Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/21d3df1a-6e87-35a1-905b-b669e1e05a27.roa
File:                     21d3df1a-6e87-35a1-905b-b669e1e05a27.roa (raw, json)
Hash identifier:          GPLBNuu1jPdjtc7IGcKEPaQATVjYbaMhG6tXmkliaMo=
Subject key identifier:   DC:7D:32:3A:06:F7:51:AD:14:8C:BC:06:B1:20:A6:05:65:C8:A2:74
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584B00BBCCAA75F37AC1DD0A4980
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/21d3df1a-6e87-35a1-905b-b669e1e05a27.roa
Signing time:             Thu 28 Aug 2025 04:46:06 +0000
ROA not before:           Thu 28 Aug 2025 04:46:06 +0000
ROA not after:            Wed 26 Nov 2025 05:46:06 +0000
asID:                     14956
IP address blocks:        45.59.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:bb:cc:aa:75:f3:7a:c1:dd:0a:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Aug 28 04:46:06 2025 GMT
            Not After : Nov 26 05:46:06 2025 GMT
        Subject: CN=6feb0643-6ad4-49b2-aee4-f65767061277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:2d:de:07:0f:ce:e0:31:e7:11:73:c6:8d:
                    9b:2e:7e:06:d2:e1:df:b6:67:8a:9c:af:b0:f8:9f:
                    94:ac:e2:68:61:36:94:52:ef:83:93:39:35:24:be:
                    b9:90:03:74:b8:79:b2:43:43:bb:c6:2e:c2:a6:6e:
                    23:d6:95:fb:2d:8c:11:40:d1:30:a4:68:cb:5b:78:
                    19:04:26:67:82:03:b8:f2:2f:e7:ca:dd:e8:73:1d:
                    a4:43:56:65:99:4e:bf:5d:63:ae:92:06:bc:9f:b5:
                    b8:d6:b8:b7:aa:09:64:02:dc:26:ba:ab:fb:4e:f3:
                    7c:60:00:35:20:fe:ee:39:26:d2:ed:b0:f6:0b:b4:
                    87:ac:1b:a0:f7:91:b5:e0:6a:41:58:4b:0a:26:12:
                    d9:8d:67:ed:12:46:90:15:e0:d0:49:3d:07:a2:62:
                    d5:3e:f0:b6:3a:cc:a8:b4:26:f7:22:35:55:84:c8:
                    39:6a:26:73:59:8b:73:23:b8:3f:2e:86:fa:d7:d6:
                    14:ee:2f:a9:3f:60:1f:0d:82:6a:45:a2:7f:18:58:
                    0a:09:3e:31:ef:6f:1e:89:ef:0f:d2:85:fc:9a:de:
                    ac:db:8a:00:41:3c:62:91:53:d6:1a:d7:88:db:a4:
                    f5:04:cc:64:4d:38:29:da:35:8d:47:4b:01:2d:d2:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7D:32:3A:06:F7:51:AD:14:8C:BC:06:B1:20:A6:05:65:C8:A2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/21d3df1a-6e87-35a1-905b-b669e1e05a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:12:ed:a2:83:9e:76:ab:b5:02:b5:a7:bd:f3:17:63:da:42:
         3e:27:0a:d2:37:39:e7:d3:f9:86:25:73:d4:3c:e9:cf:d1:c8:
         fc:93:cc:ac:8e:7f:f9:ee:79:ac:5e:02:71:ca:cd:af:64:ae:
         06:b0:b8:02:d3:ab:d4:04:93:2b:3b:dc:13:3d:2f:aa:91:14:
         90:6e:5e:67:d5:33:28:71:b9:8a:68:6e:a3:4e:a3:bc:08:3f:
         18:da:d7:04:39:92:26:93:65:cc:3d:a5:06:3e:37:b8:37:5a:
         e5:9b:5f:b5:8e:b9:cf:27:3b:e8:cc:d1:f4:e3:f8:8a:5f:e0:
         c1:34:8f:74:63:4e:7e:b5:d6:be:25:a6:44:29:fd:4e:62:3f:
         b4:1c:bc:46:e2:e0:13:6f:b9:40:08:71:5e:20:b2:12:f0:9e:
         d6:6f:18:31:ad:dd:9f:6c:56:59:46:13:dd:02:80:f6:f6:f5:
         78:a5:b3:b2:9a:fe:ad:4d:9f:25:23:4b:c8:56:f1:ac:d9:ca:
         7c:68:58:57:05:40:ec:7f:53:8a:e9:1e:35:f8:7b:c3:d1:e1:
         21:15:da:cf:60:74:86:b5:12:66:5c:bd:61:e7:68:77:ae:a4:
         25:1e:6d:75:de:d8:e1:06:df:f3:22:63:33:72:d6:ce:97:03:
         46:1c:18:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:48:31 2025 by rpki-client