Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/0e962d32-34f4-3248-be59-c513dd6f3aff.roa
File:                     0e962d32-34f4-3248-be59-c513dd6f3aff.roa (raw, json)
Hash identifier:          og6U5jzwI1p7hJs4j62OcH4k2rcLCIdDms6wMNTMlDw=
Subject key identifier:   35:7E:76:62:AF:B7:F5:D8:9C:DE:03:76:F5:A9:26:6F:C9:A3:1F:2B
Certificate issuer:       /CN=4e318dc1-2d61-46f6-b607-9e142c8bdc5f
Certificate serial:       010D0C9F4328584A14CA1689FBD08F718AC224C0
Authority key identifier: 53:E6:D4:7F:9F:21:B4:B3:2C:80:CF:DE:44:16:C4:9A:FC:40:26:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/0e962d32-34f4-3248-be59-c513dd6f3aff.roa
Signing time:             Wed 04 Jun 2025 16:24:07 +0000
ROA not before:           Wed 04 Jun 2025 16:24:07 +0000
ROA not after:            Tue 02 Sep 2025 16:24:07 +0000
asID:                     214483
IP address blocks:        23.139.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:ca:16:89:fb:d0:8f:71:8a:c2:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e318dc1-2d61-46f6-b607-9e142c8bdc5f
        Validity
            Not Before: Jun  4 16:24:07 2025 GMT
            Not After : Sep  2 16:24:07 2025 GMT
        Subject: CN=f362ed30-6e26-417b-ba31-194827e5a4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:7f:fb:4a:b1:e2:db:0f:37:d1:67:f5:9e:
                    ad:b7:a9:3d:6a:c7:0f:0e:39:7d:0c:cf:c8:55:c5:
                    f7:cf:2e:05:27:2d:1c:42:37:9f:df:17:77:89:17:
                    79:74:e0:ad:f0:00:bf:e8:a6:6e:19:9f:a0:36:e6:
                    73:e5:55:1d:34:0d:94:61:0d:3f:c4:99:35:4a:85:
                    d1:6f:92:8c:88:a6:aa:f6:b9:be:c8:05:53:41:71:
                    76:64:5f:15:b7:22:cf:5a:f7:2c:6c:b7:c3:78:c7:
                    c3:a3:9a:4a:e2:0b:1b:c2:2f:cb:9a:35:08:fb:98:
                    e9:49:32:d8:47:c1:12:ac:24:46:20:3e:5c:2b:83:
                    0d:b6:71:f4:26:f1:1c:9a:c0:49:02:e0:5b:47:fb:
                    f8:d4:27:f6:22:f9:5c:4b:bd:67:fe:9a:5e:3c:05:
                    76:86:8f:da:78:59:4f:aa:d2:50:5f:b2:99:6c:62:
                    25:0a:fc:96:34:6d:82:a7:13:4d:65:5c:45:10:1d:
                    0a:13:01:45:9a:0b:ca:e7:53:8c:7b:0d:93:7a:7f:
                    0a:35:26:1e:df:18:5a:d2:5e:5f:df:87:4a:a1:74:
                    50:87:88:ed:59:aa:03:fa:02:be:41:21:95:12:0e:
                    b4:cb:f6:bd:3b:0a:57:7c:7a:88:1f:d1:60:90:b4:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7E:76:62:AF:B7:F5:D8:9C:DE:03:76:F5:A9:26:6F:C9:A3:1F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/0e962d32-34f4-3248-be59-c513dd6f3aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.crl

            X509v3 Authority Key Identifier:
                keyid:53:E6:D4:7F:9F:21:B4:B3:2C:80:CF:DE:44:16:C4:9A:FC:40:26:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:33:26:fe:48:d0:f2:97:d4:2d:87:e4:f6:f2:e7:22:d1:d8:
         be:f3:28:d0:52:b8:18:0d:a6:5a:62:99:dc:dd:bb:1b:56:ef:
         9c:80:dd:29:aa:1c:46:30:40:65:31:3f:ca:f6:c5:12:83:f9:
         16:90:a8:df:af:f5:40:bd:41:0f:f5:e3:f1:5a:3c:6e:b8:13:
         7f:e2:8e:d9:83:20:ea:a8:7f:e3:a7:c9:f8:77:71:e3:fa:87:
         20:a4:5f:6e:48:61:01:6c:39:30:94:16:fa:c0:30:41:53:05:
         38:2c:d4:2c:2f:2a:37:72:b6:dc:42:78:39:53:e2:8c:f8:90:
         3d:1b:70:c0:ee:f6:a8:5d:dd:af:81:34:a0:41:d4:a5:e4:18:
         6c:a2:47:f3:b5:27:f4:b5:65:fa:74:bb:9f:89:7b:a5:1f:27:
         f7:fb:03:04:e5:72:72:70:94:03:8c:5a:11:e5:89:82:1d:33:
         4c:9c:e3:77:85:4a:4f:80:25:ed:89:47:f8:3e:6a:0e:73:5c:
         01:86:3d:b0:be:f3:fa:f7:b9:fe:ff:e8:44:8e:5b:97:f3:b7:
         38:bf:b0:d6:4c:71:06:53:f4:83:ed:0e:14:30:dd:c1:37:93:
         4c:aa:31:93:ab:c1:36:07:9f:4f:dc:f9:ed:19:3e:4b:49:c9:
         3d:62:5e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:15:27 2025 by rpki-client