Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa
File:                     cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa (raw, json)
Hash identifier:          ct7cbDdVAIp0DOatdtgMIhxzGiP5HPmXYYQshFcPRU4=
Subject key identifier:   77:7F:FF:3B:FB:D8:FC:58:DC:10:5A:9A:02:02:EF:11:81:BB:F5:A4
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F4328584AC2E10251E0D423C77F315A80
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     44324
IP address blocks:        23.149.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:02:51:e0:d4:23:c7:7f:31:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=10320b18-3c72-4453-9c35-3beec8d87c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:10:6f:8f:5c:98:1a:ba:04:3e:e9:e0:43:
                    e5:89:08:4b:73:83:35:fe:60:42:bb:89:23:5f:23:
                    79:00:12:23:6b:ee:6b:06:20:12:4a:9e:59:d1:67:
                    9c:4c:6a:45:36:8e:d7:9e:a3:c3:84:11:8f:79:c0:
                    a0:b5:79:f6:99:89:3d:d4:79:ee:04:9f:95:af:87:
                    0c:ec:4d:47:a9:82:b7:84:d2:ad:a0:1d:05:fe:88:
                    40:a1:11:07:7f:dd:fb:a1:8d:26:c9:e4:3c:8b:81:
                    23:b8:f8:c2:98:6a:9c:f2:9c:91:1f:3c:f8:53:d7:
                    68:3a:1f:0c:10:45:d3:ae:8d:6e:ca:8a:cd:77:37:
                    07:06:da:a4:7c:f1:26:1a:0e:e9:7e:40:82:29:13:
                    b0:72:61:68:8a:ed:e8:de:4e:24:7e:d3:44:b6:62:
                    a4:0a:fc:13:0a:59:3d:10:c9:5b:2a:0d:be:07:75:
                    e2:f6:11:7a:bd:cf:88:79:07:ac:ff:a2:17:cc:c2:
                    37:cb:e5:b0:ac:81:a9:9c:3f:c7:a1:ef:1b:81:6a:
                    53:ad:23:66:c7:8d:6f:dc:12:7a:f9:b7:19:64:fc:
                    a8:82:1a:31:05:ba:c5:0c:48:07:5e:05:c0:ca:ce:
                    67:ae:da:3c:10:ab:13:8d:64:94:63:61:6d:4e:30:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:FF:3B:FB:D8:FC:58:DC:10:5A:9A:02:02:EF:11:81:BB:F5:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:75:6b:ef:25:72:37:c3:e8:60:d6:56:cd:0c:76:3e:49:
         7d:3e:e9:48:e2:00:10:d6:70:91:a8:16:3b:d0:b4:95:4a:d9:
         79:74:e1:d1:76:20:41:b3:a8:ca:c9:14:8e:cd:9b:13:14:ad:
         62:17:16:b7:0f:7e:eb:a6:bd:6a:1b:ca:dd:8d:ce:67:bb:d2:
         d4:6c:c5:b7:16:87:6a:02:df:08:a6:87:1b:10:c2:4e:30:8e:
         30:8c:08:82:1c:cf:39:82:27:68:75:14:19:1e:75:aa:03:47:
         0e:a3:a9:76:4b:ec:31:56:ef:d7:2f:8f:6d:53:9f:fa:27:c2:
         f3:0e:27:fe:3e:d7:f1:ab:dd:65:24:b5:61:5c:da:b3:d1:51:
         07:22:d7:14:63:41:2a:ca:03:79:13:17:46:3f:f7:dc:41:7e:
         16:eb:f2:fb:34:00:b3:6c:e1:e7:d8:3a:fe:aa:8e:5d:52:3a:
         73:0e:0d:84:34:31:1b:ab:a4:d1:6f:57:32:ac:7e:42:01:56:
         66:40:06:18:da:33:c9:a9:22:96:24:12:93:f0:fc:37:42:dd:
         0e:29:af:a5:9e:83:d7:1f:1d:25:53:aa:43:44:41:28:d1:41:
         da:54:6b:d2:ad:f9:85:bb:29:1a:87:cd:24:20:ad:18:0f:6d:
         73:b3:dd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:45:32 2025 by rpki-client