Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
File:                     afcec47f-0abd-3455-98e1-1c658eec0eb8.roa (raw, json)
Hash identifier:          Quwr1OZF0kxePEYEav2Ku976WN29ZnM5z4tuQ2ehUrs=
Subject key identifier:   6B:B4:A9:F4:51:FF:EB:C2:9E:B6:F1:53:65:CB:61:8A:F4:A7:97:6B
Certificate issuer:       /CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1
Certificate serial:       010D0C9F432858495C243E6C1DE2127C3B5D2C00
Authority key identifier: 53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     399392
IP address blocks:        23.175.112.0/24 maxlen: 24
                          2602:fcb6::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3e:6c:1d:e2:12:7c:3b:5d:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=91e5fbbe-a4ce-4779-a397-8fdcaeb831cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:83:c6:59:84:40:7a:39:0c:3f:2a:c0:05:
                    c6:0f:b7:9a:ee:a3:ae:7d:97:ce:19:3b:a9:80:fd:
                    40:dd:c9:3b:2b:a4:0b:0e:42:75:fa:6d:d3:2f:d1:
                    5e:43:1f:01:79:73:5b:a9:ea:ac:f6:c0:68:3d:95:
                    f7:48:9d:45:0b:06:4f:49:16:32:87:32:de:1c:d5:
                    22:81:f3:38:81:79:68:e0:d7:e4:e8:4d:fe:68:eb:
                    50:5b:99:c1:cc:ba:61:81:f0:e0:f2:99:08:9d:02:
                    6d:50:c5:5c:38:45:fe:7a:44:22:ec:7e:17:a9:a5:
                    35:22:cc:9e:37:83:76:c3:e7:83:97:cf:c4:62:99:
                    ee:7e:b5:80:7a:0e:cb:d8:7a:d7:85:43:6a:06:b1:
                    11:8c:a9:b5:10:d4:56:3c:76:a5:5e:e4:a2:24:05:
                    f7:47:d9:f8:5f:79:c4:88:f4:8f:3b:d6:ad:be:fd:
                    f6:7f:e8:01:33:5d:82:10:2e:b9:e7:a5:17:ed:9c:
                    42:6f:55:07:7d:6d:db:e4:50:5f:4f:cd:50:49:86:
                    24:e7:15:55:09:ae:13:8d:20:c5:c4:6e:00:25:81:
                    0e:97:68:d3:21:9b:98:d3:f2:74:b2:53:d6:d0:55:
                    02:10:cb:19:df:a5:61:d4:1e:be:3d:5a:61:c2:38:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B4:A9:F4:51:FF:EB:C2:9E:B6:F1:53:65:CB:61:8A:F4:A7:97:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl

            X509v3 Authority Key Identifier:
                keyid:53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.112.0/24
                IPv6:
                  2602:fcb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:47:6d:15:54:89:25:e4:81:32:2b:91:22:b8:92:fd:6a:
         f0:be:3d:1e:c7:0c:35:fd:36:04:bc:37:6c:b9:cc:8a:00:f7:
         6b:99:bb:cd:8e:88:d4:fc:03:cf:77:db:b2:27:a2:42:ae:7c:
         76:ee:f5:35:8b:a5:63:08:df:15:a2:64:e1:a4:ec:ad:89:91:
         80:95:6c:a8:c2:a0:3c:10:d6:a5:df:69:7f:66:61:e3:83:bb:
         13:b8:2b:91:51:55:17:1d:e1:fb:31:44:8b:de:70:7e:3f:96:
         bf:0c:ba:c9:9f:c1:3f:7e:cb:36:6f:69:7f:05:9b:06:5a:37:
         7e:ab:97:7c:ef:89:87:46:c6:8c:36:93:6d:b7:b4:b3:c6:ab:
         f7:cf:23:ef:a9:fb:3b:83:0c:b8:fd:d4:97:cb:73:b8:8f:75:
         34:9a:86:d7:a9:3e:e6:47:6f:c0:aa:8e:39:60:03:88:dd:c1:
         17:2c:43:7c:bb:cd:e9:fa:e9:34:a1:d1:4e:7d:ef:e9:8d:69:
         02:4a:39:93:aa:56:1e:d5:74:41:65:e3:11:41:91:d4:bb:f9:
         64:df:7b:07:4e:9c:96:ba:ea:d3:84:9e:b7:00:09:c3:0f:0e:
         52:e1:d1:6f:a0:66:56:73:0a:18:51:8c:b7:8a:ec:de:89:93:
         77:9e:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:32:39 2025 by rpki-client