Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
File:                     0e8a0d07-db89-35b7-89ab-5b71612a7984.roa (raw, json)
Hash identifier:          O5shgSLmq4LstJHLCxjlNBlt1PonSPZ6h6Da1VMky/A=
Subject key identifier:   AF:40:52:8D:BF:02:46:5C:7E:69:75:7E:08:40:AB:24:2F:82:F6:77
Certificate issuer:       /CN=1d6006cb-f538-4709-8be5-960b57450a76
Certificate serial:       010D0C9F4328584A698B1F2D55B09B628A98D500
Authority key identifier: 5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     396422
IP address blocks:        23.151.88.0/24 maxlen: 24
                          2607:3dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:1f:2d:55:b0:9b:62:8a:98:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6006cb-f538-4709-8be5-960b57450a76
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=f924f25f-d8ad-4e6f-99a4-f8ef5c2dca24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c5:7c:c5:27:5b:71:91:14:c6:ec:3d:5d:1b:
                    07:8b:cb:1f:0a:31:14:93:7e:14:af:cf:3f:94:92:
                    c8:98:a8:d2:00:0e:c0:28:af:df:ce:14:c0:43:de:
                    5a:67:c7:b7:e7:d7:c0:e6:1e:40:9c:64:33:ba:0e:
                    ed:bf:94:18:d1:9e:25:bc:4e:63:67:89:b9:b1:73:
                    04:fc:df:67:4b:c0:ab:e3:f3:65:86:45:50:e3:38:
                    79:4e:94:ea:2e:cf:ae:58:db:33:63:a6:e7:de:da:
                    ad:8e:6b:7a:6f:5d:ca:3c:9b:ad:8f:d2:d7:97:2a:
                    cc:21:82:d5:06:47:52:d5:e5:39:54:63:b0:d5:39:
                    51:e3:21:44:64:c3:1b:73:df:43:d4:32:29:98:b5:
                    9f:3d:4b:14:80:f7:bb:e5:ee:c8:e5:a9:88:48:ac:
                    08:2c:1b:06:86:0f:2a:dc:56:5a:8a:51:63:2f:d4:
                    e9:25:3d:89:4d:d0:1c:2a:a4:6b:a8:dd:5a:ce:83:
                    b9:e8:0c:42:ba:e4:ef:07:dd:0f:6a:36:d8:9d:02:
                    da:30:d2:af:f7:13:98:5d:16:6a:49:08:ec:b3:b4:
                    b6:ad:42:b7:3f:4d:a0:6c:f1:8c:0b:b9:a7:b8:b5:
                    65:1e:18:61:4d:7a:e3:cb:71:81:0e:d1:0a:68:7c:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:40:52:8D:BF:02:46:5C:7E:69:75:7E:08:40:AB:24:2F:82:F6:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl

            X509v3 Authority Key Identifier:
                keyid:5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.88.0/24
                IPv6:
                  2607:3dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:da:ee:9f:e2:d4:08:b4:6d:f9:d5:fa:f6:42:28:f9:26:1a:
         32:ca:cc:de:46:ae:46:ce:66:b0:66:2f:04:1d:4e:31:dc:20:
         61:23:89:1d:f9:cd:25:39:23:a8:2c:15:73:e2:1b:4a:35:90:
         52:d4:70:c2:e9:53:0b:cc:31:07:46:f8:fe:77:c9:d6:56:f6:
         8e:61:10:f8:35:f4:91:bc:07:58:1c:b6:e9:b7:d3:e2:37:6e:
         2b:21:ab:1b:b9:26:71:c0:03:a4:1f:05:a7:cc:ec:f5:2c:dc:
         7f:17:c9:98:a6:19:9d:6f:df:c5:ef:07:cb:ae:ec:47:1c:c4:
         1d:d0:81:05:0f:8c:6c:68:c8:a7:33:55:0f:20:46:30:e7:45:
         98:06:f9:14:00:84:f2:8f:a5:c9:b7:94:7a:ed:db:84:76:63:
         d0:59:03:86:9f:ac:62:75:96:28:df:05:a5:ff:5c:dd:83:f8:
         82:36:4b:94:d2:ef:db:74:e8:90:a8:e8:b8:8b:39:91:41:c8:
         07:ae:07:b0:02:72:9a:57:90:76:e5:93:36:fc:66:18:ec:46:
         f9:7f:df:bc:8a:49:b5:91:90:9b:94:6b:4d:c2:59:f9:38:0c:
         ed:0f:d9:1e:1f:b9:10:80:5f:fb:bf:6d:c2:b1:60:41:ee:b4:
         e3:c6:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 03:33:09 2025 by rpki-client