Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa
File:                     3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa (raw, json)
Hash identifier:          YHMd/euUCqLZ8AYH1y9FXio30QXy6WPQWV0ZGKBYt3g=
Subject key identifier:   F4:51:5B:BA:17:9E:BD:0A:6F:A6:E8:AB:E6:FF:B9:4E:19:30:E5:41
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F432858490E16CC778E59642376FBAEC0
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     149020
IP address blocks:        23.131.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:cc:77:8e:59:64:23:76:fb:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=be4717fe-243b-495b-b0bd-f8052bafaed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f1:15:8f:b7:23:0e:9b:b1:ac:8a:d4:9c:45:
                    d6:65:ca:51:a4:fe:7d:9d:6c:c1:86:6d:61:8b:91:
                    73:8a:75:1b:b5:96:8a:c3:1f:df:56:53:9b:da:5b:
                    31:a7:8f:95:45:42:03:b7:4f:61:64:4e:e6:b0:50:
                    a1:c4:2f:1a:9d:3d:25:68:9b:7e:90:5c:df:90:10:
                    67:4c:53:ba:d8:c7:b7:17:34:4f:27:21:86:32:25:
                    13:be:32:92:5b:55:80:8d:93:d6:5b:de:66:1b:bb:
                    39:89:76:c8:57:bf:c4:06:52:9a:9f:94:18:30:f3:
                    9f:82:ad:7d:d7:8f:8a:fd:66:99:15:3b:d7:cc:3e:
                    71:a0:95:d7:fa:cc:34:3a:fd:b9:2c:cd:7b:51:87:
                    80:13:24:dc:c4:3f:7b:34:37:b6:8c:87:8f:31:7f:
                    59:d9:46:c3:03:d5:75:1e:9a:43:62:59:05:d2:ea:
                    94:bb:7e:1e:91:08:79:46:da:d7:8b:86:bc:05:05:
                    76:89:01:e6:3f:49:1d:67:c9:37:ea:b5:ef:08:9b:
                    3a:47:fd:35:43:11:f1:ab:f5:ff:78:d4:3b:bf:dd:
                    50:ec:96:16:37:fa:ab:c6:fb:91:bf:8d:f4:b5:5e:
                    30:18:67:85:1d:8b:61:fa:3f:ca:84:aa:64:08:81:
                    ac:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:51:5B:BA:17:9E:BD:0A:6F:A6:E8:AB:E6:FF:B9:4E:19:30:E5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:5c:d2:91:25:03:97:54:53:9e:01:5e:71:36:d2:9d:4b:f3:
         68:5f:72:79:bc:4a:83:7e:0a:92:31:65:10:7a:37:58:6e:ad:
         43:eb:26:b3:42:98:f5:26:e5:21:3b:cd:bc:a9:0b:ef:5e:35:
         90:64:25:85:e9:2f:f1:23:c6:30:e5:ab:29:e4:59:e5:10:28:
         f4:c0:10:ba:06:1a:d2:57:73:7e:23:7b:81:04:ff:46:3d:0e:
         6e:e8:bb:20:3d:f9:3f:62:85:30:11:56:e1:c7:7b:45:a3:34:
         52:97:ae:29:d0:6a:ba:d7:54:aa:26:e7:96:8e:01:bf:b0:e4:
         8e:a8:72:52:36:44:58:ee:73:db:01:45:58:0c:86:3d:b5:b0:
         86:a0:93:c2:11:d0:08:ca:7a:e0:08:2f:2b:ca:69:de:f0:e4:
         02:12:0f:eb:e6:42:49:59:0f:ce:9b:53:c4:f6:6c:f4:c3:75:
         81:0d:cc:43:df:ee:96:15:de:af:b1:51:db:61:34:8f:11:24:
         6b:1d:8c:32:19:e9:05:c5:60:81:ac:e8:93:de:f4:73:6c:c9:
         e4:1b:6e:c1:ce:31:b1:e3:b6:4e:f2:b7:d4:92:39:87:07:b4:
         e0:6a:4a:cf:6e:b3:ba:d0:bf:d5:82:51:ed:42:f1:8f:a0:df:
         9a:02:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:20:51 2025 by rpki-client