Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccf97975-0cfa-3323-b088-de336c248425.roa
File:                     ccf97975-0cfa-3323-b088-de336c248425.roa (raw, json)
Hash identifier:          OO27XPbadalEmXmqCOabRrMzjQdW3+JKnPE9pRU7t9s=
Subject key identifier:   34:F5:61:19:74:24:23:E9:EB:6D:60:D0:EA:1D:0B:2A:68:71:53:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3FAADE19D1A2A89B7D428C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccf97975-0cfa-3323-b088-de336c248425.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     16625
IP address blocks:        23.49.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:de:19:d1:a2:a8:9b:7d:42:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=2d4ae514-1346-44a6-8611-be20c51387be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:42:a8:02:21:2b:ca:70:f5:95:77:79:92:
                    43:bf:78:53:54:b8:97:6e:d0:c2:0d:07:ba:8a:1e:
                    f0:ad:cd:8c:71:8b:43:81:19:70:53:b0:e9:d6:b0:
                    02:d7:51:31:14:36:48:57:46:d9:80:66:b2:b1:34:
                    03:b4:0a:37:4b:b7:ea:f7:9f:66:53:8e:46:48:86:
                    29:13:78:d5:f0:00:c7:c8:9a:d4:ac:dd:57:23:86:
                    a4:ec:d9:3d:c3:c3:3c:35:c9:6f:f5:e6:ed:43:cd:
                    f1:4f:ea:97:a0:7b:b3:e5:7e:b6:dd:fb:4e:6c:dc:
                    6a:b2:55:db:71:5f:54:0f:56:6c:2d:12:ed:a1:b5:
                    fb:f6:05:8c:2e:ab:13:f3:70:aa:7f:e7:c1:c8:c3:
                    76:df:81:48:c4:5b:ac:72:d4:6d:4c:b1:6d:af:e1:
                    ae:3b:2d:b0:9c:1e:ec:5c:c1:ea:a3:17:de:86:a4:
                    aa:65:75:bd:d9:39:43:36:ee:87:fa:83:bf:90:cd:
                    e6:e4:53:41:ca:6a:e1:e7:28:80:6d:ff:44:ed:d9:
                    e1:9b:16:01:33:58:ea:29:10:1c:ee:e3:ca:19:cd:
                    9d:f0:71:98:fb:76:4f:37:3c:97:ef:2f:df:c1:59:
                    86:de:e8:cb:46:2a:05:85:b5:88:bd:85:90:f9:95:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:61:19:74:24:23:E9:EB:6D:60:D0:EA:1D:0B:2A:68:71:53:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccf97975-0cfa-3323-b088-de336c248425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.49.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:91:fa:e3:74:7f:f9:f5:d0:3d:de:47:09:5b:eb:53:a2:30:
         87:8c:98:b0:e4:95:2b:11:2f:3e:e6:bd:7f:ec:34:22:89:2e:
         41:8f:11:6f:56:88:d8:13:da:d0:4e:90:7e:8d:22:1e:60:3e:
         87:22:b0:dc:a4:28:24:d0:f3:fb:0a:1e:4d:ee:f0:2d:09:08:
         84:e8:3c:6a:9c:2f:58:f9:01:95:34:c2:8d:8a:86:6b:a9:ec:
         35:6a:ba:e1:19:4a:3e:1a:f5:af:84:fc:ea:f5:dd:d0:f1:7a:
         58:e5:b6:89:45:9f:71:38:6a:6b:98:cc:4b:33:fb:2f:61:06:
         8e:89:00:df:7b:b9:a5:7c:b3:60:0c:05:85:47:62:3c:e8:c9:
         c9:bc:a3:3a:e2:06:83:de:ba:a4:4c:81:be:2a:b6:a4:ee:1f:
         37:64:63:73:20:d3:71:07:e1:b4:75:87:2b:e6:73:65:36:1d:
         6d:f0:28:c1:4e:25:25:4c:88:05:92:d7:44:af:c1:a5:26:12:
         78:61:bd:55:ab:7c:c5:fe:b2:77:8b:cd:ef:1d:07:b0:6f:f2:
         7b:32:71:50:5e:7c:ee:47:2c:a2:8a:06:bc:5d:bd:41:08:4d:
         c8:6c:97:61:d3:03:50:51:77:ec:8d:b0:ef:b3:e1:75:38:3f:
         24:0c:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:24:16 2025 by rpki-client