Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64841697-ca97-3404-a190-d16b2e7f169e.roa
File:                     64841697-ca97-3404-a190-d16b2e7f169e.roa (raw, json)
Hash identifier:          gYn+rQIZu5ufaA7L4qs2DSm2PgIrRmhJLVGu/EFeNyM=
Subject key identifier:   15:1E:D9:C3:0A:57:43:63:75:B5:5B:9F:28:AF:19:B2:A6:4F:0D:98
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498769D2FECACA9AD1AE3E5E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64841697-ca97-3404-a190-d16b2e7f169e.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     16625
IP address blocks:        23.200.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:d2:fe:ca:ca:9a:d1:ae:3e:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=e9ebb5d1-5e49-4d91-9f5c-ba5e5ecd89b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:51:0f:7d:da:39:92:70:73:54:34:3d:84:
                    76:70:c6:23:5d:87:83:40:67:3d:d4:ab:5f:0c:61:
                    44:5e:7d:de:2d:b0:3b:b1:3f:87:de:50:89:32:c2:
                    5c:d4:d6:e5:ad:4e:09:58:db:3c:d1:1c:15:01:61:
                    c7:2e:5b:84:aa:54:31:ed:b8:ea:fa:d7:55:1f:68:
                    c7:db:6a:a3:07:b8:25:b1:18:fc:1d:1f:55:5f:98:
                    a7:b2:5f:11:de:e7:d3:fa:b3:df:cc:e2:ee:1e:17:
                    77:d2:ba:61:13:e7:c6:86:fa:97:2a:b1:e1:b5:cd:
                    5c:f1:e1:a1:f2:71:c3:6d:9a:72:ed:3f:57:32:9a:
                    8e:d8:22:0f:45:87:89:79:a7:cf:e7:8f:d2:39:5a:
                    e2:ff:7b:f2:f8:5f:5c:70:38:8c:68:7d:9d:dd:fe:
                    b6:a3:f4:fd:30:fe:e2:f9:d0:9a:89:3f:5b:c9:5e:
                    74:f2:0b:2d:9e:d4:db:cd:ea:fb:d9:54:97:26:51:
                    09:3e:f5:7d:67:9f:71:52:9c:b5:af:f1:c3:6f:f5:
                    1d:1c:b8:9b:c1:3a:28:db:d4:d2:cc:1b:92:b7:68:
                    50:22:ba:5c:b4:d2:ff:b7:32:96:67:e0:4a:34:80:
                    52:b9:95:25:a7:52:2f:34:4a:7d:ca:68:97:b1:5a:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1E:D9:C3:0A:57:43:63:75:B5:5B:9F:28:AF:19:B2:A6:4F:0D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64841697-ca97-3404-a190-d16b2e7f169e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:af:03:bb:38:3d:53:69:b4:28:4f:ff:84:ab:b5:a5:98:4e:
         39:64:04:44:ed:12:79:62:c0:7f:3a:62:3b:d8:e4:e5:f2:9d:
         f4:b6:2c:6a:9d:d0:fe:23:c3:4f:6c:fb:14:3b:1c:d2:2e:ca:
         bd:02:15:e0:03:a7:e2:b4:83:3b:e4:4b:1b:77:2f:37:21:20:
         df:2c:16:d6:cf:bb:d8:5f:ce:6b:49:72:cb:91:8d:fa:d7:20:
         7b:9d:0e:58:ea:aa:32:eb:f0:86:21:74:ac:f8:2c:a1:bd:b9:
         7d:e3:9e:c4:7c:83:52:c8:52:78:89:c8:25:f8:d0:94:da:75:
         a4:8e:e4:27:63:85:13:84:2f:b0:b2:f9:58:bb:57:b8:2e:28:
         9f:c9:4b:0a:dc:fb:d4:fc:31:f7:36:94:ac:af:22:c9:d9:91:
         a1:b1:34:d0:d2:33:74:34:62:75:e9:48:63:9b:54:ee:c2:ff:
         41:f4:84:a6:d2:3e:f9:ca:24:83:2e:6c:29:16:57:a9:5b:9f:
         54:a1:4c:c1:a7:9c:44:7b:a2:1b:b8:e7:df:94:a2:5f:a0:44:
         2e:01:6f:86:6e:0f:0f:f5:ed:95:14:3e:f7:f7:a4:b3:ef:9b:
         b0:17:64:94:d7:29:61:a0:22:58:ee:37:80:29:a8:fb:80:f6:
         6a:3f:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:59:20 2025 by rpki-client