Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1a84ce7-26d2-3038-9368-380792e32d20.roa
File:                     a1a84ce7-26d2-3038-9368-380792e32d20.roa (raw, json)
Hash identifier:          IEkq1k0tS8ZrkSwImL+lXg7rA+pe90F6+KyMf/jHTBo=
Subject key identifier:   64:AC:F9:74:D6:FA:41:E9:24:70:4A:E6:DE:8B:13:D0:0D:9A:7D:AC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3A159EE7A928A37A5D6DF5E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1a84ce7-26d2-3038-9368-380792e32d20.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        23.36.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:9e:e7:a9:28:a3:7a:5d:6d:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=1ffcbc3e-c92c-4f6e-a96d-bddc948dec83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:77:71:16:11:5d:9b:c3:4b:13:a8:6b:af:
                    8a:08:43:dc:2a:73:a0:9f:fa:81:cf:22:c7:97:ad:
                    2d:c8:60:96:8e:62:cf:2c:1d:57:d6:b6:ef:1d:90:
                    a9:49:1e:f5:fa:66:26:24:cc:f3:e9:91:a6:70:0b:
                    e2:f7:17:34:a7:27:46:29:8e:cb:b1:66:50:71:eb:
                    54:7f:7b:38:01:ff:a7:dc:5e:a6:a7:d8:18:8d:76:
                    6b:2d:54:bf:0b:6c:bc:57:f2:8a:a1:44:65:04:f5:
                    fd:98:aa:d9:6d:ac:c2:57:15:e4:49:a1:e5:a9:0e:
                    67:2e:bd:de:9b:d5:d3:2f:4a:5f:e1:05:49:ac:ac:
                    31:38:c8:5f:e2:80:2f:24:28:3a:da:45:f3:40:24:
                    90:86:da:86:80:77:03:b8:7d:93:30:cb:e8:4a:40:
                    7e:62:8c:d0:7c:e6:07:0d:62:82:09:d9:6e:5e:a5:
                    fc:85:31:26:71:a8:2b:46:b1:70:d2:45:f3:b8:16:
                    5a:87:15:5b:d7:82:5e:b1:e2:e1:c9:9f:9a:03:84:
                    be:30:d9:00:3c:2e:f9:bd:30:9b:3a:a8:4b:bc:bb:
                    ea:74:b5:43:58:f5:50:0b:5e:2c:31:0c:25:43:46:
                    d0:28:4d:20:75:41:dc:f9:7f:1d:28:ea:77:1a:d7:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AC:F9:74:D6:FA:41:E9:24:70:4A:E6:DE:8B:13:D0:0D:9A:7D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1a84ce7-26d2-3038-9368-380792e32d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:09:c3:f6:95:8d:2f:14:75:38:30:39:ba:00:ef:a1:25:fd:
         be:d5:4e:ba:14:cd:85:fe:22:98:54:78:49:26:ee:3c:4d:be:
         fb:77:e7:86:43:78:be:d5:be:0e:b3:01:a9:8f:41:50:43:46:
         1a:49:6b:22:d2:4b:1a:cc:a6:24:a0:ad:18:0e:2c:ce:e4:d7:
         f2:92:e3:bf:72:c2:b6:33:5d:46:d3:d2:bb:90:e8:63:7c:72:
         cf:d7:df:13:04:c5:a5:cc:dd:d7:0d:fe:80:08:89:bc:a8:fa:
         f9:e1:87:df:af:43:b5:c5:30:eb:30:fe:ce:a5:2a:e0:73:a2:
         f9:28:45:61:76:59:48:78:7a:32:d4:ad:13:76:43:4c:3d:72:
         27:35:48:32:7b:64:9c:33:8e:5f:18:7e:d9:5d:37:40:b5:c6:
         52:57:b7:ff:98:7a:15:f2:76:b6:83:ae:c8:a3:37:ee:0b:d0:
         08:af:05:d2:f4:4e:e5:fe:73:b5:88:85:fa:c0:80:33:ab:93:
         23:2d:d9:1f:82:bb:13:04:88:77:84:55:5b:10:5d:4f:22:c1:
         47:ef:ff:7f:a9:fa:9b:99:aa:79:9b:68:6d:b4:71:66:4b:bf:
         ba:1f:d9:a0:c8:ff:96:b1:94:8c:e4:b8:16:b0:5d:e1:a9:0f:
         5d:f0:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:17:51 2025 by rpki-client