Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c59437df-ee44-3a4d-8c09-b1bc5e165b9c.roa
File:                     c59437df-ee44-3a4d-8c09-b1bc5e165b9c.roa (raw, json)
Hash identifier:          2wYUk7KJGm9XwUInBvhtHZLgpiCLN7dWa3XLUhX+eK0=
Subject key identifier:   1C:DC:68:66:5D:9D:1E:BB:40:8D:BE:25:A7:91:F2:E9:78:B7:1A:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4C3B227CA37E761FB645FE40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c59437df-ee44-3a4d-8c09-b1bc5e165b9c.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        23.55.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:22:7c:a3:7e:76:1f:b6:45:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=ec70e748-1f21-412c-b50a-c09c24880099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3a:89:45:ce:ca:e9:51:24:c1:ff:e0:f4:d2:
                    0b:03:bd:07:90:91:41:4f:77:89:e5:92:cd:9e:1a:
                    26:c6:1c:b9:71:68:b8:22:c0:d7:56:ca:c9:52:65:
                    17:74:a4:4f:e5:a6:9a:dc:67:e9:33:17:58:4e:7e:
                    38:19:c8:11:b7:32:52:f7:4f:47:00:c0:57:08:88:
                    d7:fa:9e:95:aa:93:ed:4b:58:35:30:ac:f0:89:6d:
                    0f:84:65:c3:60:ac:3b:45:4a:03:93:3a:f2:7b:a5:
                    c5:e2:4b:50:76:e4:88:3e:2b:ea:b9:f5:90:b4:43:
                    38:cd:30:bb:00:87:0a:55:70:b6:9e:1f:67:d5:41:
                    b2:57:fa:c0:91:f3:40:59:1a:02:18:33:b2:20:78:
                    f1:52:e5:c4:89:a4:10:86:6e:78:88:a9:8a:2e:37:
                    3c:93:3a:48:f0:52:f4:fe:1c:6d:b9:6a:7d:bb:5e:
                    ef:cc:7c:d8:c9:50:aa:05:d4:c0:80:b3:fb:c5:c9:
                    0d:66:d3:bd:94:49:f0:5e:8c:53:bb:17:d4:bf:3a:
                    75:1b:e8:f5:bd:d0:e4:4c:4e:9c:f7:c6:55:ca:be:
                    d8:ed:62:e2:8b:f3:85:04:94:c0:5f:3a:1c:d7:dc:
                    a8:59:27:af:e7:5c:12:7b:7f:1f:c2:1e:49:44:62:
                    86:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DC:68:66:5D:9D:1E:BB:40:8D:BE:25:A7:91:F2:E9:78:B7:1A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c59437df-ee44-3a4d-8c09-b1bc5e165b9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:fa:f0:d9:b2:0f:d5:40:8f:bd:c2:be:5d:bf:40:c2:45:
         f7:75:6b:34:96:f4:35:da:92:e3:33:e7:2f:c7:db:41:f0:58:
         1b:40:26:ef:01:57:09:ef:bf:b1:1c:9e:f2:7b:34:fe:34:e6:
         fe:59:50:a2:24:9c:30:ce:37:33:08:eb:16:75:bc:e1:45:52:
         ad:06:90:f0:fa:ce:32:3c:8c:e0:72:3f:7c:b7:32:07:2c:ad:
         7c:c7:5c:65:9f:28:e7:a2:00:3b:0a:82:b9:4a:1e:22:5c:e7:
         83:0b:81:88:e4:d8:c8:56:65:85:ae:a5:c4:06:a3:c7:ef:86:
         a9:78:3c:69:f0:25:5b:ed:50:b8:37:26:23:dd:4d:73:4e:00:
         5f:64:b7:9d:56:c5:87:c1:c3:34:08:87:79:a6:e4:c8:fd:88:
         f1:88:e2:40:7e:79:14:80:f6:49:60:ba:5c:04:2e:7e:a6:d0:
         81:e4:7a:04:e6:83:5e:7f:c5:53:b4:dd:3e:ae:27:35:6b:99:
         9a:0f:19:a5:ec:5d:5f:f2:47:e4:8f:c0:65:16:fc:63:7e:45:
         83:23:9a:0a:35:0a:98:92:8f:e0:1f:ff:5c:1f:ee:bf:fd:e2:
         9a:04:a3:69:7f:11:cf:bc:24:ad:76:b8:8b:17:ba:ef:a4:88:
         b8:b1:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:04:40 2025 by rpki-client