Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83e59f06-db01-33ff-880f-1e9b8260094e.roa
File:                     83e59f06-db01-33ff-880f-1e9b8260094e.roa (raw, json)
Hash identifier:          j7oPMTMj71oKkOGyrFi4PbbWGuHg3WYB/4PyvDPCqU8=
Subject key identifier:   74:05:EC:82:EE:38:95:4B:39:67:21:85:71:E8:5E:3A:91:93:B0:63
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A77809DC58DAEC2541AEDF200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83e59f06-db01-33ff-880f-1e9b8260094e.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.204.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:9d:c5:8d:ae:c2:54:1a:ed:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=d2e3d069-5932-4039-a8db-d9c1ccd00480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:4a:bd:f1:39:70:42:a9:5b:f8:17:2b:c9:
                    f1:a0:f2:b9:3c:6d:8c:ff:0c:c7:86:3b:d5:6f:81:
                    80:c5:a5:b7:f8:cc:1d:a9:5f:02:55:f0:0c:a4:3c:
                    c4:b0:a2:2f:ca:df:54:d9:b7:38:d0:04:fa:9a:01:
                    ed:14:ae:e4:eb:1c:d6:67:c0:e2:3e:14:1a:20:68:
                    6c:1e:dd:61:ea:d6:df:5c:06:be:68:6c:b5:56:79:
                    2f:29:6f:82:d3:eb:bc:a6:23:bd:6c:07:33:ae:68:
                    ec:6e:f9:64:3a:ba:94:57:38:b8:7a:f9:29:50:68:
                    fa:36:29:b5:40:dd:37:9e:1e:04:a9:f6:23:37:b6:
                    ce:00:88:65:69:ad:a9:9c:ff:e6:16:e8:17:5d:3b:
                    72:5f:f8:f8:64:77:4a:5a:0a:e8:63:00:10:d4:41:
                    85:de:61:28:c2:a7:a0:08:fa:81:5e:d2:8a:ff:42:
                    ee:98:66:b1:e0:73:6e:e7:cf:d4:2c:7f:02:e0:39:
                    7f:24:20:a6:60:32:16:fd:07:cf:19:b3:c5:d5:5b:
                    db:ff:fe:70:26:aa:fb:b2:63:3c:c7:3c:d0:2c:18:
                    01:5e:82:14:9c:00:96:f3:13:9c:74:60:8f:b5:5f:
                    5d:b5:19:b0:9b:80:50:c3:3c:07:de:39:0d:fc:6b:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:05:EC:82:EE:38:95:4B:39:67:21:85:71:E8:5E:3A:91:93:B0:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83e59f06-db01-33ff-880f-1e9b8260094e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.204.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:41:a8:b8:cc:7c:fe:1a:1a:c1:c2:c1:0c:02:f7:20:87:fa:
         7d:d0:8f:c6:38:52:f7:cf:a8:1e:c8:9b:fc:35:1c:cf:aa:d8:
         d0:22:8f:1f:d7:ec:11:46:0d:69:cd:ab:7b:ee:08:f2:e3:0b:
         89:2d:b4:ea:b8:51:18:4a:9f:ea:9d:a8:f9:df:b8:b8:68:c8:
         9e:df:57:8e:b6:5d:ac:1e:14:24:4a:ed:a2:94:bc:af:0d:37:
         bc:6d:b8:30:9b:15:04:f0:36:44:8f:b3:bc:47:65:dd:cd:54:
         07:44:4e:4e:7b:3a:6f:16:6b:11:a2:b3:1e:64:23:d5:c4:80:
         9a:1a:a7:02:16:26:c0:3f:fe:8a:5f:2f:4d:b8:4e:d3:99:58:
         63:49:fd:0a:0d:46:76:41:f0:f8:26:ca:1a:f2:7a:52:32:8d:
         85:9f:2b:66:07:0f:3e:09:f8:c3:42:4b:33:c3:f8:b9:1b:29:
         5b:c4:64:55:d6:d1:a0:16:5a:d7:e9:8a:85:72:fd:62:8e:a4:
         0d:f3:4e:90:4e:b0:99:ff:fe:97:a4:9b:88:87:e4:ed:c3:83:
         81:70:9d:52:7c:06:d7:09:2e:45:02:b7:7a:c8:10:99:10:c0:
         e7:84:45:9e:e3:b7:d5:0a:2f:85:3d:ad:1a:53:e8:cd:d4:72:
         1c:f0:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:31:16 2025 by rpki-client