Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/e33a55fd-2083-369d-b960-d0e3e726c9bf.roa
File:                     e33a55fd-2083-369d-b960-d0e3e726c9bf.roa (raw, json)
Hash identifier:          nc49YEunhM5b2E0PExi667kPRfFaXdIhnFrKPZPGDIY=
Subject key identifier:   E7:1A:F8:9A:9F:0E:B5:5B:EE:B1:5A:FC:43:FB:02:22:D8:20:6F:B1
Certificate issuer:       /CN=503450af-ac6f-4861-96c0-24f7e8724111
Certificate serial:       010D0C9F432858493C092E2B895F05621B862040
Authority key identifier: F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/e33a55fd-2083-369d-b960-d0e3e726c9bf.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     22961
IP address blocks:        23.146.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:2e:2b:89:5f:05:62:1b:86:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503450af-ac6f-4861-96c0-24f7e8724111
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=62b9e3ea-8b30-4f5c-adda-f87a6ba92cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:f3:79:e2:e6:f9:65:7c:ea:e5:48:8b:63:
                    47:a4:05:17:96:ed:db:1f:f9:fa:f4:1d:5c:47:6d:
                    f6:63:9a:6b:b1:8c:6f:d7:d1:ca:3f:89:66:45:a6:
                    99:ed:2c:6a:3c:6e:97:c8:6e:a5:15:e1:c1:74:ae:
                    47:f8:b9:59:17:fb:c7:a1:2b:b1:d4:5c:ab:43:41:
                    26:f4:98:e8:b5:8a:9b:44:dc:fb:5d:2a:ff:e4:da:
                    93:d8:41:73:7d:55:88:db:10:e6:b5:60:33:66:e4:
                    55:52:ce:e6:11:2e:fc:86:c6:e1:aa:cc:d8:52:9d:
                    8e:fd:49:82:25:ab:f5:c4:d4:f0:7e:f4:cb:a3:e9:
                    8a:f1:2f:b9:f9:3d:dc:3e:6f:39:70:77:1e:c9:8f:
                    e3:7b:5b:28:39:98:a4:aa:db:c9:e9:44:f8:0a:63:
                    0e:d9:44:e1:48:a1:2b:5c:38:d6:df:b7:54:c9:11:
                    f4:24:07:e5:e6:2a:32:d8:77:d1:5b:2f:d5:02:a2:
                    98:f2:fc:74:11:02:dd:bc:a5:5f:08:04:5f:ae:b0:
                    d4:06:23:17:d8:14:41:03:1e:dd:5b:9f:dd:93:f6:
                    b6:39:4d:a5:7b:bc:69:34:58:3e:c2:f4:df:f2:da:
                    8b:5f:90:c8:50:e0:73:eb:e5:02:bb:d0:d3:da:20:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1A:F8:9A:9F:0E:B5:5B:EE:B1:5A:FC:43:FB:02:22:D8:20:6F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/e33a55fd-2083-369d-b960-d0e3e726c9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.crl

            X509v3 Authority Key Identifier:
                keyid:F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b6:ec:87:9a:7e:ea:77:7e:00:17:1e:04:11:5b:51:11:d4:
         72:b5:7c:c6:9d:41:76:46:0b:c6:e7:11:79:18:5d:71:55:0a:
         39:b2:6d:a5:82:3b:f0:47:c6:be:5c:ee:09:57:fc:81:b5:ff:
         9b:bd:8b:bb:3b:54:af:b2:84:19:8a:0f:c6:02:bf:e7:c7:fe:
         47:f2:14:60:39:be:50:6a:f2:f0:1a:17:13:7c:1d:73:cc:be:
         55:9c:23:1b:dd:81:4e:11:0a:6e:cc:58:98:33:9e:d1:30:d4:
         b2:7c:5a:c8:31:c3:74:0f:bc:d3:ef:7a:0f:53:58:f8:e1:c6:
         45:ef:0d:4f:db:44:39:b2:e5:f6:13:04:c1:8d:c2:6f:63:f8:
         f2:27:54:31:94:12:eb:f7:ab:a9:75:d0:cd:6f:97:b8:2c:ef:
         ae:59:e3:a2:e6:77:20:81:e7:61:0b:d9:b8:eb:48:c9:91:e1:
         74:a8:71:d4:d7:67:00:03:98:d6:1e:e4:5d:1f:05:7c:81:6a:
         c5:5e:a4:af:37:56:2b:ee:57:c4:c8:ae:93:2d:f0:ef:2d:0f:
         22:db:96:f7:a2:9e:d4:9d:4a:e6:ee:77:60:e4:3c:86:3b:4a:
         01:f5:fd:51:e1:59:9b:f2:dc:c4:11:14:8e:34:40:76:df:66:
         b8:9f:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:15:17 2025 by rpki-client