Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/50266634-758a-353f-871a-b6e402b25f31.roa
File:                     50266634-758a-353f-871a-b6e402b25f31.roa (raw, json)
Hash identifier:          w651FiUjSpaesv5J4c7Qo8zxnhcL7kPj67qu2ooLuvo=
Subject key identifier:   EC:6E:EB:13:11:2C:6D:81:26:65:FE:CF:B4:AC:F3:3D:E2:C9:B2:4D
Certificate issuer:       /CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Certificate serial:       010D0C9F4328584A6B16E1ED5A65DC71EE727200
Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/50266634-758a-353f-871a-b6e402b25f31.roa
Signing time:             Sat 05 Jul 2025 14:18:22 +0000
ROA not before:           Sat 05 Jul 2025 14:18:22 +0000
ROA not after:            Fri 03 Oct 2025 14:18:22 +0000
asID:                     135074
IP address blocks:        23.145.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6b:16:e1:ed:5a:65:dc:71:ee:72:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a
        Validity
            Not Before: Jul  5 14:18:22 2025 GMT
            Not After : Oct  3 14:18:22 2025 GMT
        Subject: CN=81070ee5-0ef5-4a4b-8f69-562850cc3c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:ea:9e:07:7f:10:f7:b6:06:0a:70:b9:7d:
                    a1:05:d6:90:b6:0a:ae:56:c7:1e:4e:a5:db:00:da:
                    92:65:4d:c4:68:3f:89:24:e3:f8:81:d5:ad:1f:11:
                    da:2a:fb:d7:d3:1f:4e:d8:a1:45:50:2f:0b:c0:c0:
                    f7:b4:f9:68:5e:6a:79:6e:e5:ef:68:a7:5b:2a:8a:
                    34:ac:40:a2:90:d4:60:27:45:25:c5:d9:bf:4c:37:
                    38:c9:93:05:74:d2:53:57:fb:1d:32:1a:3f:6f:ca:
                    21:5f:ca:0e:2d:d2:a3:fb:6a:81:36:be:56:85:c5:
                    80:83:62:bd:74:b4:71:2a:ab:af:86:8b:6b:1d:d9:
                    23:4a:0b:4f:6f:6c:64:06:6f:3a:78:26:27:c7:26:
                    5f:d5:80:99:88:81:f2:31:cc:89:5b:85:d6:4c:28:
                    ec:6f:7a:db:02:af:29:c7:d0:56:d1:c3:9e:78:56:
                    ac:48:6d:51:e3:d8:fb:47:e0:5b:4b:56:2e:38:4d:
                    79:d9:a7:ce:eb:68:16:54:a3:e8:1b:56:c6:65:13:
                    88:0f:6b:e0:73:cf:20:da:95:ad:f7:9e:02:7e:77:
                    bd:9a:7b:ac:94:a9:3f:43:1c:30:f3:aa:a1:6e:b7:
                    ea:d6:b7:55:c0:88:9e:fb:e8:9f:b2:ca:15:3f:32:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6E:EB:13:11:2C:6D:81:26:65:FE:CF:B4:AC:F3:3D:E2:C9:B2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/50266634-758a-353f-871a-b6e402b25f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl

            X509v3 Authority Key Identifier:
                keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:49:ca:32:c5:36:85:09:56:dc:16:59:7b:76:33:a2:36:b7:
         77:17:e5:27:68:df:e4:9c:32:34:b1:a3:35:50:73:4a:aa:44:
         9a:ad:9b:66:ad:5c:58:72:6e:7c:04:fe:a2:fa:af:af:23:4b:
         ad:95:12:53:8d:e7:c4:d4:57:e8:10:57:86:23:bd:c4:1a:fa:
         a7:00:bd:f7:9a:7d:a1:4a:75:b3:c7:75:17:88:99:b4:80:8f:
         b4:ec:a8:4e:12:ec:84:3a:19:e8:5c:95:ac:57:46:15:d2:05:
         9a:8d:a4:2d:7a:53:48:dc:69:b2:6b:70:e8:ed:59:b2:9e:78:
         7c:88:60:0f:6c:84:0b:39:4e:cb:1f:24:b0:f1:63:0b:70:1c:
         df:18:9b:58:d2:e9:d6:87:cd:d3:e0:78:7f:f4:11:91:36:dd:
         12:fe:01:b1:3d:35:4a:b7:69:4e:94:86:77:6b:70:60:91:8b:
         4d:61:6b:2c:26:67:80:af:70:d4:b2:76:ee:45:ee:ab:87:ef:
         a3:ae:d0:9d:4f:07:a4:d8:23:91:3c:11:b9:47:8b:bc:91:80:
         15:ed:fe:64:19:da:d4:ee:ba:a5:0c:2e:50:84:ee:b7:8d:7e:
         60:59:70:42:84:aa:c9:79:00:e0:cb:fe:0c:d4:ec:44:04:f7:
         de:3c:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:03:14 2025 by rpki-client