Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/527793f6-7f0a-3e4a-8d30-adcc72233bdd.roa
File:                     527793f6-7f0a-3e4a-8d30-adcc72233bdd.roa (raw, json)
Hash identifier:          SgVJXflkHUboeOQ5Jp2jq2QKLBJnH1Qlv/UXq+fdwIk=
Subject key identifier:   31:D5:88:EC:DF:22:C3:02:80:0E:8D:63:6A:9C:C3:C3:24:6F:19:BB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A655B3786DA295A576DAB2E60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/527793f6-7f0a-3e4a-8d30-adcc72233bdd.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.199.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:37:86:da:29:5a:57:6d:ab:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=8c7a177e-f652-4235-828f-4be206c51b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cc:42:54:4d:2f:ac:a7:b1:0c:92:d4:6f:5c:
                    04:5c:1c:f6:ed:86:4f:36:3b:3b:50:1f:61:5f:cb:
                    d1:ee:67:ee:72:0b:5d:0e:0d:2c:dc:34:ad:ae:9f:
                    29:43:8b:bd:75:44:83:74:d4:e8:fb:66:13:33:5c:
                    88:7b:db:07:39:8a:e6:8b:8c:6e:84:87:67:05:ac:
                    94:e4:66:34:44:0b:16:76:cc:68:e8:7e:ae:c2:5c:
                    c4:57:c4:78:de:b9:58:96:18:3e:b5:47:2c:67:aa:
                    b4:9b:72:91:52:69:9e:0e:9c:30:41:e2:b0:65:cf:
                    a2:45:ee:d4:a2:da:6e:c3:96:3d:e9:77:2f:50:70:
                    ac:99:ca:49:01:bf:96:26:78:4f:78:d2:4c:cd:3c:
                    b0:67:50:7a:cd:c6:86:f2:f7:19:9e:5d:b6:e2:b2:
                    23:c2:db:b8:96:4b:d8:7e:35:77:a4:4e:be:e7:6d:
                    ee:74:41:fc:e6:aa:6b:e1:76:c1:3f:3c:2e:d8:9f:
                    f6:15:b6:85:30:dd:85:00:c6:1c:c6:24:ea:b6:af:
                    20:5a:f3:3a:f2:63:93:aa:99:25:be:fb:3e:cd:bb:
                    90:a6:2d:84:3f:e1:b4:26:41:eb:ab:9b:d0:45:2a:
                    0b:27:26:be:46:fc:31:29:97:51:04:8c:f9:30:7d:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:88:EC:DF:22:C3:02:80:0E:8D:63:6A:9C:C3:C3:24:6F:19:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/527793f6-7f0a-3e4a-8d30-adcc72233bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fb:90:9b:e9:aa:39:02:0b:11:57:1a:aa:5a:4f:3a:df:00:
         38:34:2a:2c:af:b6:24:dd:ec:22:d2:12:a6:81:88:57:f6:ca:
         fa:0b:50:c3:30:89:34:e1:9a:42:37:c2:64:60:06:6c:0e:01:
         31:58:4e:54:60:f9:ab:d3:25:d1:9c:41:07:09:2f:7e:08:49:
         20:8b:65:ce:e9:aa:ed:2d:01:de:13:28:1a:e3:b0:d0:f7:06:
         83:95:4b:ff:69:26:23:85:7e:b4:79:f5:01:53:9f:0e:da:3b:
         7e:ad:29:b1:0e:e3:0d:71:6b:b3:b4:1d:ee:fd:cd:2d:51:b1:
         47:fd:9e:5a:00:22:fa:1a:53:73:dd:0b:73:7b:41:dc:39:10:
         90:8c:66:b8:94:13:e7:49:27:7d:60:80:2f:7e:d3:07:8c:60:
         e3:52:ce:4a:09:9b:49:fa:fe:31:86:d2:8a:82:b7:7f:b3:19:
         a0:ba:72:35:a5:8b:05:a9:40:24:27:d3:76:9b:ff:b6:26:aa:
         33:df:49:61:59:18:83:b8:92:83:07:2f:1b:14:f2:03:86:9a:
         ed:82:0e:c1:f4:c8:3c:4d:09:81:04:6b:8a:72:cc:ac:2d:65:
         1b:bb:fe:63:ad:2b:3d:0c:6c:b7:cc:50:52:ab:e4:87:e6:11:
         9d:31:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:47:52 2025 by rpki-client