Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57100ab7-059f-36b7-bb8b-b3f9e97fcb1b.roa
File:                     57100ab7-059f-36b7-bb8b-b3f9e97fcb1b.roa (raw, json)
Hash identifier:          qU33ovOST36pPkM6hRFWUOXNwxtI4Fg6lLpkS/Q3e24=
Subject key identifier:   70:F7:01:24:2C:D9:F2:BC:64:55:DD:9C:2C:0B:D1:C0:B7:3D:18:B6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E38A37DCAD28D2D5A8F83200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57100ab7-059f-36b7-bb8b-b3f9e97fcb1b.roa
Signing time:             Sun 18 May 2025 01:00:47 +0000
ROA not before:           Sun 18 May 2025 01:00:47 +0000
ROA not after:            Sat 16 Aug 2025 01:00:47 +0000
asID:                     16625
IP address blocks:        23.201.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e3:8a:37:dc:ad:28:d2:d5:a8:f8:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 18 01:00:47 2025 GMT
            Not After : Aug 16 01:00:47 2025 GMT
        Subject: CN=802823f6-0b36-429c-8c9a-802ad78cb0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:6d:74:27:39:41:90:62:60:ba:b9:8f:a3:
                    35:df:9c:70:58:36:9c:32:f0:de:d2:8c:ad:6d:3b:
                    b9:b3:85:d2:66:9c:f1:76:56:1f:71:55:cd:b5:a0:
                    09:08:6f:7c:ba:2b:f2:42:3e:99:4b:95:73:7b:dc:
                    64:1d:2e:c2:63:07:d4:78:88:a1:f8:5e:b5:c4:60:
                    67:aa:4e:99:b7:7d:28:21:e9:e1:3a:47:c9:ac:42:
                    c0:1d:c7:e5:11:62:bc:89:ff:b8:d4:18:bd:b2:c3:
                    1d:71:81:54:36:0f:0a:62:25:5f:4a:00:2c:b1:bd:
                    db:22:a6:9d:49:5a:ff:14:fb:47:8e:ed:5a:64:08:
                    ef:82:3f:1e:4d:d3:5a:bb:d7:64:0f:0b:ae:ac:c6:
                    cc:77:74:15:2f:18:aa:0d:20:8e:a2:88:06:1a:25:
                    42:8e:56:c4:6c:ea:48:e5:fa:82:57:f4:e9:c6:1f:
                    20:1f:e6:05:f9:9f:3f:3c:ee:e5:d4:2f:25:42:43:
                    c7:46:bd:48:69:06:d3:9b:7f:92:71:10:d7:fd:8d:
                    70:ce:81:8d:74:4b:09:10:e4:f1:57:f1:30:4c:c7:
                    dd:dd:9b:28:85:5b:b0:60:44:57:db:fc:a9:a5:00:
                    bc:03:05:ec:f0:ab:a2:17:7f:f7:3f:ba:14:73:11:
                    15:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:01:24:2C:D9:F2:BC:64:55:DD:9C:2C:0B:D1:C0:B7:3D:18:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57100ab7-059f-36b7-bb8b-b3f9e97fcb1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:dd:27:b4:d9:85:cb:3b:aa:ef:7b:89:de:a9:d0:a0:f5:7c:
         e0:02:b0:8f:6e:84:c8:e5:c3:5c:83:d0:9a:d6:82:0e:18:9a:
         ad:b0:5f:57:1f:86:7c:36:50:0b:f8:6d:e6:ea:82:e3:8d:23:
         49:03:36:1a:12:18:c6:3a:d9:6a:13:cd:ef:67:fa:a6:ed:5d:
         42:fd:ec:d6:46:43:72:48:a9:36:c0:0e:5c:a8:24:40:37:02:
         82:92:cc:76:01:2e:5c:7e:3f:d9:0c:c7:40:22:bd:52:19:d3:
         d3:1b:af:de:ab:31:02:5b:7d:d0:14:53:51:7b:96:40:90:29:
         70:d3:82:00:d6:d7:3a:be:8c:7b:68:d7:57:c4:6b:66:34:75:
         76:46:1f:de:85:a9:9d:25:bd:20:07:a7:54:1e:90:b4:44:8d:
         81:63:c6:27:10:7b:99:c3:7d:b5:5e:b5:7d:c8:ee:d2:b9:8d:
         15:41:4d:86:d5:99:25:7c:f5:e0:27:a4:7e:c1:8a:e0:c3:1a:
         19:17:a3:9b:ee:0e:45:30:21:f9:d1:8e:f5:c8:d8:df:11:6c:
         e9:98:90:8a:ba:65:c5:4f:37:a9:c1:53:71:d8:e4:9e:b5:03:
         01:3c:a8:b4:c9:df:2f:42:df:13:77:0b:a7:05:21:3e:b8:45:
         46:d5:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:58 2025 by rpki-client