Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa
File:                     c00ef155-85c4-36fa-98b1-e12fe962553e.roa (raw, json)
Hash identifier:          ghuN+FNdS4qJA16S3S1ZXHKSTrSNKDqvBiZzey3G0cc=
Subject key identifier:   41:99:26:97:0C:F5:93:6A:CD:39:89:2F:16:17:E8:FE:86:50:04:D2
Certificate issuer:       /CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
Certificate serial:       010D0C9F4328584A63F5B1CAE632D9D631670D80
Authority key identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     11611
IP address blocks:        23.158.112.0/24 maxlen: 24
                          2602:fd61::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b1:ca:e6:32:d9:d6:31:67:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=1c437996-a786-4cc7-a67a-65cebfcc0cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:ee:06:39:6d:d7:bd:57:11:6d:b5:2d:6d:
                    20:9f:f1:ab:d9:0f:cd:4d:82:6b:eb:be:48:16:9f:
                    be:14:3a:8f:50:37:17:5e:14:36:6d:29:ab:60:87:
                    ee:96:74:97:40:15:00:b2:1b:e7:e5:2c:31:dc:b4:
                    61:e8:fb:d1:81:66:b4:b0:9a:ff:19:02:c5:55:45:
                    8a:e3:06:d8:b8:73:03:ce:b9:e9:99:69:9a:70:67:
                    f0:b9:6c:d6:38:57:86:57:cc:cd:53:df:95:d7:26:
                    10:48:ed:8d:39:33:33:ee:13:2a:7d:44:c3:e0:40:
                    4c:fd:39:0d:0d:58:d7:0c:71:1f:eb:f2:ef:50:6d:
                    8e:b0:a7:e5:cc:6a:9e:04:96:3c:e6:2d:92:fd:f1:
                    10:f2:01:16:5f:1d:d9:e6:98:d6:d2:ad:c7:d3:2a:
                    64:cb:c6:4a:30:23:24:a9:d2:e0:fc:56:cc:3f:b6:
                    af:2b:0a:1b:3a:0a:e7:90:e3:97:dc:65:f4:5b:3c:
                    eb:ae:0e:0a:07:6c:c5:1a:f3:a7:02:97:80:9d:97:
                    ec:33:a5:25:7b:90:82:26:83:71:4e:84:0a:d6:99:
                    9f:74:fd:9e:3d:59:de:d2:26:d4:0a:ca:59:ee:63:
                    eb:a1:2f:06:fb:7d:37:b0:00:f6:d1:26:28:41:f8:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:26:97:0C:F5:93:6A:CD:39:89:2F:16:17:E8:FE:86:50:04:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl

            X509v3 Authority Key Identifier:
                keyid:D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.112.0/24
                IPv6:
                  2602:fd61::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:6d:32:d2:48:24:e0:75:9e:22:b1:77:95:6f:14:18:5d:cd:
         d4:2f:f0:55:f3:f2:0d:84:ad:66:32:fe:b8:91:fe:01:bd:7a:
         d3:66:ac:a2:6f:ba:b2:29:1b:5a:c9:33:d2:70:04:8d:a3:a2:
         b1:50:98:96:c0:12:a4:f2:12:1d:46:f0:6d:8b:4c:e6:d1:aa:
         08:c7:c5:11:20:1b:aa:ce:32:9c:ed:4e:c8:22:ba:48:b4:45:
         df:16:01:97:4e:bc:a7:3e:3e:a1:d5:b8:8c:30:6b:ad:6b:5f:
         8f:f7:4b:18:bd:37:6a:42:80:72:5c:c9:cd:1b:a6:b3:92:be:
         3c:42:29:8c:16:e1:53:ab:10:ea:c0:4b:1d:7a:1a:49:8f:2a:
         ca:cf:c5:3a:0b:09:95:93:bc:56:e5:3a:ed:47:bf:4e:fe:74:
         80:fc:36:dd:9c:b2:bc:77:d6:58:59:24:b2:b2:39:6a:8d:ea:
         64:93:5c:ca:6c:63:b5:f2:e1:3e:7d:c9:f0:8d:c7:27:42:62:
         7f:27:a5:25:12:d3:e1:8c:73:9c:75:2a:1a:87:4e:08:6f:94:
         e6:02:ff:29:fd:dd:f6:02:e6:bd:e9:9d:c5:b8:85:20:28:a9:
         58:02:5b:80:9e:c1:c2:55:89:e9:92:9d:07:c3:ae:4e:15:03:
         71:b2:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:31:05 2025 by rpki-client