Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2e9f4fa8-8ae6-3e4c-a027-e07f3e88ec4f.roa
File:                     2e9f4fa8-8ae6-3e4c-a027-e07f3e88ec4f.roa (raw, json)
Hash identifier:          HSrqJpMAzvSH5RbVklUMOwjz81fYfzPVWR8BLd2K26Q=
Subject key identifier:   9F:BE:79:19:05:38:94:AE:38:CB:9E:C3:CD:52:A6:D8:B6:E6:29:B0
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A7BE1069FCDFC3874EC4E9540
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2e9f4fa8-8ae6-3e4c-a027-e07f3e88ec4f.roa
Signing time:             Fri 11 Jul 2025 14:38:35 +0000
ROA not before:           Fri 11 Jul 2025 14:38:35 +0000
ROA not after:            Thu 09 Oct 2025 14:38:35 +0000
asID:                     146813
IP address blocks:        23.236.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:e1:06:9f:cd:fc:38:74:ec:4e:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul 11 14:38:35 2025 GMT
            Not After : Oct  9 14:38:35 2025 GMT
        Subject: CN=2498b7df-203a-4920-8a79-ef0069da91e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:f4:eb:b0:2f:f5:93:20:ed:f6:fa:d0:80:
                    c0:c7:e8:ce:09:3a:36:9a:6b:f9:d3:61:3e:f6:e6:
                    83:e4:60:6d:29:9b:61:3f:11:6a:57:c0:28:18:6d:
                    ec:93:35:3b:0e:14:c6:2b:38:a9:62:5b:37:86:5b:
                    7e:14:83:43:59:74:61:76:da:d8:d0:5c:bb:9d:94:
                    ba:c9:51:76:6c:71:46:e8:2f:42:cd:bc:fe:27:6f:
                    86:42:f9:51:96:b4:2b:d5:00:09:a6:a5:3d:28:7e:
                    d8:2b:61:91:4a:ab:2c:ca:bc:6d:e4:4e:da:d9:4d:
                    da:ce:6b:8d:cd:07:a4:02:2a:84:9b:6c:76:b4:a8:
                    cb:59:f5:df:31:82:ac:ed:97:4a:6b:bf:b9:e1:21:
                    ff:8c:ff:f2:e3:bd:12:fa:68:8e:6e:23:89:da:d1:
                    f7:ea:e5:3a:b6:73:1c:13:22:f9:db:17:5f:a8:0e:
                    af:97:23:b6:28:70:92:af:23:de:49:c1:d2:9c:7b:
                    5c:a2:75:b0:bc:ec:70:61:e1:e1:7e:0a:91:1d:98:
                    0f:c9:16:36:29:1d:18:9f:da:a2:02:a2:f2:91:d3:
                    d0:9f:f7:06:fc:a4:04:89:e5:13:86:77:2f:57:ff:
                    47:b4:f2:db:2d:e4:02:5b:bd:e5:15:b4:39:25:d4:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BE:79:19:05:38:94:AE:38:CB:9E:C3:CD:52:A6:D8:B6:E6:29:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2e9f4fa8-8ae6-3e4c-a027-e07f3e88ec4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.236.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:37:3b:7d:59:38:de:11:ce:de:eb:ee:62:0d:86:39:cc:6b:
         38:bc:66:e0:21:a5:17:b3:e1:2c:15:6f:86:2a:e2:c0:3c:b6:
         5f:6c:5d:e8:ab:71:26:5f:c5:ac:04:89:4b:7b:aa:fd:e5:82:
         cc:9a:09:40:c8:9f:a5:03:4d:a2:df:b7:71:b5:c8:a0:08:31:
         37:20:a5:2e:ce:07:04:c2:cc:e8:2d:da:20:f9:02:e2:b8:b9:
         f2:f3:00:ee:1a:c0:80:ed:51:40:57:fd:ca:53:67:94:c7:9a:
         a9:cf:a1:89:66:65:60:20:03:80:51:ca:62:ee:da:94:c4:23:
         02:ae:8b:62:af:95:9c:64:c7:2c:01:6e:8a:15:e8:e3:37:ca:
         00:d4:fe:5f:cb:e1:5e:7a:63:d2:f7:48:f9:a6:85:bc:ee:d9:
         35:41:01:37:f3:98:39:81:20:e8:cf:16:89:5f:dc:4a:51:58:
         70:50:80:bb:36:7b:55:f2:ab:2f:fe:17:a7:91:56:99:69:9c:
         24:33:fa:87:e3:35:c8:ea:1c:2f:d0:e5:d0:b5:85:3b:65:f6:
         c9:6c:30:b0:88:f8:f0:90:1a:d4:05:71:8c:40:8f:34:4a:cc:
         96:df:b5:b2:75:66:4b:0a:6e:a3:3b:8c:f1:57:14:e5:4c:53:
         be:98:0a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:37:47 2025 by rpki-client