Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa
File:                     5e1fab74-1778-30f0-833e-7e9606d6d74e.roa (raw, json)
Hash identifier:          XQerAM95ufYTM8bRshxMy/xQi6dufRYkzCZG2qrCOug=
Subject key identifier:   33:6A:C3:C5:F4:07:35:CE:63:9E:7D:52:75:AE:8A:09:AA:06:28:63
Certificate issuer:       /CN=4ee37184-86de-48c9-af35-5d102d140fa6
Certificate serial:       010D0C9F4328584A765541D63CF4F9848900E380
Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa
Signing time:             Fri 16 May 2025 01:00:46 +0000
ROA not before:           Fri 16 May 2025 01:00:46 +0000
ROA not after:            Thu 14 Aug 2025 01:00:46 +0000
asID:                     401538
IP address blocks:        23.130.156.0/24 maxlen: 32
                          2602:f766::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:55:41:d6:3c:f4:f9:84:89:00:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6
        Validity
            Not Before: May 16 01:00:46 2025 GMT
            Not After : Aug 14 01:00:46 2025 GMT
        Subject: CN=1b954061-4231-4d94-bd09-2a8e4638d6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:10:6d:6c:ed:f9:bb:46:a6:6f:be:22:89:
                    ad:c1:9b:84:40:43:c5:02:36:86:10:57:7b:49:b3:
                    e2:41:c0:af:00:6f:45:b0:4d:ad:cb:43:01:2b:7d:
                    39:a2:20:b2:de:15:9f:e2:1a:00:47:0f:7a:b9:66:
                    5b:de:e8:90:d3:70:1a:95:39:bc:1d:97:af:b2:e0:
                    c2:c3:14:e9:44:d5:31:77:3a:7f:62:7e:f2:0a:4d:
                    87:73:29:f7:36:cd:1c:78:5d:f2:63:b2:60:d6:4e:
                    11:ff:11:29:42:66:2b:5a:f2:a1:c8:91:d7:a4:68:
                    9a:35:fa:8d:0b:15:2c:13:2a:48:e7:b2:64:86:44:
                    bf:71:7e:bd:56:d4:f3:a4:ca:55:d2:5c:8c:3b:c0:
                    8f:8b:6b:94:ca:16:7c:44:a5:80:a8:8e:fd:f0:54:
                    41:4f:d6:da:94:82:95:02:36:75:81:58:da:0f:cd:
                    04:1b:1f:c0:1c:af:bb:ca:68:16:72:05:98:98:4f:
                    85:95:7f:e4:1a:fb:08:0e:d8:bc:60:35:a7:77:39:
                    d7:bf:15:b0:8f:e0:f2:07:5d:d6:6f:f9:28:67:9c:
                    9f:06:10:ba:15:2f:71:a8:8a:2d:3f:87:d7:3a:ae:
                    8b:4c:c7:5a:dd:d6:52:8b:34:9f:25:69:90:d6:29:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6A:C3:C5:F4:07:35:CE:63:9E:7D:52:75:AE:8A:09:AA:06:28:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl

            X509v3 Authority Key Identifier:
                keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.156.0/24
                IPv6:
                  2602:f766::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3b:06:5f:86:3f:1d:30:c1:e5:0f:37:a9:62:2a:d6:e3:62:
         9f:11:eb:05:9f:3b:1f:b8:fb:e0:8c:c9:2e:0d:d5:bb:54:ac:
         3e:2f:63:16:0d:80:4b:72:87:8d:e1:f3:7f:a4:37:c5:16:5f:
         6f:e2:4a:b8:1c:c5:2a:1e:9f:fd:64:ec:d7:1f:6c:63:b3:a1:
         7a:87:bc:b4:26:89:f6:55:89:b9:ab:01:fd:96:3c:42:b2:32:
         b7:13:23:b6:70:88:b8:25:eb:fd:b1:51:a4:f0:f6:cb:95:98:
         ff:1c:a1:4e:ec:87:53:02:8c:ac:2d:d0:80:fc:02:33:ad:ac:
         7b:e8:c7:46:12:98:9d:e0:c7:83:15:12:dd:0c:b6:18:71:27:
         1d:67:75:4a:b8:97:bd:32:b8:2a:50:4f:fe:84:84:4b:9b:31:
         a2:e5:58:64:3a:e9:d4:43:de:d3:7b:f1:18:60:fe:7f:a3:72:
         d3:dc:5a:9d:e3:6c:38:fa:66:7b:d2:20:e8:8e:e5:2f:25:83:
         e0:d9:30:18:25:84:95:b4:fd:81:7e:67:0c:5a:69:eb:55:a9:
         a7:49:64:c3:9b:bd:76:f3:44:d2:d4:10:2f:60:97:bf:ac:66:
         2b:8d:46:83:fe:62:cd:0f:57:c9:9b:dc:4f:5f:d7:23:fa:3e:
         8b:34:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:21 2025 by rpki-client