Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e862160-5693-3354-a428-8933c30c7fe8.roa
File:                     3e862160-5693-3354-a428-8933c30c7fe8.roa (raw, json)
Hash identifier:          dubDXVHzXEKAJYjCO9H1OX+2ye8t7y9BIDaHsyHafBM=
Subject key identifier:   77:AE:E1:EA:F4:7F:FC:D0:A1:8A:CA:AA:9C:DB:8F:8B:83:91:F4:E4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849BDDA19925A08762109984000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e862160-5693-3354-a428-8933c30c7fe8.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     20940
IP address blocks:        23.211.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:19:92:5a:08:76:21:09:98:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=9f4e8f0a-b33b-4c7f-863b-3fe22bcbfe38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:cd:5f:61:57:12:15:a8:10:ef:e1:a4:d8:
                    42:45:8c:7f:80:35:46:3c:45:3e:2f:78:bd:f7:ce:
                    10:99:46:ad:b9:8f:7c:d5:4b:52:49:7d:2f:2f:7d:
                    86:b0:e2:28:43:03:fa:01:0e:de:88:06:a6:11:fa:
                    20:db:f4:ce:86:da:e7:9d:86:15:4c:25:ef:9d:40:
                    14:c8:13:48:d8:c1:d5:b6:e6:4a:c9:6d:a1:33:01:
                    f7:f0:00:18:49:8f:ca:6d:78:67:8c:ea:00:40:e0:
                    0c:08:09:8b:6f:de:57:66:2d:ca:d7:2f:8f:f7:b3:
                    e1:07:4f:82:18:59:1a:f3:ae:4b:82:fb:c8:15:1f:
                    0e:3b:54:aa:69:43:ed:16:48:aa:6e:54:4c:4f:48:
                    d1:55:eb:f5:47:d6:6d:77:c1:e2:e0:48:63:b9:13:
                    a5:52:1b:5c:b0:be:b1:1d:3d:68:7f:b5:6d:62:83:
                    cd:18:91:72:b2:04:d7:ec:95:37:2e:78:6f:22:ed:
                    9c:db:d8:2e:b4:b4:1d:82:91:f7:e9:31:55:5d:5a:
                    7e:3d:e5:01:99:23:a5:86:90:2d:d4:ba:ef:75:3e:
                    d9:d9:7d:89:87:3e:6d:3a:88:6e:58:74:0f:5c:a2:
                    a1:91:5c:63:2b:52:1e:38:00:1c:8e:0d:7d:ff:5b:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AE:E1:EA:F4:7F:FC:D0:A1:8A:CA:AA:9C:DB:8F:8B:83:91:F4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e862160-5693-3354-a428-8933c30c7fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:07:15:8d:62:1e:3e:ba:c0:77:33:e3:09:61:b9:74:ab:d0:
         11:eb:37:f4:9b:1a:5d:ce:fa:80:a8:5d:66:86:ef:c6:ff:32:
         7b:69:2e:be:e2:e5:fd:8f:a5:a9:99:b7:02:72:3d:b6:6e:52:
         f8:cd:d9:fe:84:ae:4f:90:bb:55:b7:6a:05:fd:ed:b0:f2:83:
         4d:58:90:07:04:87:7f:db:36:77:bf:fd:5c:6e:a0:cd:9c:cf:
         5e:86:48:47:5c:f6:1f:2f:f9:51:d4:5d:39:c1:9b:fd:34:aa:
         7a:bb:36:29:bb:59:a5:fb:55:d7:bc:0c:8b:6b:2c:85:51:6c:
         88:96:b6:3f:ca:68:8e:c0:c8:0b:d4:d3:56:54:9b:01:5f:e3:
         2c:19:51:ba:ec:87:a8:7a:e3:5f:c3:08:63:56:29:ca:82:00:
         82:00:24:fa:a3:05:ea:53:15:39:b0:68:22:55:53:7f:6b:e4:
         91:28:cb:7a:0f:26:1b:27:2f:b5:ec:3c:35:cd:9a:1b:dc:1b:
         9f:f4:42:0f:27:c6:7e:f7:f7:92:5a:fa:77:07:a7:a1:12:fd:
         7c:0a:ce:a7:3f:f2:c5:0c:16:8c:bc:0d:f9:e4:66:bf:b0:fd:
         61:fe:20:03:86:84:97:12:e2:cd:91:bc:ba:cd:e2:85:c7:11:
         39:ca:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:03:13 2025 by rpki-client