Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa
File:                     f3af561f-6e70-31c4-86f8-a11b4790170b.roa (raw, json)
Hash identifier:          jXgdtkjw3RY52Lg6NyO800ixiZNyp3i4PG9Yp3CwOjE=
Subject key identifier:   35:0F:D2:E2:02:3B:36:1D:86:CF:91:CD:56:3C:9E:2A:A8:FD:2D:07
Certificate issuer:       /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690
Certificate serial:       010D0C9F4328584A6825F9A616FEC83925203B00
Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     46307
IP address blocks:        23.144.248.0/24 maxlen: 24
                          2602:fb3c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f9:a6:16:fe:c8:39:25:20:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=463e182c-f005-4838-8921-432210cc363a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:54:00:6f:bd:5f:91:e9:24:4f:05:51:6d:
                    71:5d:f9:7a:c2:cd:39:7e:b5:46:41:a9:d0:5a:71:
                    ae:38:96:a7:9e:8a:b1:92:a9:ae:73:46:d4:3b:8a:
                    90:9a:5c:b8:10:89:7a:5e:9d:cd:14:16:72:76:45:
                    90:3b:42:cf:0c:16:e8:b0:a3:8e:87:fa:b2:7f:64:
                    16:d7:7b:f5:b2:f6:fc:fa:a1:26:97:8e:8a:18:b2:
                    a2:d5:d3:0c:81:50:a3:2d:66:8d:f0:ee:ac:1d:4e:
                    69:30:f7:76:e8:81:60:dd:2e:0f:cb:3f:8f:8d:22:
                    05:c2:93:cd:90:ba:92:1b:d4:6c:14:c5:b9:7a:18:
                    d6:bf:82:b5:2f:83:10:3a:f6:e9:d1:1c:f9:ee:c0:
                    25:65:f9:27:bf:28:8c:cc:b6:31:b3:49:cc:71:a0:
                    5d:6b:3a:3d:6e:d4:76:42:f1:b4:63:73:4c:1f:f9:
                    61:7b:87:8c:fd:b1:9c:54:9a:99:2f:5c:35:07:a3:
                    38:9f:9d:f2:18:50:f0:22:5d:9a:eb:a1:3d:f1:10:
                    5d:fb:45:9b:c5:91:6d:96:4a:fc:29:3f:53:52:97:
                    fd:8e:4a:06:df:af:d9:38:6e:91:6d:09:1b:a1:de:
                    6c:a5:22:21:ab:e4:3c:36:d0:97:1a:0b:b5:d8:54:
                    11:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0F:D2:E2:02:3B:36:1D:86:CF:91:CD:56:3C:9E:2A:A8:FD:2D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl

            X509v3 Authority Key Identifier:
                keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.248.0/24
                IPv6:
                  2602:fb3c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:91:f3:db:8c:58:29:6f:1b:c2:e5:a3:a4:05:70:99:ea:33:
         7e:64:34:73:24:4a:b0:c0:94:47:bc:b0:aa:5a:22:8c:98:50:
         7e:b8:19:bb:6f:c5:4d:48:8f:01:4c:54:98:67:64:44:1f:2e:
         e4:dc:2f:f2:54:26:cd:8f:2b:c8:bb:59:02:65:9c:3a:71:0d:
         8a:d1:50:73:4b:78:3d:ea:5d:e7:eb:25:1b:84:89:cb:88:7b:
         60:9e:94:bf:d7:4c:e3:e1:75:d1:d9:fa:ba:5d:29:52:52:26:
         75:b1:0c:e4:30:72:10:07:e2:ca:46:6f:3e:93:a1:2f:54:5d:
         58:7a:88:d5:82:a7:88:c4:f1:40:ea:f7:72:a2:a2:21:13:3e:
         8d:91:20:d1:6e:d9:b9:97:6f:fc:93:7f:c3:d3:36:c8:af:89:
         eb:8a:29:ae:9f:20:6b:a0:7f:12:36:5a:8d:b8:02:dd:43:9e:
         6a:ea:5c:23:d9:e8:d4:5d:69:25:ac:40:56:b8:ca:fb:6f:6d:
         f8:2e:2b:b7:f9:8e:c6:47:b3:07:97:72:42:79:bf:7d:fc:dd:
         3c:89:eb:d4:f4:47:b1:b3:ed:e2:c3:af:ad:62:44:0c:fa:5d:
         44:25:bd:92:b7:6b:fc:aa:93:b2:76:61:3c:fa:4d:5b:ec:6b:
         e9:76:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:10:41 2025 by rpki-client