Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa
File:                     7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa (raw, json)
Hash identifier:          KsYRkG6I8OT8efgFRxxk0g7ZdeVR6T/slq+a8VXQ35M=
Subject key identifier:   D5:45:C1:85:02:B6:BB:B7:91:8E:0D:80:3B:1F:97:52:B0:40:AD:42
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F43285849FAC04B26AB9634B12B7E1880
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa
Signing time:             Mon 26 May 2025 08:33:22 +0000
ROA not before:           Mon 26 May 2025 08:33:22 +0000
ROA not after:            Sun 24 Aug 2025 08:33:22 +0000
asID:                     8075
IP address blocks:        23.154.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fa:c0:4b:26:ab:96:34:b1:2b:7e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: May 26 08:33:22 2025 GMT
            Not After : Aug 24 08:33:22 2025 GMT
        Subject: CN=5b61581a-f331-485d-8f9f-fbf934c074e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:c5:f2:50:3a:1b:8a:dd:e6:ff:1f:a8:68:
                    2f:58:1a:65:10:02:b0:e6:74:8d:94:fc:0c:9a:6d:
                    6e:18:a3:e9:b7:8d:9c:69:f4:a2:32:50:23:45:16:
                    74:c4:5c:0a:b8:bf:0e:bb:ca:f5:b2:c6:22:be:62:
                    8c:1d:03:2f:32:35:ee:af:53:be:ad:f6:17:44:c5:
                    bb:e2:f6:d7:3d:1c:a4:82:08:cb:06:5c:de:f8:cd:
                    9f:5d:06:e2:b7:cd:6b:90:2b:e7:8e:ca:44:6f:6f:
                    50:ae:60:6c:24:97:28:82:fb:6a:ff:cf:11:c8:7b:
                    ff:81:8b:9b:fa:e5:87:1f:49:5c:47:ec:f8:73:1d:
                    94:fc:71:f3:b5:5e:6f:18:ef:0e:5c:67:bb:fb:3a:
                    cc:60:bd:ab:e6:9b:f0:4b:f8:f1:77:92:13:7f:32:
                    f8:44:f7:31:de:35:71:cf:ec:36:aa:37:a1:65:fd:
                    09:4e:10:44:2d:3a:d4:1f:24:37:96:5b:1a:55:5a:
                    1c:f2:d2:76:78:3b:9d:22:06:6b:04:10:15:aa:19:
                    68:99:8a:97:7b:87:a1:c4:22:54:ff:9d:c8:10:a5:
                    6f:21:b1:81:2c:a4:7a:c8:80:06:55:14:4d:1f:15:
                    89:5c:0d:30:f7:d4:27:95:23:86:ee:d8:8f:39:6c:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:45:C1:85:02:B6:BB:B7:91:8E:0D:80:3B:1F:97:52:B0:40:AD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e1:b6:99:39:8c:ea:ee:30:ab:af:07:59:a9:8e:4e:05:fd:
         62:dd:75:91:e7:84:23:39:e5:5c:40:26:6d:bd:58:32:05:ab:
         8c:12:dd:3f:fb:f1:6e:48:f7:d8:1d:be:ae:8f:79:53:fd:65:
         f2:b8:28:92:d0:1f:b5:0a:76:81:60:0c:8e:65:51:d7:01:c7:
         f2:f9:91:3b:77:ec:9c:d2:ac:54:5c:71:56:18:ba:0d:8f:c9:
         26:91:92:cc:a0:95:95:ac:ee:89:e0:4d:c7:fc:84:2c:18:40:
         43:85:3c:9c:3f:aa:15:41:41:b7:0b:7b:53:f5:52:19:73:00:
         21:21:8e:46:19:79:a7:75:a3:49:77:3b:24:f4:ee:6b:d5:a9:
         3c:36:ca:2d:f5:87:76:07:d0:57:c3:cf:ee:6e:8b:9f:76:fd:
         33:97:dc:35:36:b8:62:ff:db:bf:70:a5:86:07:81:6c:f7:1e:
         0c:be:89:d8:4f:4a:ee:3f:c3:8f:08:33:df:00:22:e9:8e:b2:
         91:14:bf:72:f3:69:43:6c:26:9c:da:51:48:69:82:9a:c5:56:
         a0:94:40:e3:21:f0:d0:95:80:53:32:af:6e:70:22:cd:88:a1:
         a3:b7:5a:47:22:42:89:9a:0c:0e:70:59:34:4d:84:4d:79:3d:
         50:03:78:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:31:09 2025 by rpki-client