Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300df4cb-39d8-3d08-99e0-4c4021fcdcb1.roa
File:                     300df4cb-39d8-3d08-99e0-4c4021fcdcb1.roa (raw, json)
Hash identifier:          7qAyGM7HpFQ0aAl94ulSbf/VVyASxo1F8rs9MClyfBk=
Subject key identifier:   6E:18:F0:93:34:E1:B3:1D:28:38:4E:79:4F:FD:ED:E1:AE:17:E4:47
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849EBEA8890557DF1DEC0C79500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300df4cb-39d8-3d08-99e0-4c4021fcdcb1.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        23.192.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:88:90:55:7d:f1:de:c0:c7:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=90d1c0f7-1557-47e7-9515-8ff06f8d10ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:f6:0f:e0:52:68:b3:9e:48:14:97:7e:77:
                    31:d3:40:2b:f9:95:ac:0f:6b:50:38:ae:12:08:f0:
                    a1:59:88:68:59:d6:8d:b0:18:af:bf:7d:bf:c1:31:
                    85:62:c5:e3:39:a2:99:14:18:ba:08:d7:11:eb:44:
                    39:a9:06:61:1d:41:f9:98:49:2c:9f:39:b1:29:3c:
                    22:f5:75:4c:01:00:e1:ee:9d:0f:5c:a9:39:2c:e9:
                    8e:db:80:53:d2:84:c8:00:64:85:a3:d8:60:89:ca:
                    07:6a:a1:95:88:71:c7:31:e8:bc:5b:de:5b:0c:30:
                    bd:c9:8b:5a:ae:ea:04:6f:74:a1:fc:96:92:67:3f:
                    5f:8f:9b:1a:48:33:73:58:5d:ba:77:47:fa:e2:34:
                    ca:a2:45:56:b4:ba:c8:0f:84:37:bc:c2:e4:35:c6:
                    3d:07:92:c5:21:ef:70:b8:eb:de:e0:a3:ec:f7:8d:
                    9b:48:13:ed:a9:c5:4f:41:95:78:99:1f:61:51:06:
                    5f:ef:1f:a0:41:d8:0e:92:6e:aa:38:46:7a:2d:e9:
                    cc:04:41:ef:17:4f:b7:76:7b:63:1b:d9:43:5b:13:
                    f7:d6:f4:6b:cf:28:b5:de:3f:e3:38:b2:24:e5:8f:
                    8a:cc:49:da:c4:e1:58:fe:01:5d:88:f1:8a:f5:16:
                    95:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:18:F0:93:34:E1:B3:1D:28:38:4E:79:4F:FD:ED:E1:AE:17:E4:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300df4cb-39d8-3d08-99e0-4c4021fcdcb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a0:f1:42:f2:94:82:3c:6c:91:ea:b5:87:8b:5d:92:0b:f4:
         68:00:2d:38:58:84:4e:43:43:91:97:40:a9:73:a2:e8:de:2e:
         f8:a3:d8:0f:f8:e6:21:0b:03:b1:0d:02:50:8d:56:64:ea:6d:
         41:9d:fc:4e:12:21:51:41:a6:a5:22:ef:a2:e0:55:92:2f:3b:
         fb:39:45:29:18:3b:b0:93:9a:74:69:99:69:27:66:52:9f:03:
         19:40:b8:20:87:14:04:9b:8c:8d:40:ed:f0:a9:b9:90:64:20:
         dd:95:6f:8b:94:42:1e:aa:56:c9:a4:59:27:8e:c3:57:47:cc:
         ba:29:e7:d8:3e:bf:12:a3:fd:00:7d:01:00:f9:59:70:ac:21:
         ca:ce:d5:b6:ba:5a:97:c1:16:3d:c0:04:c1:de:3a:47:99:f3:
         98:8f:9b:44:56:40:c3:24:19:0f:5d:81:c4:25:3a:a1:69:10:
         fc:ca:35:6d:71:fe:1b:91:d2:8e:18:89:8b:f7:40:4c:c7:23:
         c4:1e:05:7d:45:f7:7f:b1:af:55:40:07:be:06:cd:30:f2:c3:
         ec:94:1f:0d:a1:9f:a5:74:7a:38:b4:71:db:5c:17:ee:37:7f:
         8b:04:63:69:b4:50:9d:2c:09:05:7e:f3:23:49:22:32:b7:e5:
         41:0b:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:26 2025 by rpki-client