Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2a3300b-38ab-341e-b43b-8c7fda001317.roa
File:                     c2a3300b-38ab-341e-b43b-8c7fda001317.roa (raw, json)
Hash identifier:          Y9sCsvXqd0hRiS/4sblaNsJuJPfOg6t440wo8hjj+oA=
Subject key identifier:   0E:5E:CA:FD:D4:DE:65:33:07:B6:91:3F:56:8C:1F:B4:B8:C6:52:FC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A841224F051D152AA98069B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2a3300b-38ab-341e-b43b-8c7fda001317.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        23.251.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:24:f0:51:d1:52:aa:98:06:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b6520bc7-bf10-48dc-9796-74a5b5521cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:13:e9:d0:c0:33:dd:84:12:47:6e:57:bd:
                    c2:68:35:da:2f:d3:7b:7c:0e:50:52:a0:43:1f:40:
                    0d:c2:a8:02:e9:7b:cc:6f:1b:f2:fe:ed:17:f4:e4:
                    07:d2:ad:69:71:ed:4a:0f:0d:df:e2:ae:e8:75:4f:
                    34:de:ba:4a:1e:65:07:a3:6c:6c:a1:f0:86:30:08:
                    d2:69:3a:f2:4c:dd:3d:a2:7d:aa:a0:60:e0:8d:c9:
                    44:b8:3a:76:ff:74:43:d4:0b:0a:7d:4e:77:4c:1c:
                    e2:63:42:f6:8a:57:51:b4:9b:34:94:b9:70:4f:13:
                    77:db:dc:85:e6:16:30:0b:e1:13:a8:64:9f:48:c6:
                    d9:6c:ad:f4:ae:c3:b2:b8:29:0c:e5:96:36:32:45:
                    03:1a:46:de:2f:bf:41:5b:66:67:11:87:a8:6d:e7:
                    60:f8:b0:34:6c:96:f8:66:91:a6:a3:66:e1:4d:6a:
                    b7:64:aa:74:fd:65:4b:4c:8a:2c:93:8f:dc:53:e3:
                    e8:b4:ff:75:6a:91:7a:67:a7:ab:aa:87:2f:23:95:
                    42:47:8d:d4:b9:14:b3:97:a1:b9:83:1b:4c:e8:04:
                    2e:cb:e0:51:4c:46:32:f1:16:2c:5e:c4:64:a9:b8:
                    c8:29:b5:af:13:7b:6d:97:57:a2:e5:f7:1d:6f:b4:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5E:CA:FD:D4:DE:65:33:07:B6:91:3F:56:8C:1F:B4:B8:C6:52:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2a3300b-38ab-341e-b43b-8c7fda001317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:af:89:0f:9b:fb:41:d6:6a:19:c7:17:32:6a:a8:63:5d:78:
         8e:20:8c:82:f3:4b:5a:f6:f6:4a:26:44:a3:91:eb:2d:20:fd:
         16:72:eb:11:3d:0b:70:18:03:53:6e:3f:db:7f:9f:23:1f:d2:
         45:36:72:ff:f4:b4:9f:f1:23:09:2b:50:97:6c:d5:9c:cb:b5:
         a9:49:30:b3:5f:4c:d7:23:38:5f:60:61:09:bb:ad:f5:a7:d6:
         d0:3c:91:c4:2a:dc:af:28:f6:74:83:98:21:81:1c:c7:5a:a4:
         0b:de:7d:9c:e0:da:a6:9d:9b:bc:5d:e6:4b:f2:e8:fc:fe:6b:
         e8:81:b2:fc:3c:47:7d:62:3c:e9:a5:1d:99:c3:da:17:9b:e3:
         e0:0b:9a:1a:4f:3e:f3:32:b3:7c:3f:3d:9f:f0:0f:1e:1f:0c:
         1a:d9:a5:d4:df:78:ba:69:b0:22:1f:26:cd:aa:6f:d8:2a:38:
         90:85:52:d1:92:71:00:6f:29:81:86:41:dc:13:eb:33:a8:ff:
         dd:d7:e5:c6:52:40:9d:7f:0f:ed:1c:e7:11:f7:13:2e:4e:d3:
         ab:d3:85:2c:aa:87:36:a6:3c:c6:f8:74:03:d2:cd:a9:4b:42:
         39:b8:b5:df:17:07:10:65:1e:d5:a5:2c:2b:7d:84:8f:db:6d:
         54:24:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:21:30 2025 by rpki-client