Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8db4f7a3-3490-321a-9408-41d97cf2c94f.roa
File:                     8db4f7a3-3490-321a-9408-41d97cf2c94f.roa (raw, json)
Hash identifier:          XZtGGG6gU1bdyOi+Ibm6STEtkzxCMFAkyXQ4X2MVee8=
Subject key identifier:   D4:DA:87:01:2F:D9:E8:57:67:AF:BA:3E:B3:44:5D:D9:FE:D2:CB:B4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A841175D6813B8E1AD81E54E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8db4f7a3-3490-321a-9408-41d97cf2c94f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        23.251.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:75:d6:81:3b:8e:1a:d8:1e:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=53850f88-7022-4f4c-9852-5115490e50ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:f7:01:33:ef:e6:da:12:3e:3b:58:ad:35:
                    28:03:eb:a4:9a:d2:70:e7:0e:4d:d6:8c:31:ed:b3:
                    30:57:81:f6:66:e2:dc:49:2e:1c:08:d0:61:83:2b:
                    e3:51:e7:b7:d7:31:75:ce:3c:d9:c1:ce:29:3e:bc:
                    23:a6:28:d8:64:70:d5:42:fa:8c:f2:cd:95:f7:07:
                    b3:58:75:70:2d:53:d5:bb:0f:a6:bb:e0:ad:90:a5:
                    14:76:18:16:32:73:c5:06:91:5c:71:31:bc:e5:8f:
                    54:79:ae:de:9c:53:65:38:e9:a0:c7:17:bc:3e:2b:
                    8f:34:39:3a:44:cb:ec:a7:9c:a9:97:99:ff:39:17:
                    d1:07:a5:82:54:d6:57:58:1d:60:62:c9:82:ae:20:
                    a0:7e:3c:2e:29:2d:73:23:ac:e7:96:fb:65:5c:74:
                    73:26:d9:3b:e3:07:88:e3:ae:a5:50:50:6b:79:04:
                    94:88:04:ea:57:01:75:e0:21:13:cc:63:e1:1f:73:
                    60:e2:a5:a9:8f:16:dc:65:65:c1:84:d0:78:60:89:
                    b0:a2:d4:0b:64:83:f4:2b:48:5e:d4:cc:d2:46:82:
                    c8:53:e0:cf:3f:a3:0b:74:42:3f:c1:93:5e:ae:6d:
                    3f:53:0d:3f:c2:7c:66:7f:97:00:9d:a1:01:00:bb:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DA:87:01:2F:D9:E8:57:67:AF:BA:3E:B3:44:5D:D9:FE:D2:CB:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8db4f7a3-3490-321a-9408-41d97cf2c94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ca:0c:bf:dc:66:84:d8:51:0b:30:86:38:ce:16:b8:85:5b:
         69:6f:87:89:98:5c:82:4e:47:47:ae:2c:10:58:cd:51:fd:87:
         cd:00:c5:8c:97:4c:9b:9e:a4:f6:36:5f:69:55:cc:d3:fd:e8:
         12:c8:c5:b5:23:f1:90:52:67:d3:e5:90:01:cd:bd:21:f4:83:
         89:c5:a4:3c:03:aa:2a:14:d5:59:20:2e:5d:2a:3a:39:31:b3:
         f8:13:50:00:75:ba:59:55:db:74:66:2b:7e:9a:f2:fd:58:13:
         ef:d9:7d:b5:c9:08:1d:fb:90:ce:fb:08:af:13:01:d9:f9:9a:
         b7:57:15:6b:77:7f:6f:b5:d5:66:e7:64:04:4f:4f:53:a6:3f:
         ff:23:66:12:83:10:3a:69:35:89:03:07:7c:a8:07:91:aa:f2:
         72:2b:56:93:e4:07:d1:61:20:65:91:42:30:a2:db:a9:6a:7d:
         ed:e7:27:c4:f5:1d:01:15:84:ad:45:1e:79:02:09:02:9e:f0:
         bb:03:87:b4:9a:c0:5c:2b:31:3a:9c:98:a6:6f:af:d9:7e:69:
         b4:3e:f9:6b:57:c6:f3:17:7c:9b:5c:ac:20:a6:b2:bb:50:04:
         2d:5e:a7:a0:76:95:21:f8:1c:f9:95:ab:68:51:98:59:39:ff:
         73:00:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:35:27 2025 by rpki-client