Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80ad42cd-a52f-3451-b767-485dbe30ea0a.roa
File:                     80ad42cd-a52f-3451-b767-485dbe30ea0a.roa (raw, json)
Hash identifier:          g6nvGITD9054DnZvGd5xA7+kUMjHH9EKjI/EFmLLEYo=
Subject key identifier:   89:F8:3C:E8:1F:58:4E:91:C5:FC:B5:4F:34:D7:59:9B:DA:A6:DA:7C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E7BA6F1498A0A8087B5CD780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80ad42cd-a52f-3451-b767-485dbe30ea0a.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     24319
IP address blocks:        23.206.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:6f:14:98:a0:a8:08:7b:5c:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=2281c492-2f21-49c2-9deb-2df434dca109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:bf:7b:61:a5:1e:95:fb:4e:56:a9:0c:bf:
                    6f:a3:bc:0f:c8:f8:77:39:89:e7:8a:0d:36:96:94:
                    9b:c0:da:6b:a3:16:ff:bc:fd:da:a6:6b:48:48:b7:
                    a0:89:7a:79:ab:de:61:0e:9b:1e:96:42:c7:6d:f3:
                    65:f4:f6:65:52:e1:d8:3e:6f:4b:57:e0:36:3a:69:
                    6d:79:ab:ba:ff:17:9b:93:56:33:6d:aa:e8:fd:b9:
                    e8:3a:c7:43:a7:94:9f:29:e8:43:f0:38:a8:ca:8a:
                    06:b4:23:7b:70:82:3e:bd:5c:62:19:1e:d1:00:01:
                    e0:3c:4c:8b:42:1a:82:88:58:e0:66:25:15:1a:23:
                    b1:58:1d:35:92:07:1b:6d:ae:d4:82:70:68:b5:f6:
                    59:51:77:48:48:c4:65:72:16:35:b6:2e:c7:5c:b8:
                    66:49:0e:1a:c0:43:8c:f7:06:6b:85:1e:30:aa:0d:
                    67:35:d0:3a:b1:8f:b5:01:e7:4e:80:95:20:eb:18:
                    be:16:fe:d2:86:93:19:10:d1:33:a0:d3:61:91:d2:
                    09:9b:26:c8:d4:0f:56:7f:34:25:e6:b4:28:06:12:
                    2a:8f:a2:89:ec:13:dc:24:20:5d:8f:85:cc:50:62:
                    aa:ab:ad:cd:06:f9:d0:b3:ac:27:44:4f:13:ea:e5:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F8:3C:E8:1F:58:4E:91:C5:FC:B5:4F:34:D7:59:9B:DA:A6:DA:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80ad42cd-a52f-3451-b767-485dbe30ea0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:7a:e0:e2:24:8b:59:a8:0d:df:1b:b2:ca:4b:44:92:fb:e2:
         8d:2d:5a:5b:cd:99:d9:78:ba:21:56:3e:75:3a:3d:cb:16:bf:
         b2:8b:d7:77:ab:5a:c5:8e:9c:d4:5e:49:d1:20:96:8a:88:2c:
         06:d2:de:88:56:3a:a1:c0:fb:fc:56:2e:2d:4d:78:be:33:c2:
         a5:16:e1:80:59:16:10:ac:32:d6:7e:4f:35:7d:4d:7a:31:32:
         a9:20:93:a0:25:c0:0f:4b:ce:49:7a:77:67:d1:75:fa:03:22:
         c1:cf:3e:7d:8e:17:50:4f:85:62:1b:b0:c3:fa:aa:b3:67:ff:
         ab:03:ec:db:f5:51:2d:90:30:df:a5:2e:12:15:95:cb:d6:bc:
         3d:5b:94:bd:c7:bc:32:96:3d:bf:cd:82:9c:f8:92:74:9a:cd:
         cc:db:ff:b3:8e:3a:f9:6d:e4:54:79:48:64:3d:a1:d1:8e:ce:
         94:52:4c:2e:7c:32:f8:41:a4:71:26:8b:3e:ea:71:55:7c:16:
         b7:db:46:f7:98:49:ea:a2:ff:23:64:d2:d3:4e:db:dd:55:d7:
         cc:11:b0:f2:4d:ca:d8:9e:26:92:82:b0:94:ac:87:8f:63:f7:
         57:3e:29:3c:5b:c6:e5:33:0a:ab:dd:80:c6:7c:1d:66:3c:56:
         e9:22:f7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:03:04 2025 by rpki-client