Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/4c50f12e-00b1-369c-bd0c-e4874d03b817.roa
File:                     4c50f12e-00b1-369c-bd0c-e4874d03b817.roa (raw, json)
Hash identifier:          vUulgWnYOMA5H6oeUSOfjJMtBF41ll72TqsIxGbn12M=
Subject key identifier:   2A:48:6E:DD:5A:03:86:1E:02:31:95:F0:40:EA:3C:D5:25:19:26:3E
Certificate issuer:       /CN=f628cf4a-b330-4609-8c85-bdee7cf18d7d
Certificate serial:       010D0C9F43285849E2251178CDE4F94504C84EC0
Authority key identifier: 1A:3A:65:D8:D8:C1:65:CE:F2:EE:80:4B:E6:18:8A:FE:04:62:33:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/4c50f12e-00b1-369c-bd0c-e4874d03b817.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     2914
IP address blocks:        23.135.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:11:78:cd:e4:f9:45:04:c8:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f628cf4a-b330-4609-8c85-bdee7cf18d7d
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=1a497948-c19d-41c7-b3b0-aa841c10283a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:9c:4d:af:ae:8f:2c:ab:1c:78:63:a5:13:
                    ff:a8:2e:82:a1:5c:51:47:21:bd:6a:6b:9e:cb:2c:
                    c9:82:75:25:57:f9:e3:a1:6a:38:34:57:f9:88:bd:
                    e9:13:7c:17:61:09:ab:f8:b4:1f:d8:ba:9d:e9:de:
                    41:8b:a5:b6:c0:ee:f6:99:c5:01:34:94:72:e5:6c:
                    ac:d6:59:f5:91:9f:c4:e3:b3:c7:d5:47:5b:d6:bf:
                    25:50:6b:21:86:7d:2d:67:89:c1:4a:15:01:83:a6:
                    54:9c:1f:e1:fc:6e:c9:ad:95:38:c8:10:50:f6:d5:
                    a0:18:b9:ab:6f:59:5c:27:91:c2:94:9e:14:ca:db:
                    c2:68:1b:e4:16:30:31:0a:28:86:87:65:75:66:7a:
                    c2:e4:9c:57:89:ea:88:16:fe:29:6e:9c:d8:19:cc:
                    12:1c:74:26:0c:ba:8f:3d:c0:da:e8:52:6a:88:15:
                    27:5a:f6:48:cf:fe:f7:9f:6d:b6:de:f2:42:b4:86:
                    5b:01:c5:58:30:18:1f:1d:45:9c:3c:a8:48:93:84:
                    7d:9d:18:91:be:58:75:ee:7f:19:23:90:c2:b5:c8:
                    60:99:5f:8a:3b:4e:96:88:f8:95:55:cb:4e:ce:57:
                    eb:bf:c7:e8:4c:e9:db:f1:02:cd:a2:e8:bb:22:13:
                    4f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:48:6E:DD:5A:03:86:1E:02:31:95:F0:40:EA:3C:D5:25:19:26:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/4c50f12e-00b1-369c-bd0c-e4874d03b817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.crl

            X509v3 Authority Key Identifier:
                keyid:1A:3A:65:D8:D8:C1:65:CE:F2:EE:80:4B:E6:18:8A:FE:04:62:33:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:b2:2a:f9:6b:fa:64:18:02:fe:d9:09:7d:96:fd:b3:cc:
         44:a9:a8:f3:8e:dd:f3:92:dc:a5:bb:4f:1d:15:3c:80:d6:d1:
         d9:91:e5:a6:66:56:80:68:77:53:1a:d2:ce:91:2c:15:93:8b:
         0b:c0:50:8d:dc:70:74:22:4a:e3:c1:1e:78:03:53:b5:72:ac:
         57:7c:69:46:20:a4:fb:e2:53:55:4d:bc:f8:b9:e6:f4:de:34:
         2b:28:e8:5c:b5:52:5f:ab:32:67:cd:30:ba:39:3c:09:02:44:
         63:ac:fc:66:61:76:bc:bf:6a:e2:b6:44:b4:ef:2f:25:3f:3f:
         9a:d3:0d:2f:11:60:02:63:86:35:9c:6b:c4:68:88:d6:9e:3d:
         2e:9e:30:4b:e1:94:80:dd:9a:b3:1a:2f:0d:67:f7:80:00:07:
         27:8c:eb:aa:c6:26:39:9b:c6:7c:a5:e7:8c:9e:c2:46:31:f7:
         e0:fa:e1:95:f4:5d:61:5a:d0:8c:30:35:18:29:19:11:16:0b:
         ea:d0:20:11:bb:cc:be:a0:97:44:16:19:5c:14:e5:96:1a:43:
         08:2a:3f:ac:e3:74:59:29:d5:7c:f9:c3:ef:a1:d5:7c:71:f3:
         df:da:d4:a8:30:e5:e1:8d:ea:03:78:9c:fb:82:b0:1a:10:1f:
         fe:f1:26:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:13:29 2025 by rpki-client