Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/0c0c2783-1444-3b86-9253-729890991ed3.roa
File:                     0c0c2783-1444-3b86-9253-729890991ed3.roa (raw, json)
Hash identifier:          pCKQlbK1nlJCFI9IOeY4My9osAVdZATAqnbw/f703D0=
Subject key identifier:   6B:46:58:7C:69:E9:79:EB:68:1B:92:70:CE:FF:8B:D7:1F:19:88:2F
Certificate issuer:       /CN=2654343f-7862-4859-8638-b9c2008b3151
Certificate serial:       010D0C9F4328584A00DACAEE29851B56EB105180
Authority key identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/0c0c2783-1444-3b86-9253-729890991ed3.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     13737
IP address blocks:        23.170.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ca:ee:29:85:1b:56:eb:10:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2654343f-7862-4859-8638-b9c2008b3151
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3b0108bb-75d5-4e46-93cd-3284f9784348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:53:95:34:0d:43:f1:bb:3f:b0:97:46:9c:
                    a9:fc:69:68:73:1f:4f:e3:f4:ad:c2:35:2b:10:1f:
                    6c:1f:4b:6d:e4:c0:34:ef:08:22:01:78:c4:ee:00:
                    b0:96:40:35:2a:1b:b3:9b:23:de:12:c8:b3:6b:3c:
                    e9:0c:42:61:fb:82:29:c7:0b:de:e8:d7:cb:cc:dc:
                    e4:77:d8:b3:8c:7b:5b:9b:3f:2a:1b:fd:51:7b:ce:
                    dc:5e:6b:f6:a6:37:1f:4c:d9:53:55:de:8e:bc:51:
                    64:b0:01:48:bb:9e:34:db:bc:be:ab:43:1a:79:cb:
                    17:14:66:b7:66:75:1e:51:5a:80:f0:9c:da:2f:07:
                    36:79:0d:ad:68:e4:3a:9d:1b:c1:a7:fb:98:70:34:
                    13:dd:9b:c0:37:f7:ea:1e:42:01:71:e1:ba:cf:de:
                    aa:ea:64:52:d8:96:f3:5b:08:11:7b:6c:bf:6e:99:
                    f5:a6:65:17:4c:7e:45:9c:6a:1b:25:ad:04:39:df:
                    13:84:18:0b:51:d8:1b:32:34:90:c7:96:c3:01:4c:
                    da:2e:d4:cb:38:73:00:6d:71:45:37:9e:74:bd:d3:
                    f5:b4:3c:da:52:1f:f7:c9:4d:2c:52:42:22:56:ac:
                    42:90:b4:d1:d0:04:3a:48:fc:d9:a8:bf:02:da:60:
                    8d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:46:58:7C:69:E9:79:EB:68:1B:92:70:CE:FF:8B:D7:1F:19:88:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/0c0c2783-1444-3b86-9253-729890991ed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl

            X509v3 Authority Key Identifier:
                keyid:9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1b:6d:90:c0:a5:d1:14:ee:5f:2f:e2:45:65:ac:f4:0b:c6:
         e6:be:91:ca:f1:23:04:27:f6:a6:74:51:19:b7:3f:a2:89:fd:
         bb:46:d4:63:27:f4:f4:2b:2e:08:df:88:5e:ca:3f:a5:f2:5a:
         15:fc:31:bd:02:76:3a:d9:de:78:6f:0f:60:e3:36:fc:73:aa:
         06:74:0e:93:b2:be:02:03:62:a7:d8:7c:e8:f6:e5:81:45:a5:
         b8:d3:a8:8a:fa:12:d8:e2:dd:08:ed:a4:dc:d0:a8:4a:e9:1c:
         87:89:83:42:e3:23:a6:9c:6a:50:44:c6:6f:71:9e:57:5a:4e:
         d5:5a:0e:cc:c3:47:a9:fb:5d:18:75:85:18:cf:33:21:9e:f1:
         65:ce:00:14:f5:5c:07:da:87:ab:4b:80:f6:5f:dc:8b:9c:d0:
         4c:80:fd:e8:3e:3d:10:5e:30:70:e6:77:93:05:a6:35:16:4c:
         a2:25:9c:e5:7f:81:8c:13:17:d5:d2:ac:5c:16:d1:34:05:e2:
         c7:99:fb:1d:95:82:a4:69:4a:14:e9:35:74:c8:ef:90:e3:b5:
         d9:26:3c:41:56:12:20:66:b5:e7:e6:26:a0:a3:ce:42:49:37:
         57:b5:9d:41:fe:11:a1:6c:2c:c9:9a:21:99:00:b2:f8:27:fe:
         05:0b:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:04 2025 by rpki-client