Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/df74d0e2-1fc6-3773-8f05-90bbbafabbd8.roa
File:                     df74d0e2-1fc6-3773-8f05-90bbbafabbd8.roa (raw, json)
Hash identifier:          FyY2l+pzALRvEpjwVJUu4SOsb/bocXc69TyREJBqIlk=
Subject key identifier:   C1:F8:6B:C0:50:8B:4B:0F:C0:AD:12:C1:A3:B5:FD:60:E5:A7:51:18
Certificate issuer:       /CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Certificate serial:       010D0C9F43285849CBCFA30340DADD0BAA1D4300
Authority key identifier: FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/df74d0e2-1fc6-3773-8f05-90bbbafabbd8.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     63213
IP address blocks:        23.83.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a3:03:40:da:dd:0b:aa:1d:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=b97c54de-bb6c-43ca-b314-5be2de2240d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f1:c0:e8:d6:95:f1:61:f2:b4:e1:58:e5:35:
                    1f:18:72:f0:50:c6:82:dc:e9:bb:97:92:f7:f2:f8:
                    37:6a:09:23:75:44:ba:67:d2:41:00:20:6b:ef:ea:
                    b5:13:a3:2c:f2:9f:27:82:e9:ca:96:e2:91:27:9e:
                    22:47:e0:b0:3f:02:d4:67:71:b2:29:5e:6f:a1:d7:
                    be:da:2b:f6:59:05:93:96:73:81:00:e5:92:4c:86:
                    03:39:c2:45:59:ad:d4:33:4f:29:0f:ea:61:f2:44:
                    8a:0d:62:b3:5c:df:91:04:5e:e4:88:7c:9a:2c:42:
                    62:c5:2a:3a:3c:cc:8a:d5:44:8e:16:a4:b7:90:a3:
                    e9:4a:44:b4:2e:59:ea:8b:b1:9e:68:7f:12:d8:4d:
                    ad:b5:a3:82:a9:c4:e6:3d:cc:44:6b:84:1a:ac:fb:
                    0a:fa:0d:51:76:43:e1:73:f7:78:a0:88:87:7f:4f:
                    be:3d:10:f4:10:05:99:90:15:8a:27:e1:ac:ee:d3:
                    77:df:b4:4a:bc:ab:e3:42:62:94:35:81:bb:7a:1d:
                    3b:b7:b0:be:ae:01:6d:38:c2:bc:e3:54:61:7c:52:
                    e4:72:2c:42:38:b2:1b:e9:18:92:8a:61:a6:20:f9:
                    c3:10:65:ef:9f:03:1f:ce:b6:10:5b:52:2b:62:78:
                    ab:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F8:6B:C0:50:8B:4B:0F:C0:AD:12:C1:A3:B5:FD:60:E5:A7:51:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/df74d0e2-1fc6-3773-8f05-90bbbafabbd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl

            X509v3 Authority Key Identifier:
                keyid:FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.83.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:c0:b3:54:de:44:1e:26:fa:6b:19:39:0b:70:1c:ef:d8:
         18:ef:04:1d:a7:18:78:b4:67:c8:72:42:53:49:0f:96:7f:a7:
         f1:1e:4c:96:6e:2a:5b:ff:f9:9f:db:a2:5a:c8:e6:9a:31:e8:
         e6:0e:77:9f:94:33:7e:a9:2b:07:ea:f0:37:ca:a3:d1:0c:26:
         e3:ca:21:2f:a8:de:9a:b6:e0:6e:0d:b3:f0:d1:8a:db:ba:16:
         c1:32:95:7e:bb:98:bb:0f:cb:30:c7:dd:b1:63:51:cf:1b:ea:
         d3:ef:57:3f:0f:b0:60:12:f4:aa:87:52:81:64:f0:cd:eb:38:
         7e:11:24:fa:a6:26:60:b4:76:62:91:e7:d9:d8:0f:7c:59:69:
         cb:fd:9c:06:a2:a2:62:ce:c9:b1:d9:be:ec:22:17:c2:d7:f4:
         5f:f7:80:5b:07:8b:1e:f3:dc:43:0e:84:8e:8c:3a:e1:16:5b:
         66:47:59:a7:d4:f9:3f:d6:79:da:4e:30:ae:1f:58:9b:d5:aa:
         ac:3e:30:c7:bf:3f:d3:57:a3:f9:d5:97:a1:ec:c8:72:38:53:
         24:ff:d4:cc:2b:75:0c:3f:cc:e8:94:be:09:0a:d3:40:fb:52:
         28:70:91:15:19:a5:20:3f:3b:f7:aa:78:7a:34:80:03:e9:8c:
         e6:6d:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:18:46 2025 by rpki-client