Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/813a8511-786b-41bd-8279-baa132dd9c72/82c8fd15-b522-3ecc-8931-0381dce77581.roa
File:                     82c8fd15-b522-3ecc-8931-0381dce77581.roa (raw, json)
Hash identifier:          atnjFITmrF/TF8EZ7Iyb3eMUoJ2tOcXhCOJABjRqJZk=
Subject key identifier:   D2:0D:0B:D9:DE:1F:7D:2C:BB:80:67:79:B4:FC:A3:01:08:E1:B0:6D
Certificate issuer:       /CN=813a8511-786b-41bd-8279-baa132dd9c72
Certificate serial:       010D0C9F432858493ED3CDED8CC82D33152A4800
Authority key identifier: 42:20:2E:3A:00:A7:24:50:78:26:D7:F3:8C:EC:89:DE:C6:78:82:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/813a8511-786b-41bd-8279-baa132dd9c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/813a8511-786b-41bd-8279-baa132dd9c72/82c8fd15-b522-3ecc-8931-0381dce77581.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6939
IP address blocks:        23.146.80.0/24 maxlen: 24
                          2602:fd9b::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/813a8511-786b-41bd-8279-baa132dd9c72/813a8511-786b-41bd-8279-baa132dd9c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/813a8511-786b-41bd-8279-baa132dd9c72/813a8511-786b-41bd-8279-baa132dd9c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/813a8511-786b-41bd-8279-baa132dd9c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:cd:ed:8c:c8:2d:33:15:2a:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813a8511-786b-41bd-8279-baa132dd9c72
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=921e3610-92cc-41dd-a3e7-dfba02a91392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:c9:fc:86:0c:c0:f6:98:4a:a3:c0:e8:34:
                    3f:ca:38:1c:e3:3d:d9:e6:c0:0e:6b:b1:b2:40:a8:
                    33:07:a9:91:cd:9b:36:a5:5a:98:45:73:4d:e7:63:
                    67:fe:25:77:a9:17:37:c3:29:b0:a0:5b:64:be:db:
                    44:75:2f:0b:5c:3d:fe:d9:75:34:fe:04:50:f6:fa:
                    c7:68:28:98:69:ae:e3:c5:00:8c:84:a5:3e:a4:d7:
                    d2:ad:e4:cb:51:19:e8:ef:14:16:82:ec:c9:59:a1:
                    95:8e:7a:bd:6e:97:92:6a:b5:52:47:61:b3:4e:3a:
                    9a:26:16:2a:81:92:85:50:ac:8d:a9:9f:7c:b8:f0:
                    ff:96:9f:dc:a4:d6:e6:52:a4:f0:58:ae:b2:44:d6:
                    35:ba:8d:92:90:c3:73:6f:3a:96:37:d4:d3:8d:fc:
                    c1:96:50:53:7b:36:04:c9:a3:88:4c:e9:30:72:38:
                    ba:d7:ed:49:aa:26:b7:77:14:a4:14:10:09:d2:42:
                    6d:b7:b3:c1:d6:bb:4c:68:bb:81:e6:03:68:e6:79:
                    f4:bc:76:79:9a:14:c2:f1:14:90:0d:14:8f:8b:d2:
                    50:b7:c1:4e:9e:34:90:e3:0d:94:12:ea:94:4d:6a:
                    81:e7:f4:96:ce:4d:26:9a:3d:4d:96:90:42:c3:92:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0D:0B:D9:DE:1F:7D:2C:BB:80:67:79:B4:FC:A3:01:08:E1:B0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/813a8511-786b-41bd-8279-baa132dd9c72/82c8fd15-b522-3ecc-8931-0381dce77581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/813a8511-786b-41bd-8279-baa132dd9c72/813a8511-786b-41bd-8279-baa132dd9c72.crl

            X509v3 Authority Key Identifier:
                keyid:42:20:2E:3A:00:A7:24:50:78:26:D7:F3:8C:EC:89:DE:C6:78:82:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/813a8511-786b-41bd-8279-baa132dd9c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.80.0/24
                IPv6:
                  2602:fd9b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:39:37:09:c7:c1:38:83:68:b2:38:ec:33:9c:28:3f:00:60:
         75:1f:2e:0a:36:30:b9:0a:36:60:6b:8c:53:fa:b4:35:be:e8:
         36:46:89:f8:6a:c0:cb:be:ba:9c:d9:29:35:54:a4:60:fd:d0:
         c5:f4:c5:dd:1b:07:4f:e2:96:dd:b4:11:f7:d1:20:b2:8d:b7:
         8a:03:03:a0:e1:2f:ba:4d:af:c7:7a:81:9e:cc:0e:89:62:b3:
         8b:51:93:e6:3a:17:4c:68:31:b7:39:a6:35:78:ad:53:c9:6e:
         64:40:4b:82:60:b9:b0:53:36:94:52:bf:11:97:e7:71:55:ca:
         4a:a7:a7:9a:a1:5d:a7:7d:7b:6e:5d:86:d5:cd:07:da:43:44:
         4b:03:9b:1b:07:f1:6c:66:11:9a:a0:96:04:2c:dd:fd:ae:17:
         31:1d:a4:64:5b:99:05:94:7d:47:74:6b:fd:a9:08:02:7f:f5:
         1f:cc:0c:b3:73:71:2c:8b:5f:03:92:75:35:76:8a:01:03:39:
         55:3e:e2:89:90:4d:fb:a6:6e:ab:bf:9f:00:07:19:8a:03:15:
         58:4e:d3:6b:ca:98:f5:a9:4a:81:53:52:5b:0c:71:0e:b0:8b:
         a4:56:b3:76:ca:4d:ff:15:04:1c:7f:be:f4:42:82:b3:83:cb:
         64:df:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:38 2025 by rpki-client