Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/7cb41544-a439-3a88-a95f-2f531691a7a6.roa
File:                     7cb41544-a439-3a88-a95f-2f531691a7a6.roa (raw, json)
Hash identifier:          GySZbDRsowsSwLSN7x3Ed9X00bdQzmsXrPiuiWKqB0Q=
Subject key identifier:   A1:E6:4A:54:20:6D:3F:EA:BB:79:CC:69:B0:00:65:2D:7C:84:DF:E9
Certificate issuer:       /CN=1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2
Certificate serial:       010D0C9F4328584A4AD592C1F756279E9804CD80
Authority key identifier: 84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/7cb41544-a439-3a88-a95f-2f531691a7a6.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     401557
IP address blocks:        23.132.76.0/24 maxlen: 24
                          2620:d2:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:92:c1:f7:56:27:9e:98:04:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=a41238e9-6394-4f0b-90b4-f0355e761056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:42:ac:d2:c8:52:11:90:27:dc:24:c0:8e:b5:
                    e6:df:f2:db:ea:72:8d:3e:a3:c7:e4:db:cf:d9:68:
                    ec:c4:1b:5d:43:99:2d:4e:86:ab:2d:e5:d7:e6:25:
                    6d:fb:27:e3:ae:0d:7e:b9:8d:2f:51:92:3f:02:2f:
                    c6:4d:65:c8:9c:81:c8:de:48:81:45:87:d3:d8:42:
                    51:fd:04:ee:a9:68:01:3b:89:bf:27:1c:bf:5f:84:
                    f5:28:9f:3c:d9:2e:ce:88:28:46:8a:a9:94:53:d5:
                    b3:d1:6d:27:19:ad:cc:dd:34:03:a3:53:02:e3:71:
                    d5:02:73:ed:87:e6:d9:73:e1:31:92:74:ba:74:84:
                    f0:51:25:4c:ad:56:6c:c6:ab:76:62:c2:1b:23:06:
                    4f:3c:02:f0:84:9c:d2:42:53:b0:19:0a:2c:fa:b7:
                    af:38:c8:10:1f:cd:9b:67:79:28:4e:57:d5:f2:af:
                    06:1b:d4:d6:a2:df:6f:78:86:aa:81:2d:d8:17:d2:
                    2d:62:77:16:0a:09:03:5f:52:b5:a5:44:d6:cc:61:
                    2f:40:ce:c0:f8:85:73:3f:56:9a:1b:01:6f:dd:96:
                    aa:d1:58:d7:9d:4f:97:1f:9f:11:6b:d6:61:cf:86:
                    9a:07:20:88:7a:65:5a:93:e0:5a:ec:d8:52:6d:6e:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:4A:54:20:6D:3F:EA:BB:79:CC:69:B0:00:65:2D:7C:84:DF:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/7cb41544-a439-3a88-a95f-2f531691a7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.crl

            X509v3 Authority Key Identifier:
                keyid:84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.76.0/24
                IPv6:
                  2620:d2:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:fc:4d:c9:dc:ea:ff:40:4a:ba:4a:14:9a:a3:2b:cd:93:fa:
         56:62:b9:65:43:54:c4:90:d7:89:b9:e3:6c:f7:d3:9e:90:2a:
         5f:02:98:06:95:df:77:4f:c8:ce:d0:ac:b2:bb:aa:90:e5:da:
         2b:7a:6e:b2:ec:a2:9a:42:ee:b0:dc:53:9a:33:f6:a6:08:1a:
         d5:19:24:e6:84:85:2e:1f:6a:12:47:44:ef:75:cb:59:4b:0b:
         df:c4:dd:48:75:e0:03:c8:e6:7c:4b:fe:a1:1c:91:90:fc:be:
         b0:e3:9b:80:2b:24:c0:7d:2b:be:30:28:6a:4a:58:ab:56:20:
         4b:45:39:6d:3f:1f:0c:5d:7d:92:a0:b7:0c:be:36:ce:70:a9:
         d2:68:e0:2d:44:48:e3:3a:9e:71:56:ec:d7:d9:0b:01:9b:c3:
         f5:7d:d7:6c:1a:df:03:87:60:df:92:a5:3f:5f:df:2e:0d:82:
         54:7b:2c:ed:a3:6f:45:00:c9:44:e2:cf:a0:b8:a3:8a:5f:7a:
         69:e1:b0:58:4a:37:7d:e2:8f:4b:5f:7e:af:bc:6e:ce:5c:fd:
         86:28:04:b3:d0:5a:75:56:ae:6e:c4:7f:02:ff:67:a9:bc:b0:
         3b:b9:56:43:7a:a4:a9:18:6b:b5:18:4e:96:13:c9:79:e8:53:
         8c:5d:21:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:33:18 2025 by rpki-client