Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa
File:                     71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa (raw, json)
Hash identifier:          zEDGYDoQtyFGrahIsKa8G7HkLGEdl77DhLi/HMWnmKs=
Subject key identifier:   6A:8C:F3:20:B5:F0:8A:21:2C:88:41:54:1E:4A:0F:C9:35:3A:45:0E
Certificate issuer:       /CN=a28c0165-b200-4b04-831e-e344861ac9ad
Certificate serial:       010D0C9F4328584ACCA650C0FF5A32926C7E1BE0
Authority key identifier: C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     399870
IP address blocks:        23.134.212.0/24 maxlen: 24
                          2602:f6e0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:50:c0:ff:5a:32:92:6c:7e:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a28c0165-b200-4b04-831e-e344861ac9ad
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=6e98e6ee-567b-4e62-87fd-1a03d4c4b714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:86:db:98:1d:97:94:a5:0c:c2:f9:87:36:31:
                    f1:6a:24:eb:b5:61:ca:13:6e:bf:63:45:e1:27:f0:
                    2f:9f:85:c7:b3:34:20:90:22:c8:93:09:1f:0e:d9:
                    b4:b3:15:c9:c5:a0:d9:2f:93:6d:5e:6e:9b:4b:e3:
                    cc:af:36:99:1a:95:6e:bb:a6:6b:e8:83:e0:72:25:
                    40:5c:08:a8:ca:f7:b6:9a:75:df:09:c8:8d:c9:9b:
                    c4:3e:2e:47:d4:ae:f1:a6:6e:4c:a8:a1:28:2a:5d:
                    5a:d1:62:08:e7:fe:72:7d:aa:88:bf:b0:ed:97:5e:
                    d5:00:81:72:f9:e8:fc:0a:4a:2f:1e:2e:22:60:d5:
                    5a:ec:c3:85:6d:1e:1b:f6:0d:e4:a6:7d:a1:ce:f1:
                    75:b5:9f:92:cb:f7:13:29:62:fa:51:4d:e6:ed:a2:
                    e1:b6:10:f7:6b:a5:bd:80:23:92:85:66:ea:61:5b:
                    75:48:d6:00:57:fd:8c:98:bf:23:dd:bc:01:6d:7f:
                    4f:bd:41:55:5f:49:15:27:88:6c:ce:c0:34:3a:10:
                    bc:4a:cf:a3:02:2b:10:05:31:dc:93:36:4a:e9:be:
                    2a:23:1f:f0:ea:75:8f:2b:49:7c:c7:6c:02:e4:c3:
                    a6:ad:79:04:60:6e:5b:1a:b2:c1:9a:95:c9:8b:ac:
                    36:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8C:F3:20:B5:F0:8A:21:2C:88:41:54:1E:4A:0F:C9:35:3A:45:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.crl

            X509v3 Authority Key Identifier:
                keyid:C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.212.0/24
                IPv6:
                  2602:f6e0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:2e:bb:7e:5c:65:34:c8:74:b2:dc:e5:7b:c6:ed:29:6a:
         6c:16:d8:97:81:3a:54:18:8b:21:27:a4:a7:9d:6b:3a:41:d7:
         73:19:2d:d0:bd:60:08:9a:86:54:29:f5:41:0a:d3:29:ad:26:
         7f:a9:41:e5:98:b7:96:24:9a:f8:fe:4d:39:7b:24:38:70:2a:
         9c:56:94:5f:67:84:ce:69:b3:74:e7:81:7e:e9:b1:c3:d0:e6:
         f8:24:a4:51:cc:1b:1a:aa:d0:a5:a3:11:fb:40:91:f4:31:5a:
         bf:76:96:57:5c:16:55:bf:63:41:6f:0e:88:42:c8:66:e6:d6:
         88:22:18:41:e4:f9:8f:a3:9e:c8:95:3f:e7:52:a6:45:fe:a8:
         a1:7e:79:56:50:b9:a8:f0:ba:09:23:e0:3c:36:d9:58:49:06:
         a2:1f:bf:53:d6:42:01:e7:3b:4b:27:00:7b:34:83:e1:35:c3:
         e1:26:4e:9d:78:24:5b:d2:9d:3a:78:62:fa:a2:1d:46:31:7d:
         94:c1:fc:84:5c:cd:cf:c4:29:15:61:36:57:1b:76:a6:f4:6e:
         a6:3f:52:4f:b4:a7:0b:a3:bb:3f:0a:e3:27:7b:1e:7d:03:e3:
         20:67:ca:1f:e4:4c:fc:00:45:41:08:7e:e7:18:7e:e3:1e:37:
         a3:8d:09:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:51:30 2025 by rpki-client