Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dbddbd3-d9c7-3db6-8adc-c4b2caa392b4.roa
File:                     6dbddbd3-d9c7-3db6-8adc-c4b2caa392b4.roa (raw, json)
Hash identifier:          peNs2WNwTP2N1URPTF3imn4gpbp9PeTE9WPnScOLf4k=
Subject key identifier:   C5:B5:DB:A5:40:B1:C7:19:43:FF:23:C2:A8:B9:BE:47:EB:BD:07:C1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A66C08FD522521A2C62DEA1C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dbddbd3-d9c7-3db6-8adc-c4b2caa392b4.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     4788
IP address blocks:        23.201.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:8f:d5:22:52:1a:2c:62:de:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=e8cd6329-ad3b-4584-ab57-d81b5f4d177e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:a6:7a:48:c0:2b:c9:f5:e9:8b:0b:3b:65:
                    5a:c4:21:08:34:86:14:32:78:90:e0:bc:fc:ec:51:
                    2e:fc:ba:67:35:af:81:6c:6f:dc:bd:52:88:88:36:
                    f7:98:8b:e4:5b:7e:9d:09:a4:11:ff:6e:01:db:f5:
                    38:ac:55:f0:61:fa:57:b3:ff:44:19:50:53:cb:4f:
                    18:48:bb:d3:4a:82:7d:f9:45:40:a5:af:a9:ef:36:
                    b0:7c:a8:fa:8e:6d:1e:d8:10:41:f6:1e:c0:6a:fd:
                    ee:e9:82:ad:db:6a:ca:a9:d7:80:5b:40:89:85:1c:
                    a7:d2:d8:5c:83:0f:28:47:6e:cc:99:e1:0c:3c:d9:
                    a7:04:c2:e9:25:74:b1:d3:2b:88:ca:05:bd:2e:b4:
                    55:0e:7d:d5:e5:f8:b8:03:3c:c7:1c:74:32:4f:60:
                    73:30:53:a7:e2:5a:39:40:ea:6d:09:61:6f:58:d0:
                    ce:39:29:58:bd:a1:06:28:40:d2:27:4d:51:ce:69:
                    3f:c5:cc:42:56:8d:6b:bf:0e:ba:15:ad:0c:37:8e:
                    3a:d3:ff:f9:60:83:b6:91:52:ac:44:52:88:95:13:
                    42:fa:f6:39:b4:e3:e6:bf:5c:4c:0f:f4:65:a1:f9:
                    cd:8c:01:0a:c4:6e:4f:8d:c0:c6:eb:8f:74:e5:7c:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B5:DB:A5:40:B1:C7:19:43:FF:23:C2:A8:B9:BE:47:EB:BD:07:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dbddbd3-d9c7-3db6-8adc-c4b2caa392b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:02:74:2f:cd:99:58:ec:54:40:69:0a:cb:b2:b3:34:a8:24:
         6b:90:fb:52:49:9f:dc:01:b9:ec:42:d1:7f:1c:8d:fa:83:b9:
         6a:36:1f:21:c0:7e:9c:ca:f7:eb:28:d5:20:23:b0:ca:4d:a6:
         03:2e:0a:11:61:a2:01:a5:d7:80:f4:39:06:09:ef:fb:0f:4a:
         df:93:ff:ee:33:12:88:5f:94:87:e0:61:cc:09:32:5a:44:ad:
         04:2d:5b:2c:d3:bd:3f:24:c7:d1:24:04:ce:fc:00:12:64:af:
         79:96:6d:16:b5:ea:cb:47:2f:dd:bc:5e:d2:81:3e:6e:90:77:
         b3:6d:84:1e:10:2b:49:2d:5a:07:d6:b2:5e:b9:81:f7:4f:cd:
         89:31:5d:cb:85:73:cb:95:33:d3:15:31:12:b7:4f:15:ba:e5:
         24:da:92:1b:ec:0e:29:88:3d:ff:c9:df:80:0f:57:b0:fa:26:
         db:74:25:c2:43:af:3a:08:0f:19:84:a2:2d:2f:8a:df:dd:2c:
         40:a0:ea:1f:eb:6c:8c:91:36:81:c2:8b:11:f7:7f:a6:c9:29:
         75:41:1a:6f:aa:98:47:4a:3b:b8:d5:e2:7c:38:01:62:18:3e:
         a2:ba:96:21:7b:19:e2:c8:fe:32:f0:23:ff:9e:93:b3:e7:37:
         c6:f0:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:31:52 2025 by rpki-client