Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1391285-c9e3-3988-9306-997b2be994e9.roa
File:                     d1391285-c9e3-3988-9306-997b2be994e9.roa (raw, json)
Hash identifier:          ff2ZtTmKXMjb9wyex1ERqRVbYHtMcWpCQN0Whlt1yXc=
Subject key identifier:   F5:8F:C4:A8:42:FC:B2:90:62:68:E0:56:D9:8D:B2:C1:61:4F:44:DA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584913AC42A6F752396787083140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1391285-c9e3-3988-9306-997b2be994e9.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.67.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:42:a6:f7:52:39:67:87:08:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=e208b002-3029-4986-b8c6-a4e3b6861c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:d6:d3:b7:b8:a5:61:37:ce:ba:a2:00:9d:
                    ca:e1:fb:5f:89:0f:8a:9c:14:48:04:09:2e:fc:69:
                    3b:ab:07:f5:3d:f3:ae:01:a2:50:6f:43:e7:76:06:
                    9b:31:14:b6:ff:36:27:cf:7f:3f:88:16:26:8d:3d:
                    01:fd:97:4f:7d:a9:93:0a:ee:f1:55:b3:23:2b:84:
                    60:ea:cf:78:15:ea:c0:f6:d2:b1:e4:52:fc:0c:92:
                    56:a4:dd:35:01:65:8b:9b:a3:03:a4:35:78:6f:40:
                    2d:34:6f:1f:bf:d9:5c:55:c6:d8:a9:9a:73:08:81:
                    25:63:0e:55:f5:11:33:2b:cb:6f:b2:cb:46:ca:2a:
                    8a:12:f5:86:61:ea:23:ac:6e:56:df:19:f8:f3:70:
                    8c:2f:3a:83:6f:ed:28:ab:ab:95:3f:71:61:c6:6a:
                    3b:e4:3a:0b:b0:af:9c:b2:fd:a6:e0:30:8f:23:56:
                    40:29:ad:ab:e2:00:51:46:44:e7:5e:13:d1:04:03:
                    23:9f:4b:ac:e0:8d:ea:b6:ca:d3:5a:52:5a:57:84:
                    15:02:60:38:3a:b5:37:c9:b5:d3:8c:22:03:15:78:
                    62:bc:e3:86:eb:e7:9d:74:c5:29:63:1f:a6:f3:1c:
                    93:2c:d6:a8:e9:a7:83:6b:c7:22:f0:28:04:0f:5a:
                    a3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8F:C4:A8:42:FC:B2:90:62:68:E0:56:D9:8D:B2:C1:61:4F:44:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1391285-c9e3-3988-9306-997b2be994e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.67.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:0b:5d:d0:e9:b5:67:e0:69:7f:af:d8:80:5f:1f:9c:27:
         12:ea:6e:06:6d:d3:0b:fa:1b:76:4e:04:2c:be:7d:13:e8:5b:
         b7:fd:39:38:fc:5e:a4:f7:78:1e:b2:b3:35:41:6b:4f:32:cd:
         99:23:dd:0d:b5:1f:f9:50:c4:67:18:02:66:b8:66:2d:48:30:
         5a:b1:06:ea:ee:33:8d:80:3a:11:84:f1:a1:25:62:3e:a1:a0:
         ce:c3:f0:43:64:23:20:05:3e:7f:cc:47:09:9e:76:a5:c5:71:
         2b:9a:56:05:bc:3d:3c:0b:08:75:c2:5a:26:ce:98:ee:43:eb:
         0f:98:aa:d7:10:d3:03:9a:e9:47:93:a1:89:9d:1b:7d:02:18:
         db:67:4a:6d:bb:e9:cb:05:98:63:29:d4:6d:c3:d1:1c:41:7e:
         24:a9:23:7c:99:35:b6:c6:13:63:e2:ef:65:04:52:4d:58:13:
         be:9d:49:14:dc:72:6a:34:3c:27:e3:d5:ae:7f:dd:46:c3:86:
         da:b1:f1:ea:8c:75:80:32:dd:cc:f4:15:28:0c:67:6f:b1:63:
         a1:d3:1f:1e:6e:9b:a9:dc:3c:5e:1c:e4:e3:ee:1b:c6:37:59:
         d4:98:e3:6b:ff:1a:b1:dd:c9:69:d8:6a:99:21:f1:16:1f:de:
         5d:e4:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:07 2025 by rpki-client