Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa
File:                     8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa (raw, json)
Hash identifier:          u3UqRitZn6hewnuJj87vygE7ec3FwjqvsGHmBXsGbAE=
Subject key identifier:   AD:D3:30:4E:AE:EE:FE:6C:D7:AA:68:F4:25:AD:7C:38:53:E6:73:99
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A66C08E684DA249DE5E4A7C60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        23.201.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:8e:68:4d:a2:49:de:5e:4a:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=9cc5532f-75ba-4d99-8bdd-ec44fe851a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:69:aa:85:95:ce:a8:18:20:f0:7c:88:1f:cc:
                    84:5f:53:6d:b6:b4:95:b7:c3:4d:f8:0d:7c:f6:c6:
                    6b:3f:47:b6:3c:9b:d8:ba:2d:c5:a7:76:e3:f8:02:
                    bb:8c:0d:c2:32:e1:57:73:f3:ee:06:58:34:64:23:
                    a8:da:cd:ca:2a:37:f2:54:4d:6f:e7:cb:94:7e:1c:
                    50:32:f0:fd:e8:49:13:b2:ca:1d:1b:43:89:2c:b8:
                    6c:cc:23:da:60:69:de:5b:04:8a:36:8f:62:53:a9:
                    f3:aa:a0:e7:6f:fc:19:42:9d:69:dd:b9:f5:20:c7:
                    59:0d:79:ce:3e:5b:0c:65:6e:b0:38:48:d6:64:9c:
                    ca:82:6d:2c:05:3d:f5:ed:d2:2d:bb:c4:22:d8:f6:
                    a9:41:df:cf:3e:ac:7d:34:90:70:1a:cc:32:ff:8d:
                    ef:12:d0:f1:4a:7b:2c:64:30:e6:93:d7:34:7c:02:
                    fe:28:1f:66:81:8a:1a:2c:39:9b:b2:90:0f:87:13:
                    a7:f5:31:85:33:76:38:b9:27:86:b8:7a:3b:24:82:
                    32:21:01:86:47:9d:89:7d:6f:93:0d:8c:e6:d9:89:
                    ff:35:9d:e3:47:0c:af:22:29:f2:b2:4c:ad:43:79:
                    a0:61:bc:7b:9b:bc:fc:43:23:79:c7:e1:6e:c2:b1:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D3:30:4E:AE:EE:FE:6C:D7:AA:68:F4:25:AD:7C:38:53:E6:73:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:82:86:c3:8a:05:bf:99:37:fc:5d:0d:6e:60:b1:ff:af:
         80:cc:3e:19:bf:cc:18:cd:c8:6d:49:69:2e:c1:23:11:32:8c:
         07:16:2e:75:c2:ae:a5:2e:f8:d8:b5:32:f2:85:69:da:7b:0f:
         e4:58:b2:28:07:2b:7b:b7:19:40:58:83:93:b7:d3:56:34:1f:
         29:0f:7f:64:f4:5a:e8:cb:0a:11:f6:64:4a:d9:14:30:9b:65:
         9c:5e:47:3b:48:9c:54:83:12:de:e5:ab:fd:cd:7a:13:1e:2b:
         c6:c0:c8:c6:63:7c:dc:69:bb:0c:3e:74:ec:92:d7:19:94:84:
         24:1f:65:76:d6:9b:e3:c8:cf:43:72:f7:48:d7:f5:47:5f:a7:
         15:cd:45:b2:e5:8a:d3:c1:2f:31:b3:ff:bc:07:7d:88:e7:7d:
         d8:b3:89:82:ea:ea:13:42:47:3b:64:ff:2e:2a:15:d5:29:2f:
         d3:a1:54:c2:ef:f2:f2:4c:77:4b:75:a4:6f:f2:46:a5:25:12:
         2f:9f:48:be:3c:7f:6f:d2:6e:73:1e:50:f9:ec:69:3f:25:39:
         89:2d:42:88:b8:48:3b:45:e8:6e:0a:ca:e3:7c:32:be:cc:d1:
         4a:4b:ec:48:b8:d2:03:00:cb:40:3e:2e:1d:fc:f3:a8:4e:dd:
         5d:0b:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:32:40 2025 by rpki-client