Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/980003ab-14ad-3e72-bc29-c3a2e3975fe1.roa
File:                     980003ab-14ad-3e72-bc29-c3a2e3975fe1.roa (raw, json)
Hash identifier:          9r3gt03/D7yN7wO1KNyk8MUxm1yEm0r9AiI2JhelHAc=
Subject key identifier:   CF:1E:F7:B9:BA:DA:BE:39:3D:8E:44:96:0D:32:F9:48:FA:70:70:99
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858491ED6F12EC921B75AAC109520
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/980003ab-14ad-3e72-bc29-c3a2e3975fe1.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        23.79.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:f1:2e:c9:21:b7:5a:ac:10:95:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=3680ff78-121c-4ca2-b5d0-5b946c0330f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:59:13:92:6d:e1:2d:a8:a8:1f:8f:c1:6f:
                    8d:82:3c:29:24:fd:a7:28:a1:27:a9:5d:79:04:2f:
                    a1:85:c6:4b:1b:0e:61:7e:5d:44:f9:50:b6:dd:03:
                    e7:df:2f:29:02:2a:8f:b4:54:19:42:bb:4f:0e:17:
                    2b:82:74:d9:8e:c0:b5:4b:a1:2e:6c:d3:4f:9d:75:
                    7a:ec:9c:c4:5d:45:99:2b:1f:f5:b6:db:33:28:c8:
                    c7:ba:ec:71:8c:57:dd:a8:cb:79:e6:9b:77:07:e6:
                    83:22:bb:8b:8a:6f:90:58:46:1f:cc:30:79:64:b5:
                    44:5d:e6:c8:77:4b:fb:7c:ab:07:66:c1:0c:e8:1e:
                    9d:8b:94:91:d9:4d:f3:41:ee:b6:a4:62:f4:d1:d2:
                    f8:fd:c7:89:62:d1:73:8e:ab:78:a9:74:7e:8d:9b:
                    1e:27:c6:c2:72:4b:af:4b:8f:7c:a7:c0:fe:58:ae:
                    2c:0c:e9:aa:02:07:b0:c1:af:a1:6a:48:e7:c8:44:
                    58:3c:9c:e9:ad:cf:64:7e:63:e0:64:bb:9d:51:6d:
                    c0:f3:6f:c7:d5:0c:54:97:55:46:98:79:eb:89:81:
                    2e:bb:6d:b0:ae:6f:fa:cd:57:8c:9e:40:2e:54:30:
                    8e:c4:7b:bf:df:4d:a9:e6:18:66:a3:e8:f5:82:9a:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1E:F7:B9:BA:DA:BE:39:3D:8E:44:96:0D:32:F9:48:FA:70:70:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/980003ab-14ad-3e72-bc29-c3a2e3975fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.79.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:66:6f:46:f0:05:d5:44:d0:ff:6d:b1:ee:d5:e4:4b:20:19:
         07:06:ac:95:fc:71:68:2b:4d:b5:ca:a9:51:b2:32:31:6f:65:
         65:6e:53:cf:04:4a:b2:75:ce:e6:c9:bc:9b:ae:a8:89:19:22:
         49:56:80:63:a0:ed:d7:62:92:64:a4:90:ed:55:18:de:3d:10:
         19:9b:15:20:3e:d9:7d:ca:ba:7f:49:85:76:7e:b3:86:0e:19:
         c2:fc:a5:b4:95:3a:fb:6c:e6:47:81:8e:38:61:ef:4a:a3:3e:
         8e:55:be:5c:1a:38:6e:bf:f7:05:76:2e:55:99:bf:d2:48:cd:
         52:dc:47:fd:59:a1:be:5d:c7:03:53:b9:57:03:8e:1c:22:3d:
         ce:bb:35:0a:94:ea:48:74:60:dd:28:67:e4:ba:e8:29:f1:2f:
         6b:fd:cf:d4:88:df:c7:f4:3d:a1:a3:1d:36:75:7d:89:5b:ff:
         1e:b7:85:b0:8a:0e:26:f4:38:a7:55:03:fd:48:4b:c4:69:94:
         85:aa:40:f3:47:01:ce:b0:16:b9:e5:99:f4:b8:20:c2:4e:69:
         0e:91:04:4e:77:d5:01:bf:5a:71:10:ab:66:1f:b0:70:85:63:
         92:20:9f:b8:1b:99:2e:f2:81:ad:2b:75:c9:c7:5a:e0:79:8b:
         e3:c5:6e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:01:07 2025 by rpki-client