Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a7ccf52-ac3d-3834-a0b7-6c01fca2ac92.roa
File:                     7a7ccf52-ac3d-3834-a0b7-6c01fca2ac92.roa (raw, json)
Hash identifier:          HbykI2Q4LbTWOYpHd0Ci2PbOr7izx6HVD9fsoP6sCI0=
Subject key identifier:   13:0C:D5:32:74:FF:82:6B:B7:BF:4F:74:B5:16:A5:D7:DF:8B:25:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848D0ABBFEF801239629CBA1E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a7ccf52-ac3d-3834-a0b7-6c01fca2ac92.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     25019
IP address blocks:        23.206.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:bf:ef:80:12:39:62:9c:ba:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=0f76c8c8-a12e-4f86-bd74-d1b7e8a7ce89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:9f:be:2d:23:b4:70:71:ad:7b:96:ff:cd:
                    d7:78:82:d2:25:b7:d5:df:3c:34:fc:ad:ab:eb:87:
                    d0:5f:8b:21:31:a2:c5:79:b5:b1:dc:d2:3c:8a:04:
                    78:8d:c9:e4:43:ba:a7:45:72:31:b4:d0:17:68:64:
                    0f:77:7c:67:7f:41:88:b2:a2:8a:ff:dc:af:3d:cb:
                    34:ea:ab:44:09:db:b8:f1:fc:fb:0a:1d:93:8d:4f:
                    66:d1:f2:f9:43:ca:9b:ba:81:8a:ce:02:65:37:93:
                    03:df:f8:dc:d8:86:dd:68:4a:e6:ac:02:81:49:38:
                    bc:c1:06:9f:f4:d0:51:99:bd:d1:7d:ed:ee:f1:ea:
                    a6:dc:a5:e3:af:51:bd:d6:0a:90:03:56:67:70:71:
                    22:42:c7:56:ec:81:fa:af:6d:a9:65:a2:36:06:69:
                    b7:d4:44:97:f3:6b:9f:36:e0:11:e1:b4:5a:2e:31:
                    68:4b:94:ab:b4:4e:1f:39:b2:00:5b:ac:b2:4a:54:
                    35:f4:a9:3b:b5:64:6f:f2:84:c2:0b:8d:5a:46:db:
                    f2:f7:9b:a7:32:51:7a:ef:66:0b:9a:41:39:97:b4:
                    05:d0:01:1b:6b:e5:36:0c:a6:ba:2a:cc:9b:6c:30:
                    01:2b:97:04:f0:77:88:74:dd:36:15:e3:d9:0a:a5:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0C:D5:32:74:FF:82:6B:B7:BF:4F:74:B5:16:A5:D7:DF:8B:25:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a7ccf52-ac3d-3834-a0b7-6c01fca2ac92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7e:db:85:0a:4f:3b:af:c7:b2:00:64:9f:17:25:cb:e6:50:
         df:a9:43:93:8a:89:98:cb:f0:b4:f1:d3:84:76:65:3a:8f:9c:
         79:ba:7c:3a:67:8f:8a:b7:2d:a6:eb:13:c9:53:f6:ab:03:5b:
         b1:b5:1a:1a:87:4e:e1:ab:6e:d2:3f:a7:a1:52:78:44:58:25:
         1c:ef:ca:67:a5:5e:9e:4c:0d:ac:61:c7:bf:3b:6a:16:28:e4:
         1d:32:92:c6:72:5d:78:88:89:d6:40:b6:64:25:34:82:d8:88:
         bc:51:94:e5:61:e1:36:90:83:65:8d:27:e1:54:8e:ca:3f:1d:
         4c:11:6d:ff:23:52:ce:ff:31:f1:2c:ad:e6:a7:88:19:6e:a4:
         f8:b9:06:f2:d7:1a:58:78:9b:62:f1:78:30:6f:02:19:1e:ac:
         4b:49:73:8f:05:d5:11:6d:47:9e:05:69:c2:9b:5b:dd:3e:ba:
         d9:3a:a6:70:95:7d:9e:51:c1:b0:eb:26:21:dc:d8:98:08:57:
         97:ab:01:f9:04:eb:0c:c2:81:a2:51:5b:cc:bc:71:87:c6:3b:
         60:bc:e3:07:e3:5d:0f:4d:1f:94:11:a5:ab:c6:01:7b:4b:89:
         59:28:1c:88:96:30:c4:64:ea:09:e6:63:4c:9a:1d:bd:bb:d6:
         75:18:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:36 2025 by rpki-client