Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc686407-8e92-3872-bc87-8ed7e6c32673.roa
File:                     fc686407-8e92-3872-bc87-8ed7e6c32673.roa (raw, json)
Hash identifier:          9sTaXMOGl9BUtDnCyPhm7xk4G9GuKN3gLLI686Y0GbA=
Subject key identifier:   99:F7:E0:73:AB:55:CB:0A:D3:1C:57:E4:46:AC:A6:88:2B:04:97:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431D55F89FB0B0DF9D68E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc686407-8e92-3872-bc87-8ed7e6c32673.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        76.23.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:d5:5f:89:fb:0b:0d:f9:d6:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=619a7a20-9b28-496e-9db0-c5ece1a20668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:ef:46:0c:b7:1d:8a:8a:a4:d0:b5:b2:62:
                    48:8c:5b:70:cc:d0:67:66:82:b0:04:41:75:c7:0b:
                    4f:c1:0a:a9:95:43:71:c3:bc:fe:07:81:b1:a6:92:
                    58:99:41:d4:b7:86:0b:da:74:e1:a3:b7:33:c3:f1:
                    95:41:2e:10:a4:db:16:01:8e:cf:ee:fa:aa:fb:d3:
                    07:46:eb:cc:81:69:53:85:3c:80:61:2a:8b:c2:77:
                    79:71:14:97:c0:7e:0e:89:57:af:9a:77:95:f6:5c:
                    9e:eb:37:99:d1:70:77:c5:30:6f:a1:1a:92:c2:f4:
                    22:7b:72:d9:2e:e1:e6:0b:8f:8d:7e:49:ec:ce:36:
                    ce:d4:7d:f9:97:51:e2:81:7f:55:ad:35:b0:8e:a8:
                    f4:e7:e5:18:ee:e3:b0:6d:ef:89:33:9a:d0:3f:bb:
                    50:95:73:c0:ae:12:14:e2:13:4c:2d:34:59:c7:dc:
                    70:1a:01:be:ae:d0:84:80:8b:d4:a0:fb:f2:33:ca:
                    3d:ee:41:6b:81:30:94:95:9b:e9:cf:be:89:12:f6:
                    9e:5a:a7:7e:df:d3:02:86:21:d2:d4:d8:f7:62:54:
                    57:b2:d3:d8:3c:9a:9c:36:8b:1c:c4:5f:17:1d:ca:
                    d9:f1:17:40:aa:f2:35:16:ca:7c:08:de:a5:29:8f:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F7:E0:73:AB:55:CB:0A:D3:1C:57:E4:46:AC:A6:88:2B:04:97:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc686407-8e92-3872-bc87-8ed7e6c32673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.23.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:30:77:98:ba:5a:3b:92:65:c7:c5:ae:b5:0c:b3:38:89:62:
         4f:41:15:d2:10:5f:5a:8a:74:d5:74:6a:26:87:87:06:14:e7:
         8f:be:8c:42:e5:0f:b4:d0:bd:2c:62:93:38:12:3c:28:24:9d:
         db:76:8f:2e:88:6a:57:9b:8b:d7:e8:15:81:ef:f9:31:9f:ce:
         18:80:1e:a1:e8:48:10:68:0e:82:f6:29:46:89:5d:0f:37:df:
         e9:ae:c7:8e:e3:d1:e0:14:43:7e:81:8a:ff:ff:68:4a:58:24:
         3b:99:fb:b4:6c:d6:d8:7b:19:3f:12:4c:5f:b7:ba:75:e1:6f:
         ed:3d:10:62:4a:e9:e3:2a:4f:9e:1c:6d:2f:ae:02:65:93:a8:
         6b:af:70:a0:ec:0b:87:15:63:05:98:b9:9f:06:05:1e:a5:10:
         11:64:bb:f1:1c:89:c5:47:12:e1:9d:53:66:2b:a7:34:73:74:
         82:af:4a:c7:7d:19:c4:4b:28:cb:a8:bb:3d:14:c2:91:97:d4:
         8f:94:48:8e:bc:9e:c5:2c:6c:1d:a1:b8:a6:ae:0c:35:b9:69:
         45:32:ef:0d:3b:8a:6a:ba:33:b4:d4:bd:12:03:ca:c0:fd:24:
         a2:58:2c:0d:07:d6:4c:18:bf:e1:25:13:6e:51:e6:ce:51:f5:
         8f:65:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:51:24 2025 by rpki-client