Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/a383ea14-bf86-3b46-bdae-73dbe397ae8a.roa
File:                     a383ea14-bf86-3b46-bdae-73dbe397ae8a.roa (raw, json)
Hash identifier:          4q+cT+OYCRxV5BMjIroUVOCeEYFVIP/In2C2/snge4U=
Subject key identifier:   D5:2E:50:D6:37:A5:A3:D1:9F:FB:94:09:68:F8:29:36:02:9C:7D:32
Certificate issuer:       /CN=4e0731c4-3d05-4440-8c74-77d5a579b356
Certificate serial:       010D0C9F4328584A78E5F2B338BB50FAB7E51E80
Authority key identifier: 8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/a383ea14-bf86-3b46-bdae-73dbe397ae8a.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     214483
IP address blocks:        23.137.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:f2:b3:38:bb:50:fa:b7:e5:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0731c4-3d05-4440-8c74-77d5a579b356
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=ad0bd6ee-5062-4f42-9d3b-153d7cfb3bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:15:bc:6c:c0:fe:b6:02:b5:7e:b0:e9:8b:
                    1b:ef:0f:68:78:4c:57:6e:a3:ae:d7:7b:8e:d2:0e:
                    cc:49:9d:6f:2c:c4:4c:5f:84:8b:f4:36:86:c6:24:
                    f3:2c:0f:56:7c:25:fc:74:04:42:63:60:05:29:1f:
                    c7:ad:9e:cb:51:cb:50:2a:a5:f7:db:ef:4f:3a:f6:
                    db:cb:c9:54:fb:c1:98:2c:fc:39:0f:98:88:39:17:
                    b4:25:58:5d:d2:b7:c6:a4:9d:e8:79:09:28:74:9d:
                    be:e1:e5:3e:38:63:7c:b1:db:88:c3:4e:72:d6:1f:
                    0a:8d:35:66:99:bd:91:c4:d6:96:57:6e:a0:c9:eb:
                    01:9b:31:6f:69:aa:27:b5:e0:b7:d7:2a:31:7c:3b:
                    61:83:a5:44:5c:d2:63:83:25:0a:93:d8:9f:18:14:
                    f8:c0:0c:73:e2:4b:04:ff:ee:be:f7:94:58:ca:36:
                    36:19:52:ad:47:f5:29:32:fe:05:1b:d5:38:05:c8:
                    3f:fc:2b:06:35:8c:79:ff:5e:61:66:3b:63:ad:bf:
                    6b:5c:48:95:8e:5a:d7:af:dc:37:76:75:75:bf:94:
                    3e:c6:21:e9:fd:d6:b3:44:82:98:6c:6b:41:db:ab:
                    1e:26:f9:bc:b4:aa:93:bf:65:58:57:23:d4:12:cf:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2E:50:D6:37:A5:A3:D1:9F:FB:94:09:68:F8:29:36:02:9C:7D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/a383ea14-bf86-3b46-bdae-73dbe397ae8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.crl

            X509v3 Authority Key Identifier:
                keyid:8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2b:d7:e7:d6:96:3f:71:16:4d:00:b6:18:91:8c:db:07:6d:
         de:cd:fd:52:7c:08:1e:c3:0d:02:00:76:15:76:c9:19:b2:a0:
         fe:87:e9:10:fc:24:0e:82:24:fd:c7:6f:59:eb:cb:c9:35:8d:
         c7:05:1a:c4:d9:1b:4c:b2:bd:a6:ea:30:65:66:58:29:e2:7c:
         00:b4:25:7e:06:b2:66:21:09:db:ac:dc:cb:b9:30:7d:c8:d8:
         29:db:a5:84:0b:5b:f0:bf:2d:3b:fa:d6:6f:4c:4f:fd:6b:9d:
         6a:e0:6c:0c:a3:e6:dd:0d:71:39:d0:1e:d7:fb:79:c2:35:5b:
         46:a2:72:73:d7:52:a7:01:46:c5:aa:97:90:5a:80:7b:ad:31:
         75:32:a1:c0:f4:cc:4d:19:f6:7d:2b:31:71:ab:75:bc:a2:d7:
         f2:0e:82:46:ad:aa:73:15:3d:cf:92:7f:48:f4:f7:74:8e:2c:
         a1:40:8b:83:e3:f5:ba:7d:3e:e3:12:d0:ce:f2:62:65:a0:16:
         7a:68:f9:bb:65:2f:be:28:51:e6:3f:05:95:dc:77:9b:db:a4:
         c0:d5:16:be:bf:7e:59:08:4f:eb:49:08:6e:d7:ce:9e:e3:f5:
         e3:ed:d0:36:eb:11:9e:3b:84:15:f1:c4:22:02:36:34:04:10:
         80:e6:db:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:50:17 2025 by rpki-client