Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/366e3f3f-8693-38e5-870d-ca6fe2cacaaf.roa
File:                     366e3f3f-8693-38e5-870d-ca6fe2cacaaf.roa (raw, json)
Hash identifier:          9gmYbaX/Qj+h+tL620YRYfuwYfrRqEGej+hrEtGvZJI=
Subject key identifier:   D7:3A:2D:7D:68:7B:A2:D9:14:EA:FB:8D:81:4F:19:B1:03:D3:16:8B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4DA04783F286543C48512E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/366e3f3f-8693-38e5-870d-ca6fe2cacaaf.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     24319
IP address blocks:        23.62.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:47:83:f2:86:54:3c:48:51:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=ca3e2f06-4601-4b20-a814-c225dff63d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:a1:90:46:74:5e:c6:c3:68:32:29:51:3e:
                    c6:3b:1a:27:19:c8:59:3a:a9:f6:bd:0d:51:13:43:
                    46:4b:35:72:9a:5a:d1:30:4d:6b:b5:ec:0d:d9:98:
                    1f:52:a3:3d:68:5b:4c:e9:df:d5:4f:a4:84:69:14:
                    8a:47:a9:9b:e0:95:60:00:0d:7e:f5:c4:38:63:2f:
                    52:2b:c7:4f:9a:05:f2:bc:1d:27:03:85:8c:3e:29:
                    f8:8b:11:ee:8c:db:cd:73:1b:e8:05:61:40:a3:87:
                    00:f3:b8:9e:e9:ee:ec:80:ec:19:6e:86:25:a0:5c:
                    28:a5:51:44:bb:fa:f9:65:34:d0:9e:59:9f:59:0d:
                    7b:66:ec:54:e4:ad:1b:84:24:43:19:74:3a:15:69:
                    31:50:e8:9c:9b:0e:d8:32:eb:c8:70:36:bb:33:9f:
                    d9:51:1f:56:bf:5b:2b:af:39:57:63:a5:ac:e4:04:
                    1a:a1:f2:c4:ee:09:96:23:26:0c:49:20:88:aa:22:
                    f7:44:71:ca:f5:01:c4:2f:76:2f:8b:e9:69:56:cd:
                    c5:79:1d:8b:32:9e:4b:75:21:73:17:40:59:1e:9f:
                    9e:7e:b3:5f:ce:af:1c:fb:d7:b0:5f:4a:e0:eb:57:
                    64:dd:b4:15:87:b7:fe:da:4e:bf:78:9b:5c:14:aa:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3A:2D:7D:68:7B:A2:D9:14:EA:FB:8D:81:4F:19:B1:03:D3:16:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/366e3f3f-8693-38e5-870d-ca6fe2cacaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:72:a6:53:f4:15:fc:85:2f:7d:50:b4:d6:76:ab:12:6e:3c:
         19:3a:d7:cf:d0:a3:68:a1:a5:62:d5:a6:2f:91:2b:d9:61:ec:
         ba:4e:3c:b7:91:38:90:b7:7b:32:2d:b9:23:af:84:3a:aa:83:
         73:d3:54:59:76:eb:9e:34:3f:d4:6d:fe:d8:dd:5d:28:8b:b7:
         9a:a2:38:70:27:72:98:42:f7:ad:b0:da:09:a4:84:cb:21:6f:
         29:b0:3e:1b:68:46:5f:44:a2:39:2a:41:06:ce:9e:b4:65:2e:
         90:44:bb:ff:77:28:3b:42:e0:de:fe:67:0d:a5:48:9a:8d:70:
         81:81:86:f1:9e:70:67:a4:35:d4:bc:2e:b5:cc:6b:be:9f:3f:
         33:23:7e:4a:be:0b:01:98:2a:ab:ea:53:d5:1f:4f:12:77:67:
         f3:a2:92:8d:a2:8d:14:b6:6b:23:e7:ab:c3:0e:f8:09:ab:72:
         fe:80:81:82:ba:a9:19:a1:ee:e5:80:bf:92:6f:be:3c:35:f0:
         38:70:dd:a4:26:f2:f2:04:a4:7a:4c:ce:6a:0e:a8:da:01:60:
         1f:1c:db:f2:61:4c:8f:e1:63:5e:47:9b:1e:ce:ef:cf:8a:bb:
         a8:a3:ca:3c:ef:49:08:a2:c5:df:ad:7a:51:a4:1a:a4:81:2d:
         8e:a5:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:13 2025 by rpki-client