Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b0ef4e1-2c0f-383f-b638-ff0cb61f33bf.roa
File:                     4b0ef4e1-2c0f-383f-b638-ff0cb61f33bf.roa (raw, json)
Hash identifier:          8s2UlZhc1ErMfuRerWNSdLQcYjp7P0D2FUal+YFWsD8=
Subject key identifier:   79:12:C4:33:C6:3C:CA:D6:F8:39:13:D2:16:F7:47:E4:45:C1:51:43
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A8840A16E1223C3ED4F9EB580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b0ef4e1-2c0f-383f-b638-ff0cb61f33bf.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     16625
IP address blocks:        23.218.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:a1:6e:12:23:c3:ed:4f:9e:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=20041f2d-821b-4092-a309-f87b27e69fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e2:14:53:75:6c:57:36:b0:c0:60:8d:39:74:
                    66:1c:c2:7c:45:03:b1:f0:81:4f:fb:d3:4e:dd:1e:
                    81:c2:ae:15:6a:07:2e:e6:9a:20:8c:99:0e:f1:b5:
                    3e:1e:80:24:ba:0b:be:86:c8:30:b5:3f:62:ce:4b:
                    e9:a6:e6:7e:9c:b9:73:3e:31:56:e7:c0:4c:25:1f:
                    cb:ea:9f:c0:18:9b:e8:92:ad:dc:15:50:8a:03:57:
                    b4:c7:fa:d0:c6:ff:14:ac:a6:ea:d3:d8:a0:a1:fa:
                    d8:07:68:98:ab:1b:81:27:06:f2:c8:58:44:33:12:
                    98:d3:15:ba:8e:b4:1a:ba:1e:7d:69:b4:e6:da:7a:
                    0b:36:99:9e:5b:d3:c5:d4:f8:09:df:54:16:ce:11:
                    52:be:67:a2:01:36:f4:94:f9:c4:0a:d9:df:1d:01:
                    b8:f0:c8:34:75:ad:9e:58:f9:b1:fd:77:ae:2c:87:
                    5d:b7:b3:db:4a:7e:e4:b8:21:31:03:6b:78:ef:fb:
                    11:82:42:b7:6e:e3:02:88:0c:38:06:dc:f3:16:6a:
                    2c:06:c6:f4:80:e7:64:fb:c2:93:5e:e9:21:3e:d5:
                    a0:af:95:ef:26:37:da:82:4e:e0:58:af:5b:60:f2:
                    27:af:4b:81:e9:ac:0e:7d:0d:33:38:a9:9d:5e:3b:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:12:C4:33:C6:3C:CA:D6:F8:39:13:D2:16:F7:47:E4:45:C1:51:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b0ef4e1-2c0f-383f-b638-ff0cb61f33bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.218.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b2:26:71:3d:73:1b:1b:54:37:33:26:ce:22:d8:d2:2d:c2:
         d1:9f:97:15:01:1a:7d:6e:d0:82:03:2a:8b:98:ca:07:b4:65:
         38:93:75:84:fe:49:79:dc:eb:a4:d6:b4:f8:3f:dc:1a:74:79:
         21:80:d4:fb:5f:ff:36:01:27:81:fb:06:4c:a7:93:5f:61:ad:
         e2:08:0d:fa:ba:b1:2b:82:c0:2f:e9:77:f2:2b:fd:f7:1b:6e:
         f9:c7:63:91:c0:6f:54:fa:cf:05:08:11:1c:5b:26:7e:e2:1c:
         89:41:80:cc:ed:63:25:93:bc:22:13:03:04:c4:f3:15:97:f4:
         a2:2c:88:cf:e9:f1:44:2f:99:33:24:0b:ab:b4:3f:f9:d4:8a:
         4c:2b:4b:0e:d9:46:33:d7:79:44:5a:86:a1:58:02:5c:95:71:
         b7:70:2b:6b:69:55:fa:8e:24:af:23:cf:2d:01:3e:c6:67:41:
         7e:73:ab:e4:ca:8d:dd:cd:46:29:0d:59:88:e9:e0:d2:58:e7:
         b4:05:5f:cc:c1:49:6f:57:7e:1f:79:10:9f:37:d4:35:4b:3a:
         b7:69:b4:fb:c3:fb:e2:f3:ce:c5:ba:0b:4f:66:87:36:4c:fa:
         6c:4c:1a:ec:6a:7a:ea:ce:b1:1f:ca:f7:90:a5:15:aa:6f:d0:
         f3:2d:9d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:33:28 2025 by rpki-client