Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa
File:                     30f2300f-beff-367a-a51c-b65be158cc40.roa (raw, json)
Hash identifier:          AMzmSL66Rbnmubc3o8ICQnuNBhf9xgopZvJxAMTtO/Y=
Subject key identifier:   48:80:08:52:A0:49:F3:95:80:92:3D:9D:7C:1C:95:33:52:D1:57:D3
Certificate issuer:       /CN=83220b5e-8104-4c4e-bbce-305b174b684a
Certificate serial:       010D0C9F43285849A4BA4F155E0BBB32ED98CB80
Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     53698
IP address blocks:        23.137.120.0/22 maxlen: 24
                          23.137.124.0/23 maxlen: 24
                          23.152.192.0/24 maxlen: 24
                          23.152.193.0/24 maxlen: 24
                          23.152.194.0/24 maxlen: 24
                          64.234.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4f:15:5e:0b:bb:32:ed:98:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=313fac11-3a70-40d9-8c3c-5e969ec95e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:f2:cf:ec:9f:46:44:37:c1:fd:9e:19:52:
                    d4:53:20:4a:ed:1b:e8:93:61:19:5b:f5:07:e5:a7:
                    3d:67:ef:cf:30:05:bf:25:bf:ab:9e:36:55:f0:1c:
                    be:58:48:cd:59:03:ad:cd:9b:13:8d:e3:05:b7:ab:
                    94:b8:81:62:1b:18:42:1b:bf:bc:b8:8c:66:ac:e6:
                    06:7d:77:1a:0e:6a:6b:09:77:38:f8:3c:b6:88:4c:
                    e1:3c:94:2e:9c:ee:c4:8c:07:d6:eb:e0:51:9a:22:
                    f5:66:36:e2:4e:2b:1f:fa:30:e7:2c:ad:54:95:79:
                    2e:a0:64:0a:f1:81:48:f1:55:27:36:ba:e9:c3:31:
                    90:b2:49:eb:b3:b8:8f:f7:f3:8b:23:fc:6c:2a:05:
                    ee:46:44:15:52:06:68:5b:12:45:53:9a:82:79:3b:
                    e4:57:4a:08:3d:ce:36:44:7d:fa:e8:ab:ef:5b:bd:
                    ec:f8:3b:92:3b:ff:bd:9b:ae:5c:10:d0:b3:26:84:
                    7b:ec:eb:c2:e3:6a:03:c5:05:79:7d:51:18:50:9f:
                    34:cf:85:d3:c7:60:2d:e5:f5:f1:87:77:d7:7f:1f:
                    dc:8d:97:0e:b5:25:13:9e:4a:32:6a:f1:cb:ea:d3:
                    0a:c1:1c:a5:77:e2:35:a9:0d:48:c5:08:41:d9:e6:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:80:08:52:A0:49:F3:95:80:92:3D:9D:7C:1C:95:33:52:D1:57:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.120.0-23.137.125.255
                  23.152.192.0-23.152.194.255
                  64.234.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d9:76:b3:85:5d:40:13:9d:12:bd:52:dd:d5:08:30:b6:be:
         d5:c2:ff:77:34:af:93:28:41:00:36:6f:48:21:e3:6c:3d:df:
         30:65:88:26:b8:4c:d5:09:5d:d1:1a:b6:c2:bd:b9:f7:29:41:
         5a:fc:57:4d:90:b7:ec:63:52:60:46:da:2d:51:4a:37:7b:32:
         43:d4:c4:86:9e:03:a2:98:8e:dc:3a:18:e1:09:8a:ed:9e:f7:
         b5:ac:c4:be:2b:0e:df:78:0a:ab:c6:26:de:48:82:70:f7:66:
         97:74:22:f9:ec:45:dd:20:db:1b:5c:ad:c7:0a:7f:5e:3a:03:
         7f:42:9a:40:80:88:ed:fc:60:c3:de:3b:00:b8:c3:66:8b:6a:
         2b:05:76:43:54:bb:a4:99:18:d4:ad:9e:a3:48:f6:07:36:b1:
         23:54:66:53:be:0d:1e:8d:72:9a:0a:46:99:0e:9d:42:3c:13:
         26:92:d7:6e:bf:a9:b2:78:27:19:ab:38:74:64:fd:30:ad:67:
         0d:1f:1f:ca:75:6e:30:84:8b:9b:ec:15:05:ae:3c:e2:39:b3:
         82:8e:25:69:e0:43:1a:97:51:b1:ca:07:c0:32:d8:c0:1c:77:
         d5:ca:55:f6:6e:2b:90:90:5e:2d:53:ae:8f:94:a2:13:5f:84:
         59:dc:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:27:24 2025 by rpki-client