Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/79a67f45-d984-330b-a500-ce1441c6bc30.roa
File:                     79a67f45-d984-330b-a500-ce1441c6bc30.roa (raw, json)
Hash identifier:          WRaQa4Z1VeKIEdqnSkvrYlLAPLjQrFt3CcySCOH54vA=
Subject key identifier:   5F:BD:23:07:19:05:73:CB:B4:20:23:D9:03:DC:4F:56:5F:20:2D:69
Certificate issuer:       /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Certificate serial:       010D0C9F4328584965E97AB08FC2D1FDFE27DBC0
Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/79a67f45-d984-330b-a500-ce1441c6bc30.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     36858
IP address blocks:        23.172.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7a:b0:8f:c2:d1:fd:fe:27:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=4a0d5d45-15c0-4a10-9911-3a19e50842f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:10:dd:a5:7d:72:2a:dd:03:00:42:7e:62:
                    1d:a3:cb:84:0e:9e:ab:fc:63:bd:c2:e4:bd:b8:a1:
                    e9:d7:d9:40:a5:6d:e8:d8:dd:42:61:9f:22:ff:45:
                    c8:c1:68:53:a7:db:38:94:6a:d6:50:aa:84:7b:db:
                    9d:f7:9c:98:32:0d:94:83:ab:df:9d:78:b4:7b:52:
                    d4:6a:06:45:0f:31:10:28:37:27:92:1f:ff:c4:9f:
                    72:c5:13:f3:8d:46:76:34:96:b0:c0:7e:52:ea:97:
                    5e:2b:89:b1:01:cf:a6:23:3f:5b:8a:aa:24:f6:5b:
                    59:f2:fd:e9:5b:f3:a6:30:52:2e:7c:01:d3:f1:e3:
                    ac:21:c5:a5:48:f3:55:8c:10:b0:c7:ab:e7:b8:3b:
                    7b:ed:33:48:ff:83:26:01:19:d5:9c:25:b4:79:af:
                    f9:6e:be:40:23:91:f7:0b:e1:94:c1:7c:a8:6b:93:
                    b3:fd:a3:92:1b:df:ed:9a:a4:32:a8:07:6c:2d:88:
                    0d:08:4e:e5:4b:28:3c:64:57:90:26:df:e2:b0:b6:
                    02:68:4b:ab:27:ac:41:a7:f3:17:ce:3a:37:73:cc:
                    fc:bd:28:f5:14:ee:f7:56:ba:f5:b3:30:60:8a:0f:
                    d8:d2:d8:88:02:6d:5e:a7:19:5e:fd:56:b3:52:81:
                    0c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BD:23:07:19:05:73:CB:B4:20:23:D9:03:DC:4F:56:5F:20:2D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/79a67f45-d984-330b-a500-ce1441c6bc30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl

            X509v3 Authority Key Identifier:
                keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:2a:7d:76:cf:cc:ba:bb:38:85:bd:42:0f:a0:66:a7:e5:
         0f:a2:e9:43:e3:ec:61:6f:6b:91:ae:aa:e0:60:94:41:77:29:
         c1:61:59:6a:cf:5e:3a:35:6c:f7:ef:4f:d3:cf:bc:80:96:2a:
         9c:4e:68:64:88:d5:7e:da:46:ed:c4:9d:63:98:f0:bf:aa:77:
         53:88:81:93:fa:a9:ae:26:d3:bc:11:0c:d6:54:a1:90:da:fd:
         9e:b2:34:d3:87:02:ec:7a:f8:05:7c:7e:81:03:48:69:64:24:
         bf:a4:bd:50:42:19:6b:50:9f:cb:15:96:06:ab:a1:56:1b:19:
         d1:35:1c:13:ab:40:1c:51:9c:b5:35:28:98:51:24:af:86:67:
         37:00:cc:05:81:d3:ef:c1:6c:97:f1:16:b7:3f:a2:a9:15:9f:
         c5:dc:2a:9a:d7:9b:aa:dd:1a:72:1e:19:0b:5b:91:c7:cf:16:
         0d:e0:e2:3a:1a:49:0b:06:8f:d2:cb:4c:d5:3b:58:90:b0:60:
         e8:7f:0a:8a:4a:57:76:91:80:37:7d:99:1f:81:48:91:f3:c4:
         49:36:c1:80:f5:ed:7a:aa:7b:e5:bd:23:e7:7f:0d:64:5b:1d:
         b0:ff:9e:b6:9a:fb:be:f9:c3:25:dc:fd:4c:de:dc:fe:b4:9d:
         f1:63:08:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:21:36 2025 by rpki-client