Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/f44b5d5f-4b16-3738-9696-16d29065549a.roa
File:                     f44b5d5f-4b16-3738-9696-16d29065549a.roa (raw, json)
Hash identifier:          5U67OphcRHRtjSWkjcM9ccQNXlJYWtuR7PmUoslj6Vo=
Subject key identifier:   E2:EF:F3:16:7C:FF:17:1A:8E:47:DF:74:71:75:FA:8E:7A:9D:C9:24
Certificate issuer:       /CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
Certificate serial:       010D0C9F4328584AC2E0EF437FBCB27748EB5300
Authority key identifier: 42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/f44b5d5f-4b16-3738-9696-16d29065549a.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     399466
IP address blocks:        23.177.48.0/24 maxlen: 24
                          2602:fca6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ef:43:7f:bc:b2:77:48:eb:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=58e80b8e-9f6d-46e5-84c4-a9a28bbaa6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:09:68:f5:16:3d:98:55:ec:9a:e8:a8:cd:
                    be:fe:96:17:2c:72:ee:8b:3c:fd:99:1b:22:e0:f5:
                    b3:6d:4f:be:98:d0:68:76:03:92:2b:79:f1:39:d7:
                    ce:7f:30:22:f5:c1:8b:ad:e3:1c:d9:77:d3:e0:3b:
                    a6:05:f0:58:ed:21:65:57:7c:2c:7a:1d:29:ba:75:
                    91:a3:88:00:25:c1:fd:6b:b5:e4:1c:16:db:07:3d:
                    a8:00:eb:49:57:59:d2:5e:99:cf:e9:0e:ed:2e:c1:
                    b0:a3:c3:b5:29:b9:ab:99:ba:68:da:6f:69:7b:1e:
                    18:76:b2:0f:a7:d3:43:4d:2b:69:c2:5e:48:c2:49:
                    c6:cb:55:78:e7:39:53:1f:46:44:59:5c:c7:fd:99:
                    b5:50:b0:90:b1:9b:ae:68:23:80:f5:33:97:36:fc:
                    9b:32:54:07:6a:a4:74:58:e1:0a:84:6a:15:eb:19:
                    63:3d:a5:b7:59:ee:34:51:82:8b:7b:aa:8e:63:02:
                    69:18:55:19:41:33:37:49:3c:31:d3:69:db:33:a3:
                    19:d0:dd:cd:47:cb:61:ef:93:fe:b9:9d:74:df:74:
                    01:f0:c2:ea:76:99:28:f8:11:b4:3b:77:2b:6d:81:
                    4d:2f:07:c0:5c:bb:84:e5:8a:bc:31:9e:1c:a7:56:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EF:F3:16:7C:FF:17:1A:8E:47:DF:74:71:75:FA:8E:7A:9D:C9:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/f44b5d5f-4b16-3738-9696-16d29065549a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl

            X509v3 Authority Key Identifier:
                keyid:42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.48.0/24
                IPv6:
                  2602:fca6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:70:c4:87:c4:b9:14:52:7a:47:70:7d:53:4c:7d:49:73:78:
         5f:4e:bc:1a:5c:b6:51:d9:51:5a:87:90:41:80:30:14:14:32:
         3b:d5:85:62:62:08:ff:e7:43:68:ae:0a:97:a9:0b:ad:5b:c3:
         4e:ba:65:c5:e8:9c:b5:74:80:9b:d4:d8:6d:3c:cd:d2:ab:56:
         bf:25:b2:5b:b5:6c:c0:db:4c:be:18:ad:45:85:30:89:18:81:
         6d:7a:cd:9d:d8:11:9d:51:c2:c2:11:28:67:17:2b:b5:4c:c8:
         49:ea:ed:b7:bb:8f:1f:36:7d:d9:41:7f:ec:52:3a:c8:81:9e:
         8a:40:9b:e4:77:26:ee:de:29:a4:56:ef:dd:25:9c:f9:cf:76:
         86:5c:c7:12:9d:d9:29:3d:e2:10:6a:9f:93:dd:1b:b8:92:99:
         41:67:3d:53:88:1b:a8:48:45:8b:a6:4d:e1:e0:1b:7d:4e:b8:
         d7:a8:17:40:91:6e:1c:b0:eb:22:4b:28:a7:30:20:37:3e:34:
         01:50:21:b5:4a:24:0c:75:a2:d1:7f:c0:f5:88:dd:48:e0:27:
         cf:a4:65:7e:15:b7:14:48:e3:27:1d:5f:42:11:d6:a2:a7:eb:
         c6:64:a0:26:ee:73:79:ad:2c:10:c3:ce:42:5d:30:6f:8c:d9:
         31:08:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:50 2025 by rpki-client