Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa
File:                     8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (raw, json)
Hash identifier:          QWPmR0soyExkBQEVIJIlUWYv/ouaDD4pZa47A6L1p+Y=
Subject key identifier:   59:4D:26:03:7A:80:C0:0B:F8:46:41:4E:9F:EE:B4:ED:3A:4C:7A:8E
Certificate issuer:       /CN=23c12684-32d1-4215-8c13-2912d85e2080
Certificate serial:       010D0C9F4328584A506AE9263E0829FDFCB18640
Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     8095
IP address blocks:        23.181.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:e9:26:3e:08:29:fd:fc:b1:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=6403edfc-6245-42c8-b650-4ab8badaec7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:65:22:50:d8:89:47:55:41:0a:ff:91:d0:
                    73:27:3f:b8:1a:65:42:93:22:06:45:74:cc:d6:e3:
                    06:ac:94:94:14:5f:10:38:e0:c6:92:02:26:4c:12:
                    88:0e:77:72:b4:2a:b7:61:22:09:c0:a5:d1:6e:89:
                    48:21:07:87:cd:c2:b7:de:61:40:0a:47:07:2b:88:
                    d4:da:cd:5a:28:e6:bf:d7:47:dd:2e:96:28:4e:6d:
                    bf:50:de:0f:a2:ab:1a:3e:4f:da:0a:4b:8b:2b:36:
                    24:b0:12:40:19:85:3f:e9:f8:eb:d0:db:0a:da:cb:
                    90:9d:57:96:73:c2:a1:cd:05:64:b0:4b:36:82:6f:
                    0a:f5:47:a1:19:20:64:c3:8c:00:d7:f0:c7:a6:4b:
                    40:9d:ea:8f:57:18:18:7f:55:50:1f:c3:ab:fc:0c:
                    8e:54:53:89:a0:11:ee:8f:08:f6:b6:30:c0:a1:25:
                    b2:84:1b:3c:97:35:f2:13:f2:c3:32:76:16:3c:bf:
                    a5:51:59:70:6d:27:2b:d5:51:a4:ed:44:ee:2c:04:
                    0a:7e:4a:7c:3a:47:48:f9:1d:58:63:a0:e9:62:46:
                    09:4c:05:65:3f:39:39:f2:11:9e:6d:22:36:02:d8:
                    07:28:54:5a:3f:49:95:ef:31:9d:7b:84:f0:d7:77:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:26:03:7A:80:C0:0B:F8:46:41:4E:9F:EE:B4:ED:3A:4C:7A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl

            X509v3 Authority Key Identifier:
                keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:cc:2e:16:a7:fc:f5:ad:73:9c:6e:43:e6:4c:fd:81:94:71:
         e5:42:d8:20:29:10:17:79:6d:ff:63:7b:9f:c1:0f:9c:95:75:
         0d:ad:5a:31:8d:11:36:22:d6:3e:d5:ab:67:69:98:25:56:5d:
         f0:d2:8e:51:5e:29:8c:ae:aa:00:c9:8e:5a:32:52:7b:5c:9b:
         b9:bb:f9:df:14:90:78:72:08:5f:26:12:9e:82:56:12:d0:b3:
         b2:89:be:6f:6a:52:38:30:fb:0a:bf:60:94:fa:a8:e1:e2:07:
         98:62:8c:fe:12:37:7f:c2:8b:44:a4:37:a3:17:f5:33:ac:09:
         bc:49:ae:ff:14:9f:27:30:0f:48:a9:27:c1:79:ca:d6:94:fc:
         48:84:e1:93:06:4d:4f:f6:8b:c7:61:db:4c:df:19:17:43:7b:
         dd:39:20:54:ac:62:29:63:c2:43:47:e4:4b:e5:3a:8a:1f:0c:
         a5:25:af:be:5a:d2:9e:63:b5:5a:94:02:14:e0:a2:8a:72:46:
         35:95:63:d1:f0:7b:24:28:cc:4f:1c:62:82:4a:de:6a:67:6e:
         7f:77:3d:24:19:2d:20:48:99:80:2e:34:55:dc:67:64:55:1a:
         63:8a:ec:a4:a5:83:30:cb:eb:14:1a:15:4d:1b:71:b0:35:c1:
         cb:23:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:32:41 2025 by rpki-client