Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/ed510e65-0884-383d-a087-8860d6ea99fe.roa
File:                     ed510e65-0884-383d-a087-8860d6ea99fe.roa (raw, json)
Hash identifier:          UpsCaoDU50DafDritJ3Aft3Zk0QkOxBOzaEutVsCKh8=
Subject key identifier:   F7:78:B6:73:0B:38:CE:F5:93:FC:97:E5:5F:95:75:04:53:64:76:1C
Certificate issuer:       /CN=5f20811b-fdcf-49f5-81f7-9d8385a53aec
Certificate serial:       010D0C9F432858496FBA8B60178BB541106A6300
Authority key identifier: DB:05:12:99:A8:AC:BF:2A:24:F3:63:6E:F5:68:7D:95:4B:61:85:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/ed510e65-0884-383d-a087-8860d6ea99fe.roa
Signing time:             Sun 06 Apr 2025 13:24:25 +0000
ROA not before:           Sun 06 Apr 2025 13:24:25 +0000
ROA not after:            Sat 05 Jul 2025 13:24:25 +0000
asID:                     8095
IP address blocks:        23.179.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/5f20811b-fdcf-49f5-81f7-9d8385a53aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/5f20811b-fdcf-49f5-81f7-9d8385a53aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:ba:8b:60:17:8b:b5:41:10:6a:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f20811b-fdcf-49f5-81f7-9d8385a53aec
        Validity
            Not Before: Apr  6 13:24:25 2025 GMT
            Not After : Jul  5 13:24:25 2025 GMT
        Subject: CN=cf788b00-b437-48bf-9201-acbd52e1aca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:8c:9a:fd:c3:bf:4a:18:c8:ba:bd:e6:63:
                    1d:1b:80:53:77:84:f0:32:e3:5b:83:24:2b:fe:af:
                    65:9d:b6:eb:23:bd:63:61:6c:a6:c9:73:67:88:27:
                    d6:cc:70:95:ab:c1:fe:d3:52:4c:65:6e:17:af:23:
                    fb:19:e6:24:ed:00:d0:82:dd:89:93:ae:d5:57:fd:
                    99:f5:71:d1:a4:39:d0:94:03:44:68:a6:ae:01:a9:
                    cd:41:a6:cc:6c:63:a6:b3:07:46:2e:52:e2:2a:96:
                    e2:95:27:7a:7e:3c:e9:6f:50:84:d0:51:bb:bd:a1:
                    45:14:9e:8f:ad:04:87:ca:0f:df:cb:68:02:0d:2f:
                    30:6f:6e:c8:d9:a9:ef:db:2d:af:9e:06:e8:72:8a:
                    63:35:83:c1:ee:d9:1b:59:01:1b:9d:ec:f0:ff:2f:
                    41:3f:ab:02:cc:02:28:7a:f9:6e:45:3b:cb:d1:3f:
                    3c:ed:83:94:da:00:92:69:77:47:0d:93:21:cc:a4:
                    24:a6:0a:c4:40:7c:63:6f:5c:9f:85:83:76:da:70:
                    4b:e2:bd:1e:a3:5d:c9:39:89:8d:db:1c:e4:3b:4b:
                    5a:4f:04:4f:ea:50:e1:ea:f0:65:b4:e5:c0:1a:6d:
                    5b:c4:59:50:37:c0:87:a8:c2:db:27:05:aa:ac:80:
                    07:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:78:B6:73:0B:38:CE:F5:93:FC:97:E5:5F:95:75:04:53:64:76:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/ed510e65-0884-383d-a087-8860d6ea99fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/5f20811b-fdcf-49f5-81f7-9d8385a53aec.crl

            X509v3 Authority Key Identifier:
                keyid:DB:05:12:99:A8:AC:BF:2A:24:F3:63:6E:F5:68:7D:95:4B:61:85:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:66:9e:46:3c:2c:89:07:bf:87:44:6e:82:8b:a6:01:9f:d5:
         94:94:23:29:94:85:a0:4d:7d:a2:f4:61:b2:ca:da:8c:e0:9e:
         ca:7e:b7:ba:9a:a0:3d:4a:b8:9d:c2:a2:88:26:27:45:d5:b5:
         f4:70:2f:6a:07:0e:75:1c:63:14:7f:c8:8e:62:da:ee:6f:19:
         ca:9e:d2:c8:bb:c5:c2:1c:66:66:39:fa:9d:c2:fd:6c:41:cb:
         b2:4b:ed:e2:f5:de:84:fb:c4:cd:91:36:b2:02:a3:20:06:e2:
         eb:56:02:03:6c:78:b4:7e:50:cd:32:76:bb:5e:f7:ee:ca:81:
         68:20:89:69:d6:89:8d:63:c9:ef:d1:4a:50:e0:7e:86:00:c1:
         3d:f2:cc:e3:20:88:08:76:04:08:32:cc:0a:ae:81:99:93:9b:
         4e:5d:c4:84:cd:b7:cf:1e:2f:d0:98:44:5a:48:cf:32:31:c3:
         cb:cd:18:2f:97:43:b3:5e:42:14:ac:63:bd:5e:0d:66:db:04:
         4e:34:71:8c:df:7c:89:d3:16:39:22:b9:1b:6a:d1:1f:48:b0:
         ee:49:ef:4c:f5:3f:cc:a4:67:b1:c9:f6:06:ab:2b:70:c7:16:
         c8:eb:38:26:07:ff:24:bc:16:ec:aa:9c:ef:e7:99:82:d8:4b:
         7b:6b:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:23:22 2025 by rpki-client