7:6b:dc:7d:44:50:64:41:82:c5:40:56:77:27:8f:
         84:25:e0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:28 2025 by rpki-client