Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0eda5b78-baea-3757-b24c-647df7f35a09.roa
File:                     0eda5b78-baea-3757-b24c-647df7f35a09.roa (raw, json)
Hash identifier:          kqmWq03qLLV6ls1251EGJtB3l0nD8YRmsfd8jMLAnWM=
Subject key identifier:   D2:26:03:9D:CF:C4:E7:78:EF:E6:73:DD:01:F6:BB:F8:C1:8E:4D:AD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DC8FD30014EBE12F406B6340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0eda5b78-baea-3757-b24c-647df7f35a09.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     20940
IP address blocks:        23.201.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:d3:00:14:eb:e1:2f:40:6b:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=a9471511-162f-4a18-8e21-fd52a22fedc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:c0:3e:c3:75:89:65:e1:76:4a:e0:e4:df:
                    02:bf:4c:94:78:17:e6:bb:89:cc:80:85:e8:0b:bd:
                    17:d3:31:bf:6c:b1:4e:4d:77:4a:08:88:15:40:b7:
                    fe:6e:be:d5:6a:31:32:5a:97:51:bd:d0:59:f5:d8:
                    58:e1:a0:d9:2c:4e:07:c9:e4:67:83:c7:ed:49:a1:
                    4f:bf:a9:4b:10:96:77:f5:3b:9d:92:64:95:be:cb:
                    a6:96:de:de:57:f8:e9:1d:3f:d4:33:b6:29:45:5f:
                    ff:7e:90:87:f5:fa:be:45:5f:3e:88:e3:c9:79:24:
                    7c:d1:d7:56:4e:18:fb:a3:bb:67:ba:99:ff:d2:f8:
                    5d:9f:92:dd:76:55:93:d8:bf:5b:3d:8d:97:4d:29:
                    ae:6b:9c:6c:f2:e2:ad:be:e5:23:8c:58:5e:8e:8f:
                    6e:dc:54:d0:5e:8d:0a:b1:49:69:2a:5b:ff:e7:3f:
                    ac:5c:9b:95:b2:2e:89:7f:8f:86:f3:c5:d2:7c:f9:
                    81:7b:38:5c:34:80:2a:1e:ef:f3:00:91:4e:b0:d9:
                    52:92:32:37:c5:65:45:50:10:50:d1:e6:5e:b2:b3:
                    57:fc:90:19:dd:4d:ca:50:2f:71:a3:10:35:d7:72:
                    a2:64:f1:d8:d9:ad:2f:b1:37:fd:12:a8:e4:20:a4:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:26:03:9D:CF:C4:E7:78:EF:E6:73:DD:01:F6:BB:F8:C1:8E:4D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0eda5b78-baea-3757-b24c-647df7f35a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:3e:71:96:45:d8:ee:27:be:04:18:d4:67:bc:c0:77:a6:
         38:e8:f3:ee:60:50:90:6c:6f:db:9b:f7:02:76:da:c6:25:f8:
         47:7a:4c:d2:ae:63:df:be:38:46:e4:b0:80:61:60:b7:e5:88:
         ed:5a:20:8b:5e:76:14:2e:87:1c:85:09:51:ba:10:7c:cf:91:
         95:a2:9b:c4:95:eb:e0:1c:b6:97:15:20:66:99:46:9a:6f:7d:
         0d:65:d0:45:e9:6d:28:0b:d9:22:d6:f6:37:13:a6:72:ff:53:
         8e:f5:43:ae:ac:d0:53:83:dd:e3:0d:55:f4:b6:88:ff:ef:0d:
         02:8d:ef:eb:c8:06:69:70:31:4b:7d:1f:f1:b3:cf:40:c1:f2:
         80:f5:af:b9:14:06:ad:1b:b6:44:24:fb:fe:d2:ec:1c:ac:09:
         3e:f9:0d:a2:fa:ef:47:79:8c:99:db:19:4a:5a:35:18:30:28:
         96:5e:9d:42:64:51:c2:bb:dd:9e:d6:13:ea:04:7f:8d:ef:d4:
         da:6a:12:88:5a:17:92:68:41:69:fb:a0:e1:3a:28:05:2f:6c:
         f7:48:a1:b4:93:81:81:14:d4:6e:57:15:43:de:60:de:d0:cb:
         d6:0d:ef:ed:de:80:21:69:bf:6d:c2:76:96:38:4c:00:db:32:
         05:e3:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:54 2025 by rpki-client