Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa
File:                     309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa (raw, json)
Hash identifier:          Y9vQVC3s0kJTME4Mrb8iH33ZLvXwVFmgm3nMycdbXd0=
Subject key identifier:   98:DD:93:06:40:93:CA:62:43:D6:A7:E4:F7:46:63:00:81:87:9A:0B
Certificate issuer:       /CN=7afbb48a-7a41-422c-a27b-4b92e0907153
Certificate serial:       010D0C9F432858496EA42B27FC931C1382B3C580
Authority key identifier: 23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa
Signing time:             Sun 06 Apr 2025 04:03:31 +0000
ROA not before:           Sun 06 Apr 2025 04:03:31 +0000
ROA not after:            Sat 05 Jul 2025 04:03:31 +0000
asID:                     8095
IP address blocks:        23.180.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:a4:2b:27:fc:93:1c:13:82:b3:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afbb48a-7a41-422c-a27b-4b92e0907153
        Validity
            Not Before: Apr  6 04:03:31 2025 GMT
            Not After : Jul  5 04:03:31 2025 GMT
        Subject: CN=55434b74-a847-4db2-806e-ff390f936ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:61:52:c9:0f:de:f1:10:f9:b1:57:cd:97:
                    0e:02:3a:7a:1e:69:13:fc:99:2e:09:14:87:e9:b1:
                    94:c1:aa:c8:85:11:bb:0f:f7:c2:e3:98:0c:34:91:
                    f2:c6:4e:1b:e2:b5:ab:10:f2:22:1d:8c:c1:6b:bc:
                    f3:fe:b8:31:8d:e9:dd:3f:fb:de:cb:0b:33:c1:bf:
                    ff:1b:ae:7a:de:ef:11:8a:e5:cf:50:7e:ac:6c:5a:
                    f9:1d:8b:e6:c7:79:c0:94:6b:cf:54:03:d9:10:12:
                    bd:84:d7:84:57:5a:cb:17:d8:e1:2d:64:3f:ab:27:
                    cd:42:5a:f0:60:82:55:01:26:fb:06:6c:38:f6:ed:
                    d5:8d:ca:22:19:80:7b:20:38:9f:a0:08:28:52:02:
                    2e:41:ea:fc:6f:37:32:76:bf:70:73:34:01:54:78:
                    f7:36:da:c0:89:b4:4b:7c:17:cf:3b:c1:f6:5c:71:
                    c2:86:d2:78:c1:05:ba:41:d3:2c:9d:4b:df:52:e7:
                    fb:b7:82:0f:20:2e:ed:6b:2f:14:c2:87:6a:1c:7b:
                    18:e2:70:0e:4e:a8:3c:21:5e:9e:49:b5:5b:26:ae:
                    09:2a:a7:a6:52:dd:a4:49:0f:a1:c7:d3:8a:7a:f5:
                    08:ca:37:14:d2:f4:aa:d6:0b:7c:2e:64:1b:5e:6d:
                    f9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DD:93:06:40:93:CA:62:43:D6:A7:E4:F7:46:63:00:81:87:9A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl

            X509v3 Authority Key Identifier:
                keyid:23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2e:5b:44:0e:83:a3:ce:93:67:78:ff:9e:bf:0e:7e:85:6c:
         3c:45:08:a2:9f:aa:7f:aa:0f:a4:70:bd:b0:99:f5:64:6e:36:
         20:38:ae:27:9b:67:22:a0:c9:2f:13:d5:1f:27:23:13:46:ce:
         ca:61:f9:59:08:ce:f9:50:cf:ea:eb:f5:bc:0e:11:27:c0:73:
         bc:78:2e:8b:d2:98:6c:75:c4:88:53:e5:db:8c:d1:ec:82:a1:
         b9:09:c8:c9:56:14:18:0f:27:9b:9d:da:27:05:5d:cf:be:80:
         73:db:80:78:02:bc:df:15:24:f8:06:6a:7b:cc:f0:df:f0:0d:
         a4:8d:4a:2f:b5:df:83:c0:d8:37:ec:55:32:ed:bc:5d:e7:d5:
         42:a9:ad:12:83:fd:b6:19:96:0c:04:1d:7e:8f:76:5d:a5:c9:
         08:a3:8a:8c:52:d8:25:50:8e:b4:55:61:5f:c0:7f:da:bd:66:
         60:71:de:ee:58:e5:58:93:4c:cb:ce:81:2e:54:80:f5:f8:02:
         83:87:c5:14:1e:f8:de:8f:6b:74:a0:1d:7a:e8:bf:46:af:ee:
         b7:e9:67:80:c0:15:20:3a:b5:c7:32:35:f9:51:f5:d3:37:77:
         42:8f:f3:75:b9:e1:7e:31:b6:ef:2d:06:ef:06:fc:e7:ec:04:
         6a:2b:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:27 2025 by rpki-client