Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa
File:                     06c61722-7a68-3f16-a8ff-eefcf70e5126.roa (raw, json)
Hash identifier:          z/39s32w2HBiGC4rxz09j1MoXDM/i9pf1LFKxmwhyDg=
Subject key identifier:   B0:20:DF:60:3C:6C:E3:85:EB:6E:48:C1:3E:9B:73:EA:DE:E9:26:00
Certificate issuer:       /CN=9eed61a4-093d-432f-9466-2001995b9535
Certificate serial:       010D0C9F4328584A90A0C2837095678B10F801D0
Authority key identifier: AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     30307
IP address blocks:        23.168.184.0/24 maxlen: 24
                          2602:f9b1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c2:83:70:95:67:8b:10:f8:01:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eed61a4-093d-432f-9466-2001995b9535
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=bb712b64-023d-4bd0-867b-8a2510a60ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f5:87:bb:68:72:fe:a9:8f:f4:68:43:c9:76:
                    cd:5c:e1:59:25:9d:3c:92:4d:44:c0:4d:62:ee:98:
                    c3:70:06:9f:a8:0b:90:e9:1d:8e:5c:ec:a9:1d:e5:
                    0d:ad:fd:6b:e7:77:96:c1:f2:3e:5a:f2:d7:d1:fd:
                    d8:e2:36:8a:9d:d9:58:69:f7:dc:44:ef:a5:dc:0f:
                    2b:8e:2a:d3:67:23:90:bb:fa:07:8d:c8:47:5b:ff:
                    7e:84:70:c7:f5:3a:62:f4:b1:b1:3e:dd:8c:f4:73:
                    36:25:f3:05:02:bc:ab:66:96:9c:7b:fb:63:59:1c:
                    97:a1:a0:fe:46:4c:73:61:40:88:98:2d:33:eb:7a:
                    84:58:a4:af:67:b4:7b:89:21:a2:d7:39:d6:15:ca:
                    cd:d4:70:67:de:4d:bc:4e:68:b3:57:b3:6a:d5:06:
                    6d:3f:de:35:3b:93:90:e1:d2:79:71:ee:8f:53:d4:
                    e7:87:5f:22:4b:f2:1e:10:7d:fd:d6:93:e2:94:42:
                    bf:41:85:94:f8:7b:32:1f:64:b9:6e:84:50:71:c8:
                    d2:f1:c5:31:08:c1:2c:b6:2a:06:c8:48:0a:4e:0d:
                    2c:9c:37:d2:82:4f:56:9f:70:2b:db:0d:40:6c:f3:
                    a8:5e:58:ba:f8:dd:3a:03:f0:d3:e9:28:08:34:ce:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:20:DF:60:3C:6C:E3:85:EB:6E:48:C1:3E:9B:73:EA:DE:E9:26:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.184.0/24
                IPv6:
                  2602:f9b1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ad:c3:46:db:cf:b0:b0:ca:dc:71:87:0f:6f:f3:2e:55:44:
         24:87:3b:b8:ed:49:bc:4c:5a:f7:dd:f3:da:c8:95:92:c2:35:
         75:fa:be:32:85:f4:23:6f:48:2a:07:cd:84:9a:ca:77:11:a5:
         f4:0d:83:a3:ee:46:87:c2:0a:e6:0c:ac:c5:36:bf:35:b3:9e:
         cd:0f:1e:96:f9:98:ec:cb:2c:e5:3a:18:e8:4b:2c:35:0a:cb:
         e2:93:5b:c3:6a:fe:b4:18:be:53:32:92:c6:67:8f:01:9b:74:
         83:4f:0b:67:05:b2:e7:dd:39:10:f4:74:f3:35:e4:0d:53:de:
         de:55:86:c1:8a:4c:97:6d:44:f5:27:40:7a:7e:ae:f8:bd:22:
         fd:2e:52:8d:3b:fe:e8:4b:7f:08:a0:ee:53:dc:44:b7:9e:7e:
         be:ff:c2:56:91:d4:18:ec:a7:89:a6:4c:92:c1:24:a2:87:fb:
         2d:ec:e1:84:3a:63:c3:5f:cb:10:9f:3b:03:fa:9e:f9:84:a9:
         20:bd:ac:13:78:30:1d:1d:a5:82:13:2b:31:5d:50:63:08:a6:
         da:16:52:9c:e0:dd:e9:bb:50:00:c5:79:79:91:6e:1c:48:2f:
         3e:e1:fb:c1:14:80:c9:35:11:b1:ef:25:23:4f:c0:0b:1b:6e:
         70:a1:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:26:48 2025 by rpki-client