Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/12642e6e-d131-30f3-8b99-43152a62e15e.roa
File:                     12642e6e-d131-30f3-8b99-43152a62e15e.roa (raw, json)
Hash identifier:          77xr8w9UHCXr9OJN3K3TsRLqe4wMm0S7O36HlVnIhT4=
Subject key identifier:   2F:A8:0D:FC:A1:78:15:33:01:5C:8C:8F:6F:E9:09:3F:5E:25:EC:EA
Certificate issuer:       /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Certificate serial:       010D0C9F4328584A65A8F68E7617EE791C0CB580
Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/12642e6e-d131-30f3-8b99-43152a62e15e.roa
Signing time:             Thu 03 Jul 2025 15:37:51 +0000
ROA not before:           Thu 03 Jul 2025 15:37:51 +0000
ROA not after:            Wed 01 Oct 2025 15:37:51 +0000
asID:                     20213
IP address blocks:        23.135.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:a8:f6:8e:76:17:ee:79:1c:0c:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
        Validity
            Not Before: Jul  3 15:37:51 2025 GMT
            Not After : Oct  1 15:37:51 2025 GMT
        Subject: CN=d804a15b-7904-4fed-890e-3853b7d52539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:de:bd:aa:a2:39:8d:dd:a3:71:40:40:0f:
                    4f:3f:e1:86:2b:06:4a:d5:de:9c:80:80:af:89:90:
                    01:e4:aa:6a:a9:63:79:38:e1:34:ad:64:18:e7:d3:
                    8d:4c:6c:37:41:3e:2a:a4:ea:6a:4c:03:5d:55:d4:
                    02:8c:6a:4e:13:8f:38:46:4d:39:26:08:78:9d:83:
                    54:61:1f:96:e2:69:53:34:8e:ae:3e:b1:c3:5a:80:
                    7a:46:00:0a:ef:17:f1:09:9e:ce:a2:34:1a:b9:f5:
                    dc:75:ca:25:75:95:66:53:a4:df:a7:3b:75:f4:69:
                    9e:2d:51:26:f6:08:27:3d:b6:74:9c:7b:87:34:5d:
                    4e:3a:8e:0a:0f:51:10:87:58:43:a3:36:a1:e0:88:
                    05:7d:c5:50:73:08:a1:19:4b:a2:df:a2:b6:bc:0d:
                    17:f4:1f:5c:89:75:c0:02:6f:7f:4c:90:76:af:c5:
                    fc:dd:74:c8:ea:24:d3:42:96:eb:8b:5d:f6:53:40:
                    5b:30:1f:9f:b5:f4:2e:fb:36:0a:30:a0:d9:9e:26:
                    e6:95:c7:7e:79:11:54:d1:36:7f:54:41:b4:c2:82:
                    d6:f8:5d:bb:91:3e:90:53:2d:7b:e7:18:26:ff:79:
                    cb:ef:4e:6e:92:bc:40:bc:08:9a:d4:b0:44:16:dd:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A8:0D:FC:A1:78:15:33:01:5C:8C:8F:6F:E9:09:3F:5E:25:EC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/12642e6e-d131-30f3-8b99-43152a62e15e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl

            X509v3 Authority Key Identifier:
                keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:94:42:fc:08:58:ff:a9:7c:56:f9:27:88:0a:60:c1:de:ec:
         08:36:ad:eb:ba:b6:5e:a7:14:4a:44:b4:11:36:56:3c:52:b0:
         37:9e:02:e6:cb:e9:54:ac:a6:09:33:43:7c:96:ab:6b:2f:be:
         a1:a5:e2:12:ba:76:df:e8:31:ba:f8:e1:77:6f:7c:02:f5:d0:
         7a:bc:68:8a:74:02:f4:1d:5f:8b:16:fa:a3:33:f5:df:0a:34:
         81:48:93:d2:e5:0b:38:63:9d:56:24:8d:79:57:d4:1e:ed:a2:
         23:42:cb:a9:1a:f9:28:86:22:14:c5:7b:ee:b2:6e:68:47:fe:
         7b:fb:16:1e:d6:9b:2a:17:90:33:b7:bb:99:23:0d:b7:aa:d9:
         63:10:f6:6d:a0:6b:c7:14:3b:b5:1e:fd:90:b4:4f:a1:e8:a0:
         14:25:fb:99:42:60:1c:08:cb:a8:4d:55:ee:a5:e1:4b:0a:cd:
         bb:51:2e:30:71:ef:0b:ad:19:57:20:27:a1:49:bc:cd:51:fc:
         b9:cc:a9:9b:98:14:0a:93:68:73:a1:a4:25:aa:93:bc:1b:ea:
         f3:15:05:22:25:06:51:77:01:4a:66:ed:0d:a3:a7:f8:90:2d:
         49:d0:c5:0b:8f:d6:65:1a:02:8a:ad:bf:ac:ed:e5:04:2e:2d:
         1a:0e:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:50:23 2025 by rpki-client