Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa
File:                     d16055ca-dc7f-3352-833b-ee9a136e1952.roa (raw, json)
Hash identifier:          LnLlkx7j+6CqkAtcfoVTVcJn4LULuAhiSRRUDh4aRpo=
Subject key identifier:   8C:ED:1F:69:FA:05:C1:B6:9A:D5:2C:7A:3D:EF:61:00:BE:7F:8D:F8
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F432858496CE45A2592DA74C58E5713C0
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     23347
IP address blocks:        23.156.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:5a:25:92:da:74:c5:8e:57:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=7299e450-3efe-4c57-a4d5-86428244c5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:70:c7:76:3d:88:ef:54:83:37:e0:37:47:
                    0c:a5:bd:43:7c:28:cc:3b:e7:bc:ae:66:9e:6e:d4:
                    a0:f7:d1:90:4e:35:92:f3:2d:d3:d6:f5:9a:5c:97:
                    99:67:0a:64:c9:8a:03:50:d0:34:f5:12:98:4b:84:
                    af:68:69:24:e3:a9:c2:5f:3d:19:aa:69:10:12:f3:
                    b2:48:f2:7d:63:af:e4:cb:bc:25:2b:2c:98:4e:4d:
                    59:bf:d6:f7:96:cf:b1:04:55:32:b4:0b:58:3a:e8:
                    e8:c0:fb:7d:07:0e:85:58:2c:82:8e:fe:39:be:1f:
                    ea:e0:eb:73:64:5d:4a:87:b8:af:65:09:e5:3d:14:
                    f2:e4:33:85:ad:a1:43:6e:ea:c4:38:57:80:9c:93:
                    58:84:b4:fa:06:04:70:9f:d0:44:82:9b:20:a5:0a:
                    18:0f:7e:20:01:ef:e6:5b:65:2d:19:55:63:1c:e3:
                    09:05:ba:3b:c4:e4:a3:74:b1:f2:d0:6a:11:f5:d3:
                    af:14:8b:07:5b:e2:78:0b:33:76:4f:c1:1b:da:1c:
                    80:07:d4:12:53:66:ea:b9:b9:f3:92:04:74:9d:4e:
                    9e:46:8d:3e:b1:88:d4:5d:71:e8:15:12:c3:d0:13:
                    86:d7:f5:97:27:d4:4f:a7:4f:42:07:bf:c9:0c:d5:
                    88:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:ED:1F:69:FA:05:C1:B6:9A:D5:2C:7A:3D:EF:61:00:BE:7F:8D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3d:25:0c:24:58:49:99:0c:da:83:92:68:c5:d3:e9:dd:89:
         65:0a:66:67:06:5a:dd:c2:ea:f3:e7:a1:a5:21:7e:2b:8b:32:
         69:39:02:73:a7:a5:81:e5:31:11:39:fb:44:f7:7d:6f:7c:99:
         3e:dd:fe:f3:f6:3e:5d:9a:81:a3:3c:47:6f:a4:72:5f:b3:3f:
         3c:86:09:5a:13:1a:40:d4:45:14:8c:1a:15:31:30:e9:f4:9f:
         7f:aa:a5:d9:eb:fa:27:3b:8a:4c:15:85:77:4d:e4:bd:e2:51:
         74:56:c8:b6:13:4f:9b:d4:ec:97:2c:29:64:ac:d9:af:c2:3f:
         42:98:2f:d4:3b:03:bd:3b:6b:ab:af:ab:56:4b:c1:28:fa:5a:
         35:b6:b8:f1:85:4b:70:35:1f:f5:3c:8b:18:e2:93:37:2c:f4:
         7a:b1:00:a5:c5:59:0a:fc:84:ee:8d:1f:d7:d0:65:02:be:32:
         a1:67:19:90:55:47:0f:ff:db:1b:11:37:56:eb:75:5f:a5:a5:
         70:53:3b:cf:32:9f:ef:09:ba:62:80:73:4f:b0:8a:63:24:59:
         d8:0d:40:c8:e9:fc:7c:fd:5e:92:d4:cb:a9:f4:fb:09:16:f2:
         03:9b:f4:01:75:1b:93:96:65:fc:49:21:f3:dd:1b:74:2e:58:
         a0:08:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:51:55 2025 by rpki-client