Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa
File:                     8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa (raw, json)
Hash identifier:          ZagmposLXzPpLQHXm+qNPoa7PpmLhkT8qHLi7rbJTvc=
Subject key identifier:   E9:BF:2E:A4:82:F0:33:0D:11:6E:CE:88:C3:E4:95:8C:D9:BF:2F:25
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7A4B5AC5F39BEE1109F162A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.211.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:5a:c5:f3:9b:ee:11:09:f1:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=ec24e67f-a139-4cd6-b940-869d3f1ea922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:c6:45:12:29:3f:95:f6:f1:66:c5:75:37:
                    bc:98:1d:91:35:63:da:c0:ac:0a:b5:20:52:1d:8b:
                    0c:4d:00:3f:2a:bb:d9:a6:fb:2e:2f:d0:dc:e1:cd:
                    0f:57:2e:fd:9e:9a:99:c5:f3:1e:6d:33:22:c9:40:
                    19:c0:25:41:45:c1:c9:57:7d:15:13:02:46:62:3d:
                    c5:f7:09:be:9d:fa:4f:1c:c5:55:6f:0a:7c:e3:ea:
                    6c:56:46:21:d8:10:20:df:e7:bf:a4:93:5f:f7:e2:
                    ff:91:a8:63:b8:8b:67:11:ad:30:55:fe:c6:13:b3:
                    4c:7e:f9:f7:b8:b8:3f:5d:9f:a2:93:32:2d:fe:40:
                    b1:14:19:17:29:04:24:80:d9:c9:4d:8d:47:34:64:
                    2f:a8:74:61:8b:f4:da:d4:9a:89:df:e7:ce:c5:09:
                    90:04:44:bb:04:ee:10:d6:f2:b5:43:fa:88:b7:e6:
                    26:80:1a:92:16:96:22:61:f2:74:84:39:9e:3a:b2:
                    31:61:46:14:4c:56:e8:a8:a1:28:c6:06:14:0d:5a:
                    1b:7f:c6:db:17:cf:e1:c6:f2:74:ba:a8:0e:fb:28:
                    2d:71:65:71:4d:50:3d:db:66:59:8b:1e:fa:07:f5:
                    60:cb:32:2a:b2:c3:f3:85:95:ef:56:a6:53:35:6d:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BF:2E:A4:82:F0:33:0D:11:6E:CE:88:C3:E4:95:8C:D9:BF:2F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:77:ca:b9:fc:6e:cc:ed:dc:ed:86:97:6f:91:a2:df:05:6a:
         06:62:3e:a7:9e:32:b4:d1:b6:63:c1:51:f9:60:60:80:98:05:
         eb:76:2b:91:20:62:c3:d9:57:fa:78:49:bc:85:f5:23:e3:b9:
         c0:2a:42:09:60:61:9a:20:14:bb:25:52:a1:83:a4:34:3d:92:
         6d:8c:c6:90:1d:e2:a7:99:44:e1:da:d9:3d:93:44:5d:86:02:
         15:2c:6a:1d:30:23:61:80:bd:3c:3a:49:6e:71:ce:44:2f:76:
         8d:cc:7a:f8:98:6e:ea:c7:d9:fc:fe:4c:16:57:e6:5f:5c:5f:
         f2:fe:80:b5:03:e0:5a:98:4e:45:ce:0a:6a:90:15:79:0e:05:
         99:7c:ff:19:67:e9:0a:dc:99:ec:20:f1:4f:a0:00:fd:db:ff:
         c6:62:bc:37:e2:a4:72:af:33:76:cb:5f:33:ba:86:63:b8:e9:
         55:53:8e:84:05:0f:07:e0:80:9f:6f:36:bc:ff:77:31:c1:17:
         4f:eb:56:de:a0:8e:db:ee:d7:64:3a:e1:40:a5:17:d0:2e:2d:
         ac:da:8a:f9:05:15:25:9a:81:61:1b:b1:68:32:e0:30:48:0e:
         8a:c8:2d:12:2e:35:40:af:30:5a:6f:04:8b:30:40:94:4c:68:
         04:74:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:54:53 2025 by rpki-client