Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa
File:                     9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa (raw, json)
Hash identifier:          Ld1pSaUNa4t4xX3tagb12Ao4xAwSCxtx5csY3ku1gHg=
Subject key identifier:   A5:6C:F4:20:A6:97:3C:D5:03:61:55:19:93:C5:20:92:D2:94:E2:2F
Certificate issuer:       /CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
Certificate serial:       010D0C9F4328584A6AF093A24D072D58362A2F00
Authority key identifier: FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     20091
IP address blocks:        23.132.64.0/24 maxlen: 24
                          2604:6c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:93:a2:4d:07:2d:58:36:2a:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=500be380-c885-4381-ac3f-d8a48e8744b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:5a:12:0f:23:56:5c:36:6e:1f:d6:70:7a:
                    a4:66:39:33:8b:9f:ee:e4:05:c0:db:1a:25:8f:08:
                    5b:6c:83:a3:7a:5a:3c:e2:d2:92:99:5e:4a:d5:e6:
                    5b:22:c6:9d:a6:49:4f:3b:c9:d7:73:eb:4a:a6:00:
                    7e:94:bd:47:d3:0a:29:70:74:ae:d3:c8:60:cf:a1:
                    51:d1:9c:74:4d:02:bf:6b:16:40:31:ae:84:ba:2d:
                    f4:3c:a2:60:90:ba:50:02:77:8c:31:f7:cd:0c:ce:
                    55:7b:c8:cb:6a:0f:13:4c:7d:22:db:d1:88:09:84:
                    2e:1d:0c:29:8a:46:c2:c0:15:02:28:95:c8:8c:18:
                    31:87:28:a5:df:9e:ee:1e:33:21:33:9f:65:77:20:
                    20:2b:27:8e:f8:22:98:cf:fb:d4:4b:72:8d:ea:9c:
                    f7:0d:e1:46:c6:e7:d4:b4:29:e3:b0:d7:7e:eb:49:
                    fc:79:1b:07:ed:6f:8c:ee:71:3b:72:bc:19:01:97:
                    9b:57:18:75:1b:e9:38:ac:0d:bb:0e:a5:3e:a0:86:
                    bf:7d:10:06:42:34:43:1e:5d:f6:bd:2a:13:17:ea:
                    f0:a6:8c:ac:71:fe:af:e2:17:b5:12:8f:cb:bd:75:
                    b3:b2:ab:a0:22:72:fb:17:93:54:61:6f:a0:fa:8a:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6C:F4:20:A6:97:3C:D5:03:61:55:19:93:C5:20:92:D2:94:E2:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.crl

            X509v3 Authority Key Identifier:
                keyid:FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.64.0/24
                IPv6:
                  2604:6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a2:ca:dd:a2:7c:1e:3a:55:23:0a:9d:38:7c:3a:6d:c0:6b:
         28:89:62:a7:79:39:43:5b:db:cc:06:74:f8:83:02:50:71:be:
         a5:88:f4:83:f0:d7:ba:7d:5e:3d:ec:e0:10:43:19:64:1e:4a:
         00:24:41:f3:af:76:47:c5:19:d3:80:ef:f6:fc:40:dc:78:32:
         e5:1d:d7:a6:e2:67:a6:5a:c0:24:32:ad:33:07:63:3f:89:ea:
         33:7c:2d:e4:80:cb:4b:41:95:fd:e0:b1:1b:c8:aa:aa:c4:03:
         7a:55:b4:b4:40:6b:b2:87:08:ff:4f:85:3f:14:7e:bc:f8:28:
         09:9c:b5:a9:0b:d4:cc:8d:0a:45:6d:d3:40:a5:b0:4e:81:e5:
         8f:6e:d9:e8:ee:5a:37:c2:04:b0:94:01:05:c8:ea:cb:df:3d:
         9d:3f:46:6c:b8:cd:43:b4:b9:9e:96:84:ce:14:33:28:02:5e:
         55:c5:be:2d:56:e9:b8:31:f6:37:75:47:56:7a:96:83:fd:12:
         7b:a0:b8:02:3f:8d:5d:cd:22:c1:6f:c0:9f:bc:a4:f8:eb:64:
         fa:5b:64:a7:72:4b:2b:1f:de:d5:99:24:a2:02:6a:d0:58:dd:
         29:0f:7b:8f:25:43:77:7d:de:32:b1:8c:4c:da:fd:0d:67:c1:
         19:c3:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 02:53:37 2025 by rpki-client