Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/75e181b9-23ec-3254-ac56-b3e09916b45f.roa
File:                     75e181b9-23ec-3254-ac56-b3e09916b45f.roa (raw, json)
Hash identifier:          L1S02W9aGuTQ1ppyZLp/OwDxr92ofw5xizoPy9rW8oY=
Subject key identifier:   C8:34:41:9E:B3:CA:F0:FF:C8:AD:DD:61:9B:65:7D:03:F7:34:D6:28
Certificate issuer:       /CN=67086338-d450-446e-8fe5-2b5278af4351
Certificate serial:       010D0C9F43285849552950633F37BD95FF372AA0
Authority key identifier: F0:B7:87:44:38:08:B2:AF:EF:59:FD:46:BB:E0:2F:93:80:D6:89:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/75e181b9-23ec-3254-ac56-b3e09916b45f.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     20364
IP address blocks:        23.163.168.0/24 maxlen: 24
                          2602:fa14::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/67086338-d450-446e-8fe5-2b5278af4351.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/67086338-d450-446e-8fe5-2b5278af4351.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:50:63:3f:37:bd:95:ff:37:2a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67086338-d450-446e-8fe5-2b5278af4351
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=838c3c12-c4cc-4183-a5d1-aa6122a7da58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:61:6f:45:5a:a5:50:5c:cf:38:38:11:ee:
                    75:7f:0e:94:c4:34:34:2d:dd:6d:73:54:7b:36:91:
                    8f:53:65:4d:fc:62:ff:09:14:68:19:0e:2f:92:8f:
                    23:72:fb:e5:8a:c9:56:c4:fc:09:36:8e:63:27:6f:
                    f7:be:98:3d:ec:31:60:0d:56:ea:4a:b7:9d:13:65:
                    2e:d7:da:c0:fb:a4:ef:82:e1:0e:3d:f4:90:92:38:
                    5a:af:67:e0:7a:19:d2:46:01:dc:8b:b5:90:c5:1e:
                    67:b0:6f:6d:75:c0:d2:2c:98:c6:86:2a:72:d2:6d:
                    bd:5c:cd:a5:06:c8:de:76:7e:6b:75:b2:4c:d1:98:
                    05:23:7c:22:b3:69:3c:68:d9:0b:11:d1:8d:9c:f3:
                    90:ac:c7:ab:ff:42:a0:11:6a:d3:01:de:f1:2c:50:
                    41:40:82:35:64:f8:7d:ac:1c:fb:36:2e:73:0d:99:
                    fe:fa:01:40:1f:69:52:f9:fb:c8:19:35:14:22:dd:
                    b0:4b:17:76:6d:0d:d9:29:85:b5:2e:76:56:fe:fb:
                    da:83:bb:58:8e:68:8f:61:f7:04:e4:38:d9:86:8a:
                    1a:08:11:90:9f:70:29:78:89:c9:5a:7f:6b:ff:20:
                    78:47:04:81:c0:4d:09:5a:7d:35:54:96:7b:23:a1:
                    4c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:34:41:9E:B3:CA:F0:FF:C8:AD:DD:61:9B:65:7D:03:F7:34:D6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/75e181b9-23ec-3254-ac56-b3e09916b45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/67086338-d450-446e-8fe5-2b5278af4351.crl

            X509v3 Authority Key Identifier:
                keyid:F0:B7:87:44:38:08:B2:AF:EF:59:FD:46:BB:E0:2F:93:80:D6:89:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.168.0/24
                IPv6:
                  2602:fa14::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4d:dd:eb:90:3b:9b:f3:22:33:06:45:ce:bb:db:9e:ff:d7:
         07:33:e2:70:ae:d9:33:5b:9d:71:e9:06:58:8f:cd:2d:ed:9c:
         c4:c9:f4:9c:81:b5:1d:4c:77:ea:78:ad:31:44:f2:8f:e2:9d:
         f7:2b:68:79:55:c7:fc:13:6d:f8:c9:66:07:06:ec:30:3b:eb:
         55:4f:c7:81:9f:ed:dd:ba:27:cd:51:e7:65:2e:35:e2:9d:4b:
         e4:fb:a6:31:2c:30:ab:c8:b8:b6:c7:f2:b8:f0:5b:36:ae:3b:
         c1:32:ef:74:94:62:d4:a8:bc:a7:9f:ac:a5:a0:04:2e:24:3e:
         f9:7c:59:79:96:fd:d7:78:81:51:25:00:d0:1f:8b:66:89:24:
         19:ae:3c:fc:6b:06:4c:c6:e0:18:6b:31:4a:f2:13:de:49:e6:
         26:1b:50:e9:d6:79:4e:08:f0:53:2c:d0:25:fe:e4:84:32:5f:
         99:e0:f8:03:ee:21:03:07:92:88:e7:30:16:8d:57:a1:e3:33:
         d5:11:44:ef:d8:77:97:86:fd:90:3a:46:71:00:70:3c:a3:18:
         3e:b1:76:cc:83:8b:30:c4:b2:63:47:68:1f:3c:1e:58:80:f3:
         bc:cf:35:67:96:d6:c4:a6:2f:32:f4:7a:1e:94:cf:10:c3:70:
         95:0f:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:21 2025 by rpki-client