Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/e29b6c92-db7c-3638-94ed-c1f2a6ad15a2.roa
File:                     e29b6c92-db7c-3638-94ed-c1f2a6ad15a2.roa (raw, json)
Hash identifier:          +AKHSAtYPB4JxgwbVoqsAepZLNJfXY6Se/AAxoKx2Yw=
Subject key identifier:   EA:8A:A6:46:AF:38:84:C4:96:25:D0:3B:D1:BD:34:88:1B:A1:66:30
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584A8410F5F24F2FDD2CEE73D260
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/e29b6c92-db7c-3638-94ed-c1f2a6ad15a2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     11870
IP address blocks:        167.23.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f5:f2:4f:2f:dd:2c:ee:73:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3bda4ca2-5262-4cde-bb8c-fb82afe000a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:9e:44:25:82:41:d3:3b:88:a3:25:78:1d:
                    cb:4e:b9:9f:58:5d:f4:69:10:e6:14:c8:75:9a:57:
                    3c:f6:3c:f9:98:3a:02:6a:e5:21:a2:ec:77:ca:49:
                    94:51:dd:76:f0:80:3b:22:c7:0c:d8:09:68:ac:5e:
                    0d:bf:cb:a0:b4:32:ba:b5:d6:17:5f:1c:84:cf:61:
                    a7:06:8e:38:8b:a3:c2:4b:1e:62:69:40:28:1c:dd:
                    9d:9c:bb:42:fc:88:b6:be:08:40:aa:8f:37:85:11:
                    b6:98:88:85:1d:da:ff:48:4d:40:65:09:2f:b8:c3:
                    69:19:d7:b2:d3:36:de:b1:86:16:27:b7:a3:09:ef:
                    e2:45:3a:8c:13:0a:c6:54:6d:00:2b:fa:4d:9e:55:
                    20:12:e3:07:cd:74:92:bc:a7:83:26:5b:b1:80:d4:
                    98:fb:95:15:3f:8c:05:eb:2f:44:ae:f3:97:4c:08:
                    fd:8c:1a:87:77:12:fc:4c:ed:f4:99:65:99:a8:0e:
                    b1:23:d1:9b:8d:81:10:5c:6b:80:58:0d:12:67:19:
                    00:cd:36:1a:45:2f:90:c2:2f:ae:1c:4d:a1:74:1a:
                    60:fe:89:26:1f:46:13:4d:fa:c3:4f:dc:6b:f1:48:
                    e8:32:15:6c:ca:4a:80:17:d2:2b:72:de:6b:cd:82:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8A:A6:46:AF:38:84:C4:96:25:D0:3B:D1:BD:34:88:1B:A1:66:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/e29b6c92-db7c-3638-94ed-c1f2a6ad15a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b0:42:56:92:2b:6e:0a:17:ac:24:cc:f1:8b:3b:11:31:db:
         7b:68:0c:40:0f:cb:f1:ed:f8:c1:b1:70:aa:bb:11:e5:a1:c3:
         85:63:19:c8:b5:79:35:fd:11:55:eb:07:69:4d:db:c1:19:44:
         32:b0:02:44:7a:a9:35:de:b2:4e:25:18:14:f4:53:05:09:b8:
         fc:c4:c0:b4:6c:23:51:33:a0:3d:e9:7b:cb:ef:2e:a5:30:97:
         5d:16:ed:21:f6:08:00:f1:3b:da:88:b9:e0:cf:41:be:65:c8:
         d8:9c:d8:50:e6:18:b3:ec:a7:ce:a0:6b:6f:60:3a:cb:47:6d:
         64:54:d9:41:51:fc:9d:3a:35:21:e0:82:93:65:4c:53:49:12:
         a5:7d:14:f6:e1:95:e6:c2:58:c0:33:7f:a0:3c:e8:90:64:fe:
         b5:44:6c:61:05:34:ed:3e:1c:da:55:30:43:39:47:81:15:04:
         d8:32:be:8f:f6:e8:07:59:6b:33:fe:3a:79:a8:63:1e:ce:0f:
         45:0a:ed:db:1c:11:27:aa:f4:8d:e1:b8:14:9d:3e:99:07:7d:
         ec:13:b4:1e:f6:e6:62:db:0d:07:61:29:fd:b3:c3:e6:dc:a3:
         fb:57:dd:fe:71:72:17:0f:7f:72:0a:b9:b2:79:de:ea:c3:d3:
         46:d8:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:06:01 2025 by rpki-client