Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/24a6d7df-0d79-3f98-9401-87b6c45557dc.roa
File:                     24a6d7df-0d79-3f98-9401-87b6c45557dc.roa (raw, json)
Hash identifier:          ljbNPtqhfss5fR8m094HO5fdOt/NU4lkwCVTGmmrLfg=
Subject key identifier:   1C:54:77:D2:76:4C:18:DC:6D:FE:06:5C:D5:18:FB:E9:93:5D:F2:31
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584AC2E0D7C2B20269F84721BD80
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/24a6d7df-0d79-3f98-9401-87b6c45557dc.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        23.227.49.0/24 maxlen: 24
                          23.227.50.0/24 maxlen: 24
                          23.227.51.0/24 maxlen: 24
                          23.227.52.0/24 maxlen: 24
                          23.227.53.0/24 maxlen: 24
                          23.227.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:d7:c2:b2:02:69:f8:47:21:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=4f370f3d-9b07-4730-84fe-75720da1424f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:ea:9b:61:8c:2c:00:5a:75:49:1f:e2:3a:
                    ff:fb:c0:32:c3:54:0a:cd:4d:f0:1d:fc:43:9c:da:
                    3d:35:f8:d0:68:09:13:89:97:9e:f7:ee:35:df:cd:
                    7f:af:5d:46:06:8b:cf:0b:14:c8:8b:fb:68:d9:f7:
                    6a:3e:65:35:97:20:9e:30:6e:cd:25:62:68:ce:72:
                    37:05:d0:08:40:ab:c2:77:73:c2:7d:75:26:46:bb:
                    70:cc:fe:61:30:4d:96:d8:98:b4:36:67:90:d9:6e:
                    db:d0:9b:e3:2b:b8:d3:ca:fb:d4:71:f6:e5:e5:20:
                    00:91:15:b9:d5:da:3e:11:a5:30:f0:20:60:0b:94:
                    b7:67:36:82:78:fe:50:1f:1e:c6:3a:cb:3c:d3:99:
                    e2:00:2b:89:08:47:86:e2:9b:03:2f:87:da:b8:1b:
                    08:1a:91:c9:0a:3d:33:b2:42:be:64:86:36:6c:98:
                    c9:18:a0:6b:92:f5:2d:b0:c4:35:9b:2e:3f:56:f7:
                    47:f8:bf:67:f3:2e:d5:28:ae:5a:c9:c5:f2:c0:52:
                    8d:b8:75:c1:0f:08:33:ee:c0:d8:5f:f9:00:26:86:
                    9c:05:48:01:4c:b2:6e:5a:83:ee:81:81:f4:44:7e:
                    e7:1e:46:1c:a1:6e:3e:ab:a0:0b:d2:ac:88:93:0d:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:54:77:D2:76:4C:18:DC:6D:FE:06:5C:D5:18:FB:E9:93:5D:F2:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/24a6d7df-0d79-3f98-9401-87b6c45557dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.49.0-23.227.53.255
                  23.227.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:6f:f0:2f:ed:81:55:7d:6e:f5:b3:fa:03:eb:77:a0:2b:
         ae:0a:c3:93:0b:cb:a3:bf:5a:cf:c5:23:0c:bc:d2:69:b4:4d:
         39:88:2b:07:14:b8:59:9b:a0:04:e7:a2:24:bc:72:15:09:ae:
         81:e0:8e:c9:15:0a:67:39:cc:60:ee:71:1b:2c:4f:30:3b:92:
         f5:12:1f:45:5e:db:39:7c:f9:9d:a2:74:b6:11:de:a2:53:b4:
         97:f8:c1:f0:9d:47:6e:db:9d:c0:5b:e5:c2:00:12:8a:10:4d:
         e0:1c:90:fb:5b:7a:c0:e1:d1:b9:a4:5d:22:e6:6a:d8:34:2a:
         c2:00:8c:6f:0c:77:10:85:d5:8f:52:60:32:18:0e:37:e7:a5:
         ce:f6:b8:d2:44:4d:0b:f6:66:88:c3:0b:44:47:26:e3:dd:5e:
         8a:72:61:71:a0:2c:15:bf:77:0e:53:60:2f:3c:a4:00:a0:e7:
         48:b4:03:dd:85:07:2a:64:fc:81:92:12:01:5a:f7:48:47:1d:
         8d:63:2c:bb:ec:b8:66:aa:5b:50:dd:a9:3a:49:53:85:05:16:
         2f:c8:9d:5d:4d:0b:e9:b3:28:b2:bc:ca:4a:a5:8b:87:9f:36:
         47:f0:e3:07:64:dc:ab:d0:23:e8:30:fc:8d:6e:98:b8:3c:ae:
         25:42:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:45:49 2025 by rpki-client