Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa
File:                     72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa (raw, json)
Hash identifier:          KJaJSpWLMN7QPcEzY0BMru91LHxPKcIfDmhoSaj/W0A=
Subject key identifier:   E6:BD:0A:A4:D8:18:13:7D:A3:6D:75:A3:07:CB:CD:1C:17:4D:7C:6B
Certificate issuer:       /CN=25cf742f-4f64-4e51-b004-d972a8dd5948
Certificate serial:       010D0C9F43285849C63A27FC9860866B21CE5980
Authority key identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa
Signing time:             Wed 07 May 2025 13:01:01 +0000
ROA not before:           Wed 07 May 2025 13:01:01 +0000
ROA not after:            Tue 05 Aug 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        23.129.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:3a:27:fc:98:60:86:6b:21:ce:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf742f-4f64-4e51-b004-d972a8dd5948
        Validity
            Not Before: May  7 13:01:01 2025 GMT
            Not After : Aug  5 13:01:01 2025 GMT
        Subject: CN=0052bf05-fded-408d-9ffd-da34e6aa944c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:8a:1c:c5:0f:75:7b:c3:7f:3e:04:aa:4b:
                    57:3f:3f:a9:4b:98:6f:b3:37:cc:55:1e:a7:d2:a5:
                    e8:e9:63:da:b6:3a:69:9d:99:ae:70:ab:8d:a2:58:
                    3c:b9:1d:38:f5:3a:0c:e8:ff:81:45:dc:b6:d3:34:
                    7d:5d:35:6a:d9:4e:b4:fc:7f:78:51:7e:20:7b:d8:
                    bf:32:09:57:7c:ed:99:6c:b4:2f:57:2d:53:73:fe:
                    43:07:c7:ad:a5:36:d1:6e:38:62:e2:03:3e:fc:7c:
                    d8:7c:11:49:3f:02:0d:4d:f1:62:ac:ce:d9:dc:80:
                    63:d0:3d:39:23:7f:4a:48:5d:c5:2e:81:02:ce:2d:
                    b6:69:6f:e6:41:b7:2c:a6:bf:83:2e:f3:9a:7f:1f:
                    29:5d:ce:b8:b1:95:21:0c:8e:45:9d:f1:70:1f:40:
                    2d:16:af:0e:c7:4d:bf:55:0d:12:21:ad:cb:4e:71:
                    b4:f3:89:40:de:8e:84:53:84:1c:da:85:50:be:35:
                    74:7b:e8:6b:64:a7:5f:da:2e:90:4d:b0:2b:e3:92:
                    18:b1:bc:15:1f:95:99:0e:4a:e7:f7:34:a5:76:fb:
                    17:77:4e:fb:e9:cd:ea:1a:7a:7d:c0:1e:8d:f0:23:
                    f4:c9:fb:80:13:b9:e4:83:8d:ae:c1:dc:86:03:87:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BD:0A:A4:D8:18:13:7D:A3:6D:75:A3:07:CB:CD:1C:17:4D:7C:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl

            X509v3 Authority Key Identifier:
                keyid:07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:78:47:13:7b:c9:24:8c:5b:52:80:12:b9:a4:5b:a9:d5:b1:
         1a:96:8e:13:4a:5e:ba:da:30:98:d4:20:71:fa:10:62:f7:07:
         15:ed:0f:43:e9:f4:ab:bd:27:e9:08:b6:82:94:cb:e0:a3:12:
         32:53:d7:9d:55:c4:ef:2d:aa:f3:44:85:83:23:72:05:f9:18:
         55:4e:0e:61:6f:a4:c1:e7:c0:63:39:11:94:13:23:a8:5a:ed:
         c3:fc:3d:d4:f9:33:9a:ce:1f:9d:90:80:ca:6b:8b:b1:bf:76:
         31:97:75:d1:85:e5:39:a8:d7:7e:89:41:bf:67:e3:1c:ed:8d:
         8d:d9:a4:9a:d4:a8:fd:97:de:6c:c0:89:aa:d0:34:09:6f:a9:
         16:b7:1a:b8:86:ac:1b:e2:46:31:fa:a6:96:42:92:53:18:c0:
         29:e7:e4:9a:10:3e:48:c9:b8:a8:60:37:dc:01:1f:26:00:7d:
         39:47:a6:22:ff:6a:ee:70:4c:d7:e4:cc:8d:39:09:34:a9:23:
         80:54:90:dc:c2:1d:ca:a1:e5:8c:16:b3:a4:80:85:09:6f:29:
         1b:45:27:6c:9d:65:e3:ab:ef:44:24:20:e7:57:0a:7e:47:20:
         e7:c6:54:19:0e:22:c1:85:a5:84:2e:24:97:d7:3c:76:88:68:
         c3:03:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:42:19 2025 by rpki-client