Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d327e28e-5119-3bea-899d-291cab94b320.roa
File:                     d327e28e-5119-3bea-899d-291cab94b320.roa (raw, json)
Hash identifier:          uBgy9GFdYZoeapPu8O8xPjgnVmN4kUFXNkg0QEe5Oo0=
Subject key identifier:   5F:B6:28:47:CE:DF:E5:B7:63:B5:F8:F7:7F:4B:1A:2A:92:DB:A4:E3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A374AE6521F3F271D34AFAC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d327e28e-5119-3bea-899d-291cab94b320.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     20940
IP address blocks:        23.212.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:e6:52:1f:3f:27:1d:34:af:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=610e3cdb-5221-4ca7-800a-418aa665b4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:86:23:af:3f:b7:95:98:ce:45:31:fa:ca:
                    b3:d6:85:f1:be:09:aa:d4:f5:be:6b:f7:7e:9b:ae:
                    57:ae:fa:3c:60:68:cb:51:f5:a5:c0:75:8e:33:79:
                    7b:2b:da:65:6f:a3:af:b0:ec:e6:5f:28:32:37:e6:
                    43:fb:bb:3f:31:c9:b9:75:fa:b8:29:2e:ea:08:ab:
                    3c:e9:bc:5f:75:eb:b7:f0:b3:3d:d3:33:e7:9d:65:
                    62:f4:43:4a:9e:89:d5:e2:03:f9:9c:6f:08:d8:20:
                    7a:fc:6b:24:6a:7f:67:38:2d:41:81:22:9c:32:44:
                    81:36:67:9d:ea:c4:65:6f:3f:51:40:9f:da:d4:fa:
                    26:75:13:18:65:1b:f8:89:3b:5d:86:9c:11:88:fb:
                    cd:81:db:c9:a2:e3:fa:b5:dc:d4:fa:cf:2e:05:b3:
                    02:96:fe:a6:5d:c2:87:f8:90:86:40:62:8a:f5:1f:
                    0f:dc:1e:6b:f9:06:f0:72:cb:82:da:1f:6d:2e:36:
                    af:49:b6:eb:31:47:aa:89:7b:24:42:3e:ee:8e:5c:
                    4c:80:f5:2f:e9:d9:7d:9f:7b:5f:9b:ca:da:ca:e0:
                    ed:09:3f:06:82:75:be:f7:37:52:7e:06:1a:1e:58:
                    b2:3e:ca:5b:20:42:27:0e:1b:cc:40:e4:a0:53:ce:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B6:28:47:CE:DF:E5:B7:63:B5:F8:F7:7F:4B:1A:2A:92:DB:A4:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d327e28e-5119-3bea-899d-291cab94b320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:52:b9:4a:d5:03:21:69:44:f9:cf:d7:fc:35:1c:e8:f1:55:
         20:7b:e4:15:78:56:27:54:a7:23:61:1a:5c:17:cc:52:9b:34:
         5b:44:03:fc:91:59:0e:64:41:5a:2f:f0:3d:e1:a6:2c:c9:46:
         1e:7a:c7:c6:7c:5c:da:6c:c2:f9:89:f4:71:35:23:1d:ee:2b:
         69:92:6c:23:69:e6:b0:db:93:cc:da:ee:d6:48:8b:cf:3d:8e:
         8c:e5:ec:ff:f8:5f:d3:c0:64:50:68:b2:6e:c6:c4:12:05:75:
         bd:33:0c:98:a5:26:17:89:84:24:86:41:f4:49:b7:b1:01:12:
         e7:29:ba:b7:1a:63:60:c9:d0:b7:46:ca:64:83:ea:dc:cc:d5:
         40:1d:c0:c5:1e:be:cc:80:6d:b1:1d:b3:87:52:55:8c:84:57:
         10:92:d8:cb:b3:5f:e9:57:ad:0e:de:12:bc:7b:32:69:01:b0:
         09:59:db:5b:7a:3c:b6:0c:72:72:b0:7c:60:59:75:99:51:59:
         61:8f:2b:10:45:3f:8f:08:98:60:31:20:05:3c:91:6c:7c:75:
         e0:37:e0:da:6f:5d:e6:1d:a6:0d:28:c2:5e:9b:0c:ec:b0:01:
         fe:83:1f:4b:4e:4c:89:74:a8:d9:7b:95:04:e7:ba:44:e6:18:
         71:b5:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:59:49 2025 by rpki-client