Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa
File:                     398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa (raw, json)
Hash identifier:          tVczfpCKbfnwYAtfzUCEPQBK0Fe1FbTvzNM6cgP0Rd8=
Subject key identifier:   7D:73:B2:59:3A:75:2E:80:27:0F:DD:07:83:4C:CF:A1:6E:92:09:79
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3B7B0F2BD9C7DACFAD9CE800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     20940
IP address blocks:        23.43.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:0f:2b:d9:c7:da:cf:ad:9c:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=c32b88f0-821e-4df8-b159-9bd44e2cded0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:46:ac:6c:eb:f8:88:39:75:43:a8:a3:f3:
                    b8:3d:95:fe:ea:ac:a8:9f:75:c8:13:48:ba:4e:28:
                    6c:fe:1d:23:71:60:37:90:a3:b6:56:08:36:c4:04:
                    21:92:87:f3:62:2c:ee:6b:db:53:3d:c1:5a:46:db:
                    42:83:92:d6:27:b9:f9:6b:e4:21:51:87:c9:47:27:
                    91:03:11:88:81:ee:10:15:9e:34:6e:fc:25:87:79:
                    36:bf:11:7e:3b:67:ce:ab:ce:bc:67:fc:b5:3f:b9:
                    f8:1f:e4:e3:fd:2f:2a:e2:18:c3:8a:7e:51:aa:dc:
                    ba:dd:1a:bd:c7:33:0c:3c:65:70:9b:71:40:8f:42:
                    0f:c8:31:2e:d2:be:14:6a:40:09:0b:eb:1d:89:7d:
                    c7:d2:a5:7e:39:b1:cf:f8:68:2b:03:df:14:8b:22:
                    ac:c6:95:fa:34:27:9f:86:a5:73:82:8a:13:d5:af:
                    6e:ed:cc:dc:a0:1a:fb:95:59:42:2d:a5:6a:22:39:
                    1b:a0:c8:be:b8:8a:0d:2d:1f:7d:65:ae:6a:3b:80:
                    41:47:35:e4:ee:21:39:c3:ba:bc:40:70:0c:c1:cb:
                    ee:5b:e6:c2:fd:7d:d3:0d:87:e1:5b:2d:b3:52:07:
                    b9:74:dd:98:1b:e0:85:45:1f:53:ee:69:72:5b:e8:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:73:B2:59:3A:75:2E:80:27:0F:DD:07:83:4C:CF:A1:6E:92:09:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ea:fd:4a:d0:9a:be:c2:b7:df:97:32:1d:55:90:19:ec:dc:
         e8:41:b3:c3:19:91:ad:0f:d3:51:2c:6d:f1:31:88:da:4f:f7:
         cf:8a:d6:46:6e:13:bd:12:c3:ec:3b:93:95:4a:5c:20:a9:1a:
         fa:d9:c0:f7:c1:32:19:1f:fd:19:e9:e1:29:3f:ee:5d:c5:2e:
         01:7b:74:dd:42:1b:b6:f4:c7:09:68:63:e2:53:08:1e:17:9e:
         cd:f6:34:80:e9:c5:bc:ea:db:f9:ea:f5:d5:bf:67:84:81:91:
         01:a2:d5:57:1a:7c:7a:e1:61:d0:d1:7d:63:5a:e9:ac:2f:ab:
         77:f9:a5:e1:2a:8b:1f:80:dd:7c:dc:8d:70:b3:db:02:32:67:
         29:7a:6b:97:45:51:ed:10:df:a3:1a:65:59:b9:55:ee:ce:9a:
         c6:36:68:3e:99:7e:e1:88:ad:7c:88:1d:25:f9:56:56:21:b1:
         71:36:02:d1:9b:f5:04:f5:af:e5:f1:8b:aa:1d:36:f1:99:97:
         ef:53:5c:2a:c6:ae:39:81:1e:65:b5:82:1c:e7:43:f6:74:d1:
         1a:a8:2a:86:8e:c2:45:80:6b:c9:c5:93:6c:da:d4:0d:f8:d7:
         ab:86:ed:2b:18:7a:b6:61:24:bf:69:89:3f:17:ef:5c:1f:c2:
         2e:42:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:30:50 2025 by rpki-client