Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/161d7cb8-b3e8-33d0-8032-4adf8fba78c6.roa
File:                     161d7cb8-b3e8-33d0-8032-4adf8fba78c6.roa (raw, json)
Hash identifier:          p839fhUFqPcAkr0blIrpBIoyZaspWQgnmLOcKIYqMu4=
Subject key identifier:   33:ED:71:9D:C0:49:8E:0E:B9:B5:29:C9:E5:75:97:32:6E:2B:4A:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849FE1008AA15FB6489EA11CA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/161d7cb8-b3e8-33d0-8032-4adf8fba78c6.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     20940
IP address blocks:        23.75.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:10:08:aa:15:fb:64:89:ea:11:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=f889f618-5c8e-41ab-be04-6d14d0aca333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5b:25:fe:c3:78:be:2f:e9:c6:9a:97:a0:8a:
                    fb:8e:d1:ed:56:d5:fd:59:79:dd:1e:5f:15:2f:33:
                    69:d9:66:7e:76:4c:8f:01:46:9d:49:fc:e1:1a:d0:
                    60:35:bc:7c:0c:69:fd:6b:9a:e7:25:7b:76:db:b7:
                    9d:7e:de:f5:b4:7f:a4:d7:c3:98:d9:8d:56:8a:6b:
                    dc:bb:98:f2:4f:20:7b:ca:c5:1a:1f:b4:7d:79:78:
                    bb:a8:71:53:96:ff:b0:75:27:8b:1a:c0:9e:17:83:
                    47:1c:1e:ba:b8:6a:45:87:5e:ce:a0:43:6c:67:6e:
                    36:db:e7:25:37:67:30:c0:f3:72:a5:97:d8:82:98:
                    d4:c8:8a:09:4d:34:23:09:ed:e2:70:6e:6f:7b:53:
                    0a:14:85:03:ad:b7:74:92:ba:28:63:02:93:97:cc:
                    f0:f6:9c:ee:16:2f:1b:60:59:a1:77:35:d8:e2:26:
                    00:4d:34:07:5c:3a:bd:b0:bb:7a:43:81:78:6d:86:
                    a1:5d:08:9e:0a:bc:45:a5:1b:af:be:cf:18:3b:97:
                    28:2a:b1:6f:db:d2:82:c9:49:2c:ef:60:b2:de:fc:
                    b8:7c:01:0f:10:78:3a:c1:03:44:16:b0:9b:81:60:
                    97:8a:54:de:a0:e3:a4:0d:29:91:5c:46:39:3c:34:
                    8c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:ED:71:9D:C0:49:8E:0E:B9:B5:29:C9:E5:75:97:32:6E:2B:4A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/161d7cb8-b3e8-33d0-8032-4adf8fba78c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.75.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:06:9f:e6:98:48:a2:3f:5a:c5:af:39:1f:3e:7c:3b:bd:9b:
         a0:83:54:f3:56:a0:c2:ed:39:ea:4b:b8:3d:18:67:e8:b5:1a:
         0a:eb:08:b3:48:ae:04:08:0d:2b:4c:13:5d:90:90:54:17:57:
         3a:08:4f:35:03:c4:bb:a8:f4:c4:b3:4f:73:a0:6b:10:c3:e2:
         ae:af:32:6f:41:d3:24:0e:dc:90:12:15:6f:8d:b5:c4:d9:0d:
         ef:68:1d:08:73:12:b6:8c:72:bf:98:95:55:d8:0e:47:59:1c:
         9d:5c:eb:ec:6b:eb:57:39:21:62:46:b5:df:1d:a8:68:d2:d0:
         2d:73:7d:7d:83:f8:76:23:31:83:8e:e4:6a:e9:8f:64:f2:e8:
         f8:84:7f:9b:a4:a3:d0:40:6a:b9:71:12:5c:9e:be:7c:50:98:
         09:f3:a1:41:12:38:b0:86:29:65:cb:45:b0:cc:f1:86:d5:bd:
         56:38:9c:81:99:33:6d:c4:47:45:ac:5f:2d:33:5b:05:3f:e8:
         2c:d9:ef:66:8a:df:6c:f7:ef:9f:04:6b:49:a3:9b:97:60:74:
         4e:48:1f:90:cf:4d:85:41:5b:0f:a1:0e:e6:48:39:ca:1c:0c:
         6c:09:7a:e9:0e:93:42:66:9e:4a:42:7c:c0:e2:af:6e:3d:a8:
         85:cb:51:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:19:32 2025 by rpki-client