Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad0a181e-91c5-3c28-b10d-92bd446c7aa7.roa
File:                     ad0a181e-91c5-3c28-b10d-92bd446c7aa7.roa (raw, json)
Hash identifier:          sqmy0tPO+FSyB5WjUbUBkOTqVVfg45uMG/4IVSu1YZ8=
Subject key identifier:   42:B1:33:18:E9:CD:C8:9E:0A:07:1E:57:80:88:16:2A:C2:5B:22:49
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A54B2947841B2B73AC4DBF100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad0a181e-91c5-3c28-b10d-92bd446c7aa7.roa
Signing time:             Fri 27 Jun 2025 13:48:29 +0000
ROA not before:           Fri 27 Jun 2025 13:48:29 +0000
ROA not after:            Thu 25 Sep 2025 13:48:29 +0000
asID:                     20940
IP address blocks:        23.216.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:b2:94:78:41:b2:b7:3a:c4:db:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 27 13:48:29 2025 GMT
            Not After : Sep 25 13:48:29 2025 GMT
        Subject: CN=3998416e-3a7e-414e-8c29-6ce6d433abad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:01:a2:6f:55:58:6f:61:e1:4c:40:94:a3:
                    ba:ae:f3:af:32:df:45:4d:85:49:9c:49:1a:10:b5:
                    48:f3:80:83:0f:79:20:f4:a4:cc:88:a0:04:44:21:
                    af:9f:d5:5b:6d:3d:d5:f1:10:1c:63:c1:3c:b1:12:
                    c6:6d:e2:2b:05:fc:fd:2a:94:05:83:06:a3:f6:ed:
                    20:33:c2:42:86:91:56:f0:bc:26:a8:4d:82:bd:5b:
                    67:19:04:3d:6f:db:ce:9b:40:53:cb:29:24:7c:cc:
                    58:50:d6:72:e1:ca:f2:d1:cf:95:2c:4a:c2:61:a9:
                    a5:0a:71:2e:85:3b:34:7f:60:a5:49:c0:18:f3:67:
                    97:06:0e:b2:72:99:d7:63:38:54:c6:4f:bc:90:1e:
                    a0:2c:ca:cc:2d:5e:0a:98:71:15:71:d7:c1:55:4b:
                    97:9f:50:8e:37:c0:d6:8c:f7:0e:0a:34:89:b1:aa:
                    f0:ce:f3:47:8a:2a:ec:98:ff:7d:6e:21:50:9e:8b:
                    12:bc:b5:ee:23:46:fe:87:c0:24:de:ac:85:5a:4b:
                    50:18:78:22:ad:ef:b7:a9:4e:cb:22:b0:65:4f:bc:
                    74:7e:9f:74:52:b8:f5:bb:c8:92:48:9e:4e:cb:6e:
                    a7:2d:9d:5a:49:93:9f:76:0e:e6:1f:bb:34:d6:c6:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B1:33:18:E9:CD:C8:9E:0A:07:1E:57:80:88:16:2A:C2:5B:22:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad0a181e-91c5-3c28-b10d-92bd446c7aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d3:26:f8:15:bd:9e:89:f6:b8:f3:f0:61:fe:ec:e4:17:cb:
         ec:30:31:59:4b:69:50:41:ba:5a:ea:c7:3c:00:5c:7e:63:c4:
         36:8b:71:70:2e:09:f9:09:a0:22:3c:03:79:6a:c9:ce:8b:98:
         49:b5:c6:7b:56:cf:81:12:ba:50:b4:8d:d9:22:0d:b7:7e:22:
         fe:89:4b:7a:93:95:cb:86:2b:3f:f6:4e:4a:ae:74:b1:67:4b:
         3d:b8:52:38:2c:ec:0d:16:49:db:09:9e:f0:b2:ae:f3:fa:36:
         c2:7c:30:31:8b:e9:97:81:37:2b:48:16:2e:ca:cd:c8:4f:a2:
         e0:fe:98:f5:f3:b2:0b:e4:7f:e1:13:e8:67:c8:88:2a:a3:74:
         25:12:4f:d8:99:63:27:79:e8:2f:bd:5a:6f:e4:58:dd:fd:b1:
         25:d9:fe:82:59:cf:fb:63:62:af:ae:48:42:e1:42:2c:10:89:
         76:8e:d3:a7:2b:b4:fe:55:e5:51:f3:57:af:5c:74:25:41:6d:
         10:60:4c:b0:c9:61:d6:45:dc:79:3d:9f:ff:4c:89:b4:42:6a:
         91:51:f9:e9:94:fd:ed:a3:c1:ea:a3:9d:4f:28:e8:44:2a:f4:
         f6:8a:d2:ea:67:86:cf:3b:5e:2b:9f:76:9d:cb:20:df:b1:d4:
         5b:db:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:25:54 2025 by rpki-client