Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84ede65c-4335-3c12-87ae-b64d3bde44f6.roa
File:                     84ede65c-4335-3c12-87ae-b64d3bde44f6.roa (raw, json)
Hash identifier:          9GP0RJBkfPg5s2M7t7f2R/1fFlGc8Q8841i+vaYHVwo=
Subject key identifier:   F4:9A:8D:C0:37:69:EE:C4:21:A9:91:E5:C0:2F:ED:2C:66:8E:2A:9D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A94D0DEEA31274410E051D7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84ede65c-4335-3c12-87ae-b64d3bde44f6.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.219.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:de:ea:31:27:44:10:e0:51:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=35222508-a4ed-49da-a995-74d390c8d891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:55:72:22:cc:1f:8e:68:ab:37:d2:08:0b:
                    82:04:67:6b:fe:86:75:29:74:1a:9e:e1:09:db:82:
                    84:af:f9:68:16:25:2f:f1:ae:c0:9b:0d:99:8c:c4:
                    65:ea:a5:69:df:d5:b4:73:76:93:c4:b5:81:8a:2c:
                    6b:b2:f8:c0:c9:2b:25:a2:1b:26:d7:33:b3:f3:69:
                    39:05:6f:fe:d0:1c:c7:10:2e:38:2a:c2:b3:0a:b1:
                    16:c6:c4:07:a4:bc:89:e4:1f:c8:63:4b:83:5f:72:
                    2a:67:e2:fd:32:2e:11:d2:b9:ab:39:af:a0:b6:2a:
                    d4:72:42:8a:e4:16:59:7f:f9:d6:3d:26:b7:00:b5:
                    cf:1d:b3:f0:80:1e:a8:10:9a:e5:42:62:cb:a1:da:
                    de:c2:93:0a:7d:12:77:93:86:3e:69:1c:ba:5c:ec:
                    64:5a:6d:d3:63:5c:8d:53:9f:23:be:0e:ac:cb:99:
                    00:eb:b0:b4:1f:5a:e2:e8:5a:92:65:9b:86:55:5a:
                    fa:d4:35:d5:9c:73:59:28:77:64:57:bc:ef:99:5d:
                    8d:8e:7e:5e:26:b5:be:cf:fe:6b:3a:1a:52:bd:4d:
                    fc:90:c2:a4:b8:21:87:78:90:af:d9:34:10:42:7f:
                    44:3b:fa:39:bf:50:37:06:d8:0f:df:1e:0c:61:d9:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9A:8D:C0:37:69:EE:C4:21:A9:91:E5:C0:2F:ED:2C:66:8E:2A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84ede65c-4335-3c12-87ae-b64d3bde44f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1b:53:4c:fa:c8:a6:79:6e:3e:87:ca:64:37:fb:1b:11:2a:
         45:71:38:d9:35:c8:e9:71:fd:93:03:5b:48:65:eb:eb:33:f1:
         0d:d5:7a:68:95:50:77:0b:11:d8:3a:d4:58:15:7a:90:59:3f:
         ad:73:14:a1:84:06:28:df:64:66:72:8f:39:ce:e5:0f:4d:e5:
         2b:c1:7e:51:26:4c:c2:f5:8e:54:3a:3a:4a:6a:3a:de:ac:7a:
         22:6d:17:3c:47:53:4c:57:cb:65:14:11:22:d5:70:d3:be:95:
         d2:d1:bc:a4:f9:b2:33:dd:b3:74:94:4b:51:e7:50:76:01:96:
         4b:8e:72:67:df:35:97:f1:f8:37:8b:d0:ae:dd:01:f6:d2:02:
         c3:44:3a:0c:a1:f2:fa:e9:1e:c1:34:94:ca:79:e2:d3:20:72:
         27:88:89:6b:4f:90:52:ec:8b:a4:ec:c8:f3:4d:ea:84:0d:62:
         c4:7c:0a:bc:4d:37:27:0d:4f:7a:f3:9c:dc:a6:4d:44:0a:be:
         26:a9:b3:ce:0e:f1:32:16:3e:5e:c6:4f:54:13:c9:47:75:6f:
         3c:8e:0a:8e:b8:3f:a4:09:75:04:ac:2f:db:9f:5c:96:64:4c:
         3e:04:f0:b1:c2:bc:3a:37:47:c8:f0:ea:fa:d3:ce:74:0b:10:
         a3:a8:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:25:21 2025 by rpki-client