Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f894d3e-b7ac-3e5d-bb1e-26d03da19aea.roa
File:                     7f894d3e-b7ac-3e5d-bb1e-26d03da19aea.roa (raw, json)
Hash identifier:          yIepTmCExwBMWKgroqlp7LHckC0xpB5k+YsLRJbMmD4=
Subject key identifier:   5A:22:DC:EA:3A:EC:6E:DB:1C:56:B9:E3:A8:4B:1A:70:5E:67:2F:54
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3B7B4114A494D0A2F90AA480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f894d3e-b7ac-3e5d-bb1e-26d03da19aea.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     24319
IP address blocks:        23.45.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:41:14:a4:94:d0:a2:f9:0a:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=3ad53a8a-bfdf-4448-bcd2-fa4382d71018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:cc:5a:8e:c9:65:d9:1f:75:46:a2:a8:27:
                    39:df:6d:da:9e:7c:46:11:19:bc:92:5d:be:d2:94:
                    39:4c:18:a4:1e:45:11:6e:bf:b4:2e:27:a8:9c:7c:
                    83:e5:cb:84:7e:51:14:6a:c5:0d:4f:eb:8e:fc:92:
                    da:1a:c8:dd:73:d6:7a:50:85:d0:3b:d0:a8:35:11:
                    2d:a5:7c:09:8f:61:e6:7d:40:63:f6:a4:a8:54:1b:
                    0f:96:e0:8a:c4:8b:ea:58:b6:6e:a0:dc:b6:8c:91:
                    b7:45:10:66:bf:01:22:d7:91:6a:ba:a1:14:66:2e:
                    28:cf:fe:87:04:11:d7:76:b0:34:f8:c8:51:46:d7:
                    45:ae:be:e5:32:a4:6a:ef:c5:d2:34:f1:a8:52:98:
                    cd:d5:88:08:ee:53:e7:48:7a:5c:92:e8:4c:58:25:
                    fd:2a:b1:63:c8:92:29:4b:d6:f2:99:a9:36:13:42:
                    9e:04:d6:d6:bb:3c:55:fe:bc:fb:37:85:ed:2f:28:
                    20:e7:80:00:ea:e4:85:91:d3:dc:07:f7:59:4d:8a:
                    45:e2:ad:b8:77:84:50:4a:c8:35:98:22:46:f1:65:
                    60:56:4c:63:d0:d5:5f:8d:0a:7a:95:04:dd:6e:5a:
                    e7:99:5d:73:99:f7:e7:c1:06:4d:10:64:ce:2a:b5:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:22:DC:EA:3A:EC:6E:DB:1C:56:B9:E3:A8:4B:1A:70:5E:67:2F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f894d3e-b7ac-3e5d-bb1e-26d03da19aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f4:89:f8:7a:84:3b:c4:d8:2c:9e:0e:18:97:39:98:32:03:
         a3:8c:b3:bb:d5:f6:b0:1d:0c:9c:94:a3:06:1a:58:32:5e:7e:
         28:bc:ea:ee:4c:76:bf:a8:19:a6:f9:a0:77:91:38:0f:0e:ea:
         35:11:ab:7c:ec:3f:1f:43:23:11:e2:41:a7:97:59:d2:9c:37:
         6d:68:66:29:ca:d4:32:4e:72:83:aa:0f:c3:6c:3f:2d:9f:52:
         f3:b1:01:b7:e3:2c:9a:08:a1:e3:20:03:6b:6e:00:b4:d1:ff:
         5a:b4:c9:d9:f6:3a:40:b2:19:27:8c:88:62:00:60:1e:7f:33:
         ad:7d:7c:48:ca:13:b2:1b:85:10:49:ba:b8:93:40:b9:7c:5e:
         e3:52:25:86:ca:d1:61:d4:b2:a6:83:4f:8e:ca:75:e8:8a:be:
         e6:f8:7f:56:2e:6b:71:32:05:fc:94:5d:ee:97:96:40:16:12:
         5b:29:64:64:36:11:c7:ed:d7:1e:30:9e:4a:80:76:91:81:a7:
         93:61:14:3a:6b:38:44:98:86:2a:f7:b1:86:b4:9e:24:a4:14:
         4b:25:48:f4:9e:f9:d2:c2:76:95:8a:45:85:77:1c:4e:35:f4:
         5f:08:a0:d9:51:18:98:23:b2:3a:40:d3:fa:7e:34:fd:41:3c:
         82:d3:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:48:31 2025 by rpki-client