Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/23ec6e2b-6198-3033-bd15-0ad399284ab4.roa
File:                     23ec6e2b-6198-3033-bd15-0ad399284ab4.roa (raw, json)
Hash identifier:          fASiDHVy9l3pDf32Zu5VP2iHMyYxwSmgj1x6WomdRFs=
Subject key identifier:   AE:A2:D7:A6:D7:1F:64:CF:BD:D4:87:64:EF:10:25:CB:54:25:2D:5E
Certificate issuer:       /CN=17608350-923c-49ac-ba58-98403754acd7
Certificate serial:       010D0C9F4328584AEBD06BA30C0E345D6465AC00
Authority key identifier: 8F:3C:E9:B8:51:DF:CA:32:5F:0E:74:F2:FC:15:09:BF:64:E8:81:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/23ec6e2b-6198-3033-bd15-0ad399284ab4.roa
Signing time:             Wed 20 Aug 2025 16:55:40 +0000
ROA not before:           Wed 20 Aug 2025 16:55:40 +0000
ROA not after:            Tue 18 Nov 2025 17:55:40 +0000
asID:                     29979
IP address blocks:        64.89.240.0/20 maxlen: 20
                          74.221.64.0/20 maxlen: 20
                          198.100.176.0/20 maxlen: 20
                          199.193.84.0/22 maxlen: 22
                          2605:3080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:d0:6b:a3:0c:0e:34:5d:64:65:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17608350-923c-49ac-ba58-98403754acd7
        Validity
            Not Before: Aug 20 16:55:40 2025 GMT
            Not After : Nov 18 17:55:40 2025 GMT
        Subject: CN=1584a424-8d24-4087-b0c5-5a8e122c9fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:c7:d9:7c:72:8b:e8:0e:e1:26:c9:7d:48:
                    59:ba:89:f1:39:d3:0d:3b:7d:f3:70:b9:a9:35:1b:
                    73:d2:d9:bd:64:63:34:c6:d3:40:67:fc:84:e9:7f:
                    0f:c1:f2:96:a8:fb:93:1a:71:22:ef:b3:a3:2f:ad:
                    3c:d6:73:33:73:7a:cf:6f:95:1c:53:76:dc:91:e7:
                    90:4a:8e:9d:eb:c8:5d:50:19:39:57:45:f2:6a:06:
                    23:3e:06:30:3a:61:c2:73:1c:f9:7c:7f:e8:ba:b7:
                    8f:22:33:d2:1b:f8:05:3d:7c:63:18:ff:fe:b1:cd:
                    97:61:53:d0:b6:b7:6d:58:af:a6:1f:79:cc:13:ce:
                    19:00:89:07:3b:f8:50:0b:37:ac:14:55:81:3c:85:
                    0c:ac:2a:1c:52:0b:dc:26:a2:b6:65:e9:1a:72:33:
                    50:30:b2:38:d0:8b:0b:c7:1c:94:50:12:2a:ab:3b:
                    7a:2d:e1:50:bc:34:73:b2:73:c1:05:a1:34:68:83:
                    61:3a:ff:49:66:d1:a2:55:9f:7f:c8:ca:88:d1:8c:
                    ad:ca:95:f4:3a:8f:2b:de:24:6a:a1:05:b5:21:78:
                    f0:f2:c8:53:31:e8:0c:86:bc:f9:97:97:84:c3:78:
                    98:69:2b:13:4b:27:33:0d:0a:99:f3:fa:30:18:28:
                    37:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A2:D7:A6:D7:1F:64:CF:BD:D4:87:64:EF:10:25:CB:54:25:2D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/23ec6e2b-6198-3033-bd15-0ad399284ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.crl

            X509v3 Authority Key Identifier:
                keyid:8F:3C:E9:B8:51:DF:CA:32:5F:0E:74:F2:FC:15:09:BF:64:E8:81:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.240.0/20
                  74.221.64.0/20
                  198.100.176.0/20
                  199.193.84.0/22
                IPv6:
                  2605:3080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ee:90:4c:f4:cf:21:0f:9c:76:b3:6b:e8:6a:e9:67:41:ba:
         94:be:9b:74:f2:34:30:29:9b:e9:34:fb:a2:a5:0c:d0:f4:10:
         06:04:ab:02:e7:0b:6c:a9:b6:a8:64:1f:9d:0d:64:db:fc:9f:
         34:a2:93:d5:04:66:a5:60:ce:e8:94:a5:f7:9e:3d:31:eb:fd:
         32:9d:95:3c:42:a8:ea:5e:c1:a0:fb:f4:e4:57:b9:ce:79:87:
         9e:32:69:d7:ec:4c:92:28:9a:2a:42:4c:14:a7:8f:ae:e4:7a:
         d6:eb:ff:e8:90:35:76:fe:8d:21:d5:d4:7d:0b:1b:89:b5:8b:
         46:ae:10:89:1c:97:26:46:2c:cc:d5:ea:c5:a7:76:04:ad:32:
         a8:46:c8:38:d5:fb:56:f8:ac:c2:f2:07:5b:88:97:d5:39:b9:
         13:2c:38:53:d7:ad:33:3d:49:aa:17:b4:07:a0:7c:c7:68:e0:
         6d:d2:d5:a5:7c:d6:57:c4:96:b5:53:70:63:94:2e:a5:b1:8b:
         a0:0a:36:95:48:a6:bb:18:aa:d8:dd:6c:8f:ea:cd:43:ae:1f:
         e3:61:d9:1a:3c:08:ab:d3:d6:52:9b:38:c4:e7:78:17:93:2f:
         a9:70:c7:82:85:4d:90:42:f0:da:ba:71:1a:40:cd:8c:94:4b:
         c5:9b:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:03:00 2025 by rpki-client