Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e95faa2f-614d-3831-8686-dd5b5e532738.roa
File:                     e95faa2f-614d-3831-8686-dd5b5e532738.roa (raw, json)
Hash identifier:          fDHs0NvfhAuAAZ8jc6SStVaig/6pGS0Dd27MnSNEGYI=
Subject key identifier:   99:81:89:9A:F4:42:95:B5:C6:94:F2:D6:C3:47:5D:E3:B1:27:1B:2E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7A4B595926679A20FE284380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e95faa2f-614d-3831-8686-dd5b5e532738.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     16625
IP address blocks:        23.210.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:59:59:26:67:9a:20:fe:28:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=b48422ea-57c2-43f7-84cc-84771c2fef45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:35:5a:fd:18:53:92:06:b2:7e:b5:d2:e2:
                    d0:be:1c:b1:01:7b:5a:6d:39:c1:f1:b6:a6:54:ad:
                    e9:03:91:c8:7f:f0:08:25:19:4e:94:e5:10:e7:85:
                    fc:34:f4:c3:9f:01:fd:b2:07:92:39:50:62:0a:7b:
                    3d:40:a0:0c:20:75:64:9b:f6:ea:5b:80:fd:1b:13:
                    47:f8:7e:6e:ff:c4:87:7f:1b:0d:40:36:1f:b2:0c:
                    76:be:e1:68:0d:8b:1a:c4:ec:0a:5d:78:5e:8e:35:
                    69:63:d2:36:3c:8f:cf:25:42:ca:34:1c:f0:95:01:
                    3e:df:fc:b4:61:ad:1a:03:bc:cf:c9:53:ea:f4:48:
                    33:0b:e8:c3:5f:7d:7d:c4:de:ca:ba:18:f8:fd:8f:
                    06:a8:02:fc:ec:25:53:d2:c2:61:a8:1b:f6:b2:cf:
                    1a:fc:a7:7c:12:2f:6e:9f:f1:62:b8:07:09:14:1e:
                    29:fc:29:e6:8a:9d:09:d9:52:1d:27:ea:3d:ca:9d:
                    7c:a2:fc:7f:0d:81:b0:dc:b3:9e:a4:3d:dc:f2:dd:
                    e3:00:73:68:fc:0d:67:40:31:e9:35:46:68:0e:43:
                    68:d2:05:1b:f0:a4:24:26:74:54:b3:9e:17:bd:30:
                    dc:a9:5e:4d:58:c3:44:b9:83:f3:76:4a:fa:2d:c4:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:81:89:9A:F4:42:95:B5:C6:94:F2:D6:C3:47:5D:E3:B1:27:1B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e95faa2f-614d-3831-8686-dd5b5e532738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d0:51:75:d9:ea:79:7e:5e:1c:17:55:94:dd:a9:f7:94:10:
         e1:b6:93:bf:54:f2:15:f7:95:ec:b2:c4:92:69:5d:79:52:c8:
         14:ad:f7:4c:aa:38:dc:06:1c:84:fd:ea:85:89:96:e1:2d:e9:
         f9:94:58:e9:73:7b:c5:24:a7:43:b5:5d:4d:2d:16:ab:4e:92:
         83:29:2c:d7:53:83:4d:88:86:3f:62:dc:43:fe:1b:90:64:bd:
         a3:a9:99:72:8e:c4:26:cf:fb:2d:e8:ce:68:99:ff:09:51:24:
         19:be:ff:f6:0f:01:78:6e:8f:c2:bd:04:5e:90:12:0a:29:bb:
         1e:f3:ce:c5:5d:a1:01:1d:e1:ed:17:f9:07:8e:69:57:71:5c:
         4e:66:67:27:46:88:a5:50:1c:65:84:d5:a0:3d:c5:a7:e7:2e:
         40:fd:51:e0:f8:60:f4:90:e8:ec:9b:a6:67:93:8d:eb:72:39:
         dd:81:8b:2b:42:ed:e3:fb:29:8e:b4:a3:7d:c3:b7:a9:30:2d:
         04:86:5f:94:43:48:90:10:7d:3c:2a:09:e4:62:0a:13:b2:71:
         31:6c:3c:ea:ec:33:cc:6e:1f:69:03:5e:0a:6c:d5:aa:6b:33:
         9d:ac:01:42:e2:71:e8:69:cb:52:59:42:32:a3:bd:17:65:53:
         ce:16:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:15:58 2025 by rpki-client