Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39f26b73-e25c-347e-a119-50e919aa6f2f.roa
File:                     39f26b73-e25c-347e-a119-50e919aa6f2f.roa (raw, json)
Hash identifier:          S3/1GncdkkCBJrUuAMPVnC7eEiirP0bjJ7S20fGCxYU=
Subject key identifier:   66:3A:09:20:4B:BA:A2:A6:D3:FA:26:4B:13:CA:4C:AE:B4:DE:A3:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495C247C0CE2B6B480CCE45080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39f26b73-e25c-347e-a119-50e919aa6f2f.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     20940
IP address blocks:        23.44.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:7c:0c:e2:b6:b4:80:cc:e4:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=202002b2-6261-493a-be46-289b456c821d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:92:c5:3c:cd:ab:6a:a6:d4:94:71:d2:e8:db:
                    c4:f1:c7:9c:bb:75:6e:26:d9:c3:fc:46:a6:39:a6:
                    e7:28:5e:44:81:fb:02:23:63:1c:41:e0:ba:b5:d3:
                    64:05:49:f0:bb:47:a0:b5:58:7e:24:da:77:38:01:
                    10:39:1e:f1:02:29:a1:01:07:8e:f4:d2:47:7d:92:
                    6a:00:01:c8:e7:ed:4c:51:c0:7e:c4:0a:27:5b:63:
                    36:cc:1c:50:74:20:0d:b0:1c:72:80:2b:fa:3b:e1:
                    a9:ee:b6:98:7f:e2:96:1a:35:b5:e2:5a:90:6b:9d:
                    84:ed:06:34:2f:d1:b8:04:e8:63:29:c4:c3:61:01:
                    11:b3:79:5c:53:ac:fc:0b:7c:a4:49:db:cd:dd:b6:
                    1c:ef:e6:d5:e4:ab:50:b2:70:97:87:74:c5:42:4c:
                    d2:10:97:99:bc:62:79:bc:12:84:0c:56:3b:6b:b6:
                    b3:9f:a0:5e:3b:c8:2d:0a:95:00:95:9c:c9:21:0b:
                    8c:62:da:7c:72:68:74:f4:c5:cf:53:dc:c6:9e:a4:
                    a7:96:84:fb:7b:35:e3:7d:f5:ce:4c:28:95:63:5e:
                    f4:f9:70:0f:ff:f2:6f:de:fd:fc:30:a0:c2:6d:aa:
                    26:34:ab:a0:c7:fc:fa:29:ff:40:da:ad:02:ea:85:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3A:09:20:4B:BA:A2:A6:D3:FA:26:4B:13:CA:4C:AE:B4:DE:A3:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39f26b73-e25c-347e-a119-50e919aa6f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:28:86:d6:40:81:68:7e:15:3e:f9:27:f2:0c:0a:69:1c:
         0a:76:81:f2:09:f2:c3:c9:3f:11:a4:b0:90:c7:66:94:8a:07:
         0f:a6:bf:0e:6c:54:e0:70:41:c4:17:8b:e9:4e:bf:99:8c:9b:
         2c:08:f6:5c:26:eb:8e:d1:73:ff:2b:07:3f:f9:35:eb:45:d4:
         94:ae:fd:62:d5:54:97:65:0d:e8:7b:d5:21:8f:31:ad:f9:16:
         f3:f8:fe:e9:77:23:25:b9:c5:2a:84:14:b0:5f:3a:0e:67:3d:
         5a:fa:0b:17:c0:a2:f4:b4:94:46:3c:24:a1:2d:68:d5:ae:0d:
         67:0f:90:ba:9d:29:36:ed:bc:72:2a:22:97:c2:27:6a:e9:eb:
         e8:34:be:20:8f:e0:7a:1d:f2:ae:31:91:85:a7:79:db:ac:81:
         40:85:bd:31:1e:87:b4:e2:88:d0:04:fc:b4:2e:13:21:5b:8c:
         f0:0d:3d:8d:7a:58:50:66:d5:03:96:30:e0:6e:b7:ee:06:fb:
         67:86:25:8b:ee:fd:1b:7b:50:8a:d6:3b:a5:85:76:33:1b:b5:
         db:c6:0d:04:4b:59:f9:9c:0a:db:46:0d:84:ed:23:d9:31:fa:
         2e:f5:67:3c:26:5b:7c:82:8b:76:46:65:ea:ed:df:d4:c1:03:
         28:20:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:54 2025 by rpki-client