Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/a2022f42-0e7e-346d-8d87-d07af1866713.roa
File:                     a2022f42-0e7e-346d-8d87-d07af1866713.roa (raw, json)
Hash identifier:          +S4sAjHbYRo+lNKmFMbPjE4GF29+u/pyagvTwh2/6dg=
Subject key identifier:   2D:FB:1A:D6:29:D8:54:D8:6D:DF:30:40:A3:6D:73:4D:2D:5F:11:4D
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584A8410F692C5E6A97C7EDDB100
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/a2022f42-0e7e-346d-8d87-d07af1866713.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     55571
IP address blocks:        167.23.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f6:92:c5:e6:a9:7c:7e:dd:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=87176f1c-05db-4a2d-99a6-a0c0b5f8880f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:2e:1b:b5:77:72:9b:a5:a4:bb:87:87:ca:
                    b3:b0:42:82:82:1e:ca:e8:49:f2:a5:1a:54:56:cd:
                    e3:01:66:ac:1c:35:c8:d8:5d:f1:e0:d5:85:67:46:
                    73:3f:23:b9:6c:7b:87:7b:d8:0c:8c:0c:90:d8:d1:
                    6f:53:2f:f0:10:b1:81:21:6f:93:27:c8:1d:27:77:
                    3a:b3:de:df:fe:75:0b:62:de:bb:86:20:71:34:c1:
                    22:20:ea:c4:70:a4:44:f8:17:46:b5:11:44:20:07:
                    86:27:43:c8:0d:88:2d:71:e6:3a:32:20:87:cf:c6:
                    e5:d2:3e:15:d2:c6:02:7e:89:b8:73:91:a9:5a:1f:
                    19:a3:41:e7:5f:5a:bb:6e:cc:ed:80:09:13:93:b9:
                    df:32:7d:b6:e8:34:fd:fb:ac:85:b1:fd:68:19:52:
                    00:0e:6e:aa:b0:3e:fc:7f:53:44:96:22:ff:5f:78:
                    9b:ba:0c:da:4e:fb:55:ed:e1:5b:e2:32:be:6a:27:
                    3f:8b:32:be:81:28:ac:93:10:d3:58:47:a0:ba:a7:
                    41:b2:5b:b0:60:b5:d2:09:db:2c:17:cd:ca:d7:86:
                    a9:b3:56:d6:cb:aa:86:06:8c:60:d8:cf:d5:54:81:
                    1a:d9:a1:9d:05:fd:78:10:f7:a7:fc:26:cf:3a:0e:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FB:1A:D6:29:D8:54:D8:6D:DF:30:40:A3:6D:73:4D:2D:5F:11:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/a2022f42-0e7e-346d-8d87-d07af1866713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3e:b9:02:98:d0:0a:eb:93:03:d8:f2:6d:1a:45:41:d6:68:
         b7:91:86:84:5c:3a:e4:a1:77:d1:ef:92:92:2f:e9:67:79:31:
         c2:86:8d:0a:1f:d5:65:0a:6f:21:33:5c:c1:b2:0b:2d:d4:50:
         d2:43:05:33:30:be:b9:39:e4:b0:6e:c0:a6:fe:3b:9f:88:d6:
         18:e2:d6:42:7b:f4:c2:0d:3f:56:40:53:b2:69:8f:90:8d:f7:
         cf:1e:0f:e6:77:6c:d6:19:5e:b2:46:0d:c3:09:05:bc:66:6c:
         76:38:e2:e1:a2:82:22:2a:4b:72:a0:37:97:e1:62:75:a0:ab:
         92:61:f1:e7:8d:18:aa:ac:5d:32:22:0f:73:24:e8:d9:9c:d8:
         0b:97:95:93:ed:e5:f7:ad:42:b6:4b:24:64:4c:4c:4f:aa:f7:
         53:15:ad:8e:e6:7b:3d:83:99:a0:b7:12:93:a8:bd:87:77:c2:
         51:c5:53:e6:55:21:e3:e6:52:25:4d:37:1a:9c:e1:6c:ad:b2:
         3d:1a:9f:21:50:cf:6a:c2:e2:37:e5:28:8e:41:8a:38:53:59:
         c3:9f:8f:91:d2:73:0f:fb:21:37:51:23:5c:d0:23:97:09:b5:
         dd:fb:e4:24:a5:a5:e3:d0:81:d7:f3:4c:e4:85:c7:b5:19:6e:
         0e:64:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:53:14 2025 by rpki-client