Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/b44d0c10-7ac5-35c8-98ba-313c6515fe95.roa
File:                     b44d0c10-7ac5-35c8-98ba-313c6515fe95.roa (raw, json)
Hash identifier:          YkmnNVbbCjlctAsdFlvwsmI+OPCPCMxsfbqdjRZR6c4=
Subject key identifier:   B7:8C:C0:D7:83:DC:9E:31:C0:1B:83:30:40:E3:D2:36:DF:D3:34:C1
Certificate issuer:       /CN=862a9ade-3d88-4730-8033-1414625d565b
Certificate serial:       010D0C9F4328584A3E45AF0C2DD76B3F0A5BCC00
Authority key identifier: 2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/b44d0c10-7ac5-35c8-98ba-313c6515fe95.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     401474
IP address blocks:        23.131.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:af:0c:2d:d7:6b:3f:0a:5b:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862a9ade-3d88-4730-8033-1414625d565b
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=8976b90d-3b79-466a-8216-26a63b141fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:15:c1:d5:11:74:d9:7d:7f:bf:f5:ca:ef:
                    d5:5e:c1:15:f2:ca:cf:9a:cc:52:25:2c:fc:37:f4:
                    cf:56:3e:bc:f2:16:f1:12:11:64:f8:c7:85:71:cf:
                    92:a2:d3:19:90:51:17:f0:d6:96:20:5e:dc:0a:b7:
                    a0:8f:63:ff:f2:b9:3b:30:68:91:32:9c:61:98:c7:
                    12:e0:18:44:56:ab:4a:09:29:ba:69:71:ab:24:2f:
                    82:a3:33:0f:bd:03:7d:59:53:92:7c:24:31:8d:58:
                    bf:d0:26:cc:ef:69:2b:30:a0:b3:99:ed:80:75:ad:
                    45:e4:59:76:5f:31:a1:c4:e1:34:29:e9:ab:51:b9:
                    90:d7:84:26:b2:83:04:e8:83:ac:e9:2a:14:3c:91:
                    8e:72:07:c1:e0:21:60:15:a6:fb:b3:f0:8f:d8:71:
                    b7:4f:0a:8a:19:ee:6e:6a:7b:f6:45:90:38:17:2c:
                    a2:07:36:f2:c9:44:67:f2:16:96:6e:28:c2:db:15:
                    64:7a:dc:c7:b8:aa:4c:84:2f:72:98:c5:a8:50:97:
                    d5:8b:62:5c:de:53:29:2b:85:3f:21:22:1e:87:92:
                    3a:c9:65:8c:00:c9:4b:28:19:97:23:cb:06:dd:a1:
                    42:4a:b5:3a:19:68:95:ed:ce:77:5c:48:53:72:a8:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8C:C0:D7:83:DC:9E:31:C0:1B:83:30:40:E3:D2:36:DF:D3:34:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/b44d0c10-7ac5-35c8-98ba-313c6515fe95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:5e:67:82:0a:ce:a8:c0:d1:80:dd:5d:d1:39:ca:a2:64:
         a2:28:fc:0c:66:6c:14:bb:bb:93:43:f9:fa:07:3f:81:57:8d:
         5d:57:3d:e3:68:50:e1:44:6f:31:32:c2:dd:2c:65:f3:4e:d6:
         73:82:38:5e:9a:bb:f0:b1:23:fa:db:4a:ac:f1:f4:1a:46:36:
         a0:ae:4d:79:d9:30:54:87:96:32:c9:d0:17:42:47:cd:9c:13:
         04:b2:96:ca:ea:6f:a9:8b:e1:fb:83:ed:68:20:35:93:be:f1:
         80:f2:68:bb:c9:53:d2:12:6c:49:21:56:05:42:80:6e:09:69:
         d1:65:ed:79:fb:28:dd:f6:5a:e6:2a:da:d7:5c:f4:15:47:b3:
         b3:ec:63:ee:14:39:87:b3:21:b3:56:2b:24:46:a6:66:8d:3d:
         ce:6a:f8:f1:ac:4c:fc:d3:01:22:3d:72:f7:da:36:86:ad:10:
         3b:32:6a:7e:9c:9b:13:b3:87:4d:cd:eb:9a:f6:7b:c1:90:0b:
         c0:5d:c8:52:d9:be:e8:2a:89:46:16:7f:6d:2a:d3:e0:1f:65:
         82:1a:f9:f9:ee:47:e8:a0:8c:00:15:27:72:0d:08:b1:36:14:
         e3:90:17:3b:3d:73:af:5b:46:72:1e:09:a9:32:e8:0f:35:5f:
         de:78:e2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 22:37:03 2025 by rpki-client