Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/6f81ad8c-4cc5-35d1-b472-c048522b016c.roa
File:                     6f81ad8c-4cc5-35d1-b472-c048522b016c.roa (raw, json)
Hash identifier:          ICqPcrubUu353wn144T4u/x9Fr3YQuzo/VzHoedcahI=
Subject key identifier:   21:B3:AC:4C:8C:66:AE:84:1B:53:93:BA:88:6F:C2:2B:0A:8A:CE:0C
Certificate issuer:       /CN=5e8f0254-f046-4c03-9c92-b57af2e5e3bf
Certificate serial:       010D0C9F4328584A4F05B28D1F7AD345E04CC8C0
Authority key identifier: 9C:D9:56:21:0B:16:31:49:E9:D0:52:B8:E4:C5:71:98:3D:8A:DF:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/6f81ad8c-4cc5-35d1-b472-c048522b016c.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     8095
IP address blocks:        23.179.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:b2:8d:1f:7a:d3:45:e0:4c:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8f0254-f046-4c03-9c92-b57af2e5e3bf
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=58979ce6-be0d-4ddc-9118-2a9d6dbe6fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:3c:3f:79:f7:d8:64:5b:74:ad:ef:e6:3a:
                    9f:81:87:86:19:b4:c2:ea:35:b6:c1:19:c4:d6:b9:
                    d9:53:cc:dd:46:6a:4d:4c:89:db:fe:0e:e0:cc:e6:
                    a9:3f:fc:c6:97:e9:77:1a:7c:4e:45:63:ee:b4:07:
                    a5:31:c1:f1:2b:3e:5e:f0:b8:9e:85:18:30:9e:a4:
                    99:6a:bd:f6:16:27:47:74:e3:19:2c:64:53:88:45:
                    f1:b8:df:bb:b5:27:e3:86:4a:99:61:56:f4:76:cb:
                    52:48:96:af:31:c2:67:6a:af:00:fb:f3:68:ba:45:
                    46:e7:29:52:63:92:a3:31:5e:64:ae:d4:6f:ae:a3:
                    06:fb:5e:23:9c:31:4c:47:83:8a:dc:f4:12:f9:c5:
                    37:d5:ba:89:4d:34:b2:ee:80:d0:5c:44:38:8d:59:
                    f2:21:06:21:14:33:ba:b8:01:6a:8a:8b:1f:bd:80:
                    2a:a7:7c:6d:b5:ae:4c:2c:7f:c6:67:97:ab:16:fa:
                    fc:43:90:ce:11:63:67:a1:98:87:c1:6d:6c:d2:02:
                    81:a1:4a:47:3f:22:87:04:1b:e3:2b:bc:4a:3d:ff:
                    01:5f:11:be:66:11:4c:fa:24:48:99:98:9d:cc:2e:
                    bb:d3:01:cf:3e:34:39:18:c9:ce:02:e6:18:1c:3b:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B3:AC:4C:8C:66:AE:84:1B:53:93:BA:88:6F:C2:2B:0A:8A:CE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/6f81ad8c-4cc5-35d1-b472-c048522b016c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.crl

            X509v3 Authority Key Identifier:
                keyid:9C:D9:56:21:0B:16:31:49:E9:D0:52:B8:E4:C5:71:98:3D:8A:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:08:77:f1:3d:2a:8b:bb:75:50:25:db:1d:8d:a9:a7:fb:63:
         9b:e1:a3:aa:e5:90:5e:b0:24:88:35:b6:1c:73:4e:c2:0a:ff:
         4d:7a:78:a9:4e:85:ff:bb:51:a6:80:ac:09:7f:d5:1d:b4:d2:
         5f:a6:78:2e:67:72:e5:3d:8e:55:0b:49:db:53:19:bb:c2:aa:
         e7:c3:1a:6f:2a:6b:48:15:c8:45:58:c3:48:e1:1b:62:1e:c7:
         7f:78:93:72:27:2d:37:46:13:77:09:aa:a3:21:66:8e:8b:90:
         5b:ba:21:e3:92:07:a1:98:19:38:62:5c:6b:3e:ea:10:e5:bc:
         da:72:e2:ea:e5:bf:79:12:98:75:2c:fa:2d:c6:b0:a6:9e:67:
         1e:a6:b6:ed:a8:39:86:44:43:5f:3c:6f:93:d1:cb:34:fb:dc:
         b7:d7:8d:37:d3:16:e8:78:ef:9d:97:28:d1:db:7b:fa:42:8c:
         91:db:f6:6e:62:ab:ca:c6:7f:63:7f:67:fd:dc:81:06:18:e2:
         b5:9a:e2:9a:80:37:26:ac:b5:d0:2b:cc:e4:38:d5:e8:2c:4c:
         26:09:9f:34:04:4a:8d:d6:b8:41:ff:c1:c2:f6:64:b0:7b:71:
         4c:e0:80:5e:50:d9:84:6c:63:1f:c3:21:21:c3:c0:25:ce:bc:
         12:6b:17:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:31:54 2025 by rpki-client