Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/2b14bda5-732a-32d4-b0c3-b2c6baf1df86.roa
File:                     2b14bda5-732a-32d4-b0c3-b2c6baf1df86.roa (raw, json)
Hash identifier:          QGHuw8E0OOFr40F2+iwWKzMR+ubg8Q7QxfIV9jOVEOw=
Subject key identifier:   3C:EC:1F:63:51:A5:47:3F:A3:D4:0C:79:A9:4F:BB:78:32:7D:2D:A9
Certificate issuer:       /CN=bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16
Certificate serial:       010D0C9F4328584A5CFB2B366816C556D7D02C80
Authority key identifier: EE:70:3D:40:DA:37:1C:84:70:75:A1:4D:9A:FC:98:73:DD:0B:8F:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/2b14bda5-732a-32d4-b0c3-b2c6baf1df86.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     397270
IP address blocks:        23.148.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:2b:36:68:16:c5:56:d7:d0:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=e4a2ee43-192a-43fa-819a-3063c53fc25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d5:0d:d4:7a:13:62:c6:b7:79:25:1c:09:88:
                    b9:70:44:4e:3f:20:d8:5a:4d:eb:ab:d1:4f:fe:a8:
                    5f:0a:26:1d:81:f2:d6:bb:6e:df:de:5c:d0:0e:78:
                    4b:45:1a:36:d2:3c:27:1e:cc:fc:93:5a:b2:4d:d8:
                    b5:75:cb:b1:88:71:8d:4b:df:c5:36:23:97:d0:ca:
                    3f:cb:e4:09:31:a8:df:01:f9:10:ca:5f:5b:d1:77:
                    1b:58:08:15:c6:20:f5:02:4d:00:d8:18:4b:61:cc:
                    9b:14:31:f5:f4:95:5e:f5:b9:52:f8:fb:7c:0c:95:
                    a9:f1:ab:c2:4c:5e:1a:05:ac:19:29:bb:a7:56:1d:
                    94:f6:a8:31:01:b3:00:bf:d5:9a:99:eb:29:cf:98:
                    fe:d9:90:40:9c:69:a7:a4:95:2e:36:e5:6d:40:ea:
                    c6:a7:95:81:9b:f4:ea:24:31:13:e0:c2:ec:d0:19:
                    fb:f5:0e:2f:f5:00:d6:25:4c:97:5b:9b:b8:3b:83:
                    de:22:0e:40:ec:2a:f2:d7:ce:8a:a0:fc:bf:be:c1:
                    0e:72:fa:6a:81:57:16:da:ac:bd:ef:aa:5a:b4:b4:
                    c7:83:09:b8:7b:b1:c4:fa:5c:d8:b1:4b:0c:48:ca:
                    f8:4d:36:f4:9a:b0:5a:1a:1b:a0:39:b5:5f:93:fc:
                    70:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EC:1F:63:51:A5:47:3F:A3:D4:0C:79:A9:4F:BB:78:32:7D:2D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/2b14bda5-732a-32d4-b0c3-b2c6baf1df86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.crl

            X509v3 Authority Key Identifier:
                keyid:EE:70:3D:40:DA:37:1C:84:70:75:A1:4D:9A:FC:98:73:DD:0B:8F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1d:bc:21:a6:cc:9a:2d:a6:c7:80:75:2e:0a:ca:56:fe:35:
         2d:92:4f:61:b2:e4:d9:ba:c6:7f:19:85:5d:8d:e6:ff:32:99:
         4e:49:6d:4b:49:56:f5:0c:53:c0:10:de:be:e0:c7:7a:3c:aa:
         d4:17:08:ed:19:37:9a:8a:bf:40:9c:db:2b:07:ad:bb:56:80:
         37:28:4b:33:b3:6f:3a:19:f9:51:b6:d5:51:f9:82:28:81:2f:
         59:b4:8f:89:6b:16:4f:31:79:d4:57:a5:31:bd:31:8d:28:70:
         24:07:95:91:a2:c3:a9:30:aa:c6:f9:fa:15:e6:4d:84:35:87:
         03:75:aa:b3:76:82:26:ac:60:e5:4f:f4:ca:f8:af:54:cc:52:
         eb:2f:72:5b:c3:38:7d:41:86:7e:ce:e6:2f:16:f8:71:41:a7:
         93:86:c9:c4:9f:a7:0d:7c:bb:2e:d3:a5:7f:b9:58:c7:3f:82:
         7a:25:05:10:24:7f:dc:6c:81:da:c3:7d:f1:19:18:7b:90:f9:
         d3:48:86:4b:e8:7b:5a:bb:c8:0b:94:65:58:62:ea:b6:8c:96:
         41:58:68:15:35:62:34:8f:44:4b:19:52:be:ff:00:a0:c8:23:
         30:ad:56:c0:86:ba:d4:04:89:fe:a4:f6:de:c2:e7:e7:30:bd:
         a6:a7:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:42:12 2025 by rpki-client