Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/059dc03b-6945-3293-aa1e-2445812e0890.roa
File:                     059dc03b-6945-3293-aa1e-2445812e0890.roa (raw, json)
Hash identifier:          o/p6eZm0mgI398SoATILLSCEi5eg/WEYqwqDEbYcQhc=
Subject key identifier:   5E:25:7D:8D:86:4F:94:65:35:51:23:9F:D4:CF:5D:97:66:12:03:07
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC9DB9D950601C35E3D429F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/059dc03b-6945-3293-aa1e-2445812e0890.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     12222
IP address blocks:        23.79.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9d:95:06:01:c3:5e:3d:42:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=cc5364ca-ee36-4366-a92c-e291151715fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:3e:55:30:99:d7:22:3b:a2:71:4e:5d:2d:
                    63:76:5f:08:fa:68:75:d6:1c:07:1e:d8:bd:4b:40:
                    f0:3d:3a:8e:bf:67:44:dd:bd:12:43:11:52:cd:b2:
                    cf:7e:29:1f:dd:f5:1f:3c:6b:4a:6d:09:5b:6a:01:
                    c3:4b:a5:dc:9c:8e:ec:75:f9:f6:81:1b:0b:74:ef:
                    1d:dc:d5:aa:1b:53:8e:1a:05:aa:c8:f9:3e:56:7f:
                    ae:c8:61:1a:b2:5f:0e:ed:25:28:9a:10:fe:93:a6:
                    bc:38:0b:2a:7f:de:4a:d0:fc:77:b3:ec:4d:20:fe:
                    1e:a5:ec:5b:b7:c2:2b:7b:81:15:ca:b8:8f:56:e2:
                    54:02:9c:f0:f6:97:e0:34:14:29:bb:5d:31:f4:c9:
                    0e:93:bd:3f:06:09:6a:34:59:4b:56:d5:dc:ca:73:
                    9d:0c:58:de:34:d5:72:d8:94:98:f8:f7:c6:bd:fe:
                    3c:7f:82:7c:b5:05:54:86:9b:bc:05:05:f9:1d:b0:
                    e8:73:95:3e:ac:89:01:21:ca:5d:f5:87:81:53:50:
                    ba:c3:30:9f:30:9b:5c:4d:30:96:b2:c1:12:4d:ff:
                    bc:60:aa:c1:a5:95:39:bb:ef:70:3d:66:51:f8:79:
                    44:76:b2:59:83:71:78:a2:be:e1:68:dc:1a:2a:ea:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:25:7D:8D:86:4F:94:65:35:51:23:9F:D4:CF:5D:97:66:12:03:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/059dc03b-6945-3293-aa1e-2445812e0890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.79.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:24:0d:97:cc:0f:90:29:74:ca:d0:80:55:cd:bd:5a:d4:
         80:42:d1:9e:de:f1:4e:74:e1:8a:39:3d:fb:b1:ca:e7:89:f6:
         4f:c3:9d:38:c6:5e:3b:cd:f3:80:e8:41:5a:99:f9:ad:14:fd:
         54:0f:50:71:63:40:2b:3f:c9:9d:3f:ad:94:84:c1:ee:72:c6:
         86:36:96:2d:30:b2:af:d8:b4:16:74:c9:4c:9b:76:d4:f8:f9:
         c2:e1:25:82:18:fe:4c:80:9c:af:da:7f:88:74:f0:68:f9:d2:
         14:56:c6:08:f4:b0:93:3e:bc:30:71:40:c1:8f:bf:0d:e5:77:
         98:76:29:bf:54:61:ac:05:ae:1a:be:89:6e:bd:8e:7f:b3:3f:
         a5:b0:79:07:37:68:89:f5:09:7e:d8:1b:19:ac:b2:37:31:51:
         a5:4d:6a:38:8f:51:70:45:b6:a8:e7:ec:cf:42:72:ec:29:90:
         f8:c8:2d:2d:1b:51:fb:31:73:5c:88:12:77:a0:71:3a:23:aa:
         97:1e:be:29:c4:7e:16:69:52:d8:5c:d6:45:16:e2:cc:e9:fd:
         67:a4:32:5a:63:c9:73:2d:a8:c1:fe:cd:e2:8a:e2:37:12:9a:
         f9:9c:91:76:a4:cd:29:29:5f:0c:eb:ff:22:fd:ef:70:f8:0c:
         88:60:d3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:06 2025 by rpki-client