Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/86e04435-5653-3d57-bf39-e6379988d355.roa
File:                     86e04435-5653-3d57-bf39-e6379988d355.roa (raw, json)
Hash identifier:          a1vWuX9jZ30Ryz8fX6Cv+/VN7oeRwO07pVa4dCXeyVc=
Subject key identifier:   43:F3:07:83:CF:7B:75:C9:99:1F:24:C0:71:05:A3:B0:06:8E:AE:51
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584A8410F6291495AEB41704C580
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/86e04435-5653-3d57-bf39-e6379988d355.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     11870
IP address blocks:        167.23.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f6:29:14:95:ae:b4:17:04:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=21dfff19-5ad7-4fe6-ad19-5e883d6f240c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:46:6d:b2:a9:5a:5e:fc:1a:b4:73:4f:63:6e:
                    07:6d:fb:af:9b:df:8f:55:ec:26:0b:c5:d6:3a:27:
                    53:69:13:a5:2f:85:a0:62:87:1b:2b:cf:fd:f0:7f:
                    1d:76:1e:a9:3e:93:0d:73:e3:c4:0d:76:c5:49:6c:
                    95:dc:57:e4:3e:8e:7f:ae:b5:a4:5b:05:a2:fe:26:
                    3b:8d:71:f2:41:51:4d:57:f9:03:59:6d:2c:cc:fd:
                    28:a7:41:01:66:a6:13:bf:58:c8:ba:39:f1:aa:9c:
                    d9:c0:62:7f:4e:9a:ac:96:10:90:80:e1:9b:04:00:
                    01:5d:6f:27:76:eb:d6:8c:8a:55:cf:53:10:de:7d:
                    96:a6:50:c6:7e:bd:38:1e:7a:6a:a0:3c:b7:93:04:
                    c9:9a:90:18:e4:54:2c:7e:fc:fd:30:dc:c3:86:0c:
                    ba:a9:ba:06:9f:fb:84:10:c6:ba:69:b8:57:6e:db:
                    ee:0f:9c:40:4d:6f:a2:c7:f5:4f:b3:e4:3a:a2:e0:
                    44:af:3d:41:0b:b8:d8:b7:44:38:6b:a7:cb:d1:29:
                    66:8c:cf:07:74:d2:99:2a:46:e6:95:58:64:b8:16:
                    2d:be:36:39:72:4a:17:ff:e6:ed:d7:df:32:b1:41:
                    0a:0e:38:36:5c:07:f4:de:a9:c7:fd:27:d3:11:28:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F3:07:83:CF:7B:75:C9:99:1F:24:C0:71:05:A3:B0:06:8E:AE:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/86e04435-5653-3d57-bf39-e6379988d355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1a:43:24:3e:cf:6f:fe:8a:97:43:12:8b:b7:af:57:1a:df:
         f1:97:c1:18:66:0f:ca:3b:82:eb:2f:b7:72:44:f0:7e:97:60:
         7d:81:31:bd:96:26:e8:35:91:65:20:c0:f9:05:5e:a5:70:23:
         a1:84:d4:49:89:63:29:06:4c:75:1c:58:7d:a9:14:93:25:f4:
         90:71:9e:95:5f:71:7d:9b:21:fd:af:10:d0:6f:a4:50:e6:c2:
         21:88:e8:ba:70:ec:b1:41:ac:20:53:02:7e:28:b3:b0:d4:7b:
         48:3e:a6:e5:9e:4d:6b:a5:97:a3:81:50:80:60:5e:0c:c2:01:
         2e:f1:82:93:b7:3e:ad:6b:3c:dc:77:bb:f2:bf:f1:02:63:01:
         12:e1:15:a3:12:dc:b0:8f:36:76:42:17:3c:4a:29:76:7a:47:
         aa:18:35:4c:6d:63:3a:98:07:4e:6f:01:33:2d:30:b5:5c:21:
         c4:73:69:ca:d9:1b:7e:92:b3:2d:5d:15:ba:c7:73:7c:fd:b0:
         cc:20:8d:d0:e4:cf:4f:52:2f:37:1f:25:e1:26:8e:1e:2a:0c:
         72:6d:66:2d:2e:92:fa:a1:0a:fa:d0:b3:90:5f:7d:ff:76:21:
         75:93:1c:7b:7c:b8:46:17:13:2e:02:50:f8:f6:8d:f0:b8:ce:
         02:03:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:53:27 2025 by rpki-client