Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/d44d8d55-73df-3cbf-9b73-72b2a4577a01.roa
File:                     d44d8d55-73df-3cbf-9b73-72b2a4577a01.roa (raw, json)
Hash identifier:          HiAhF5eI+X0iVBasX3buR1YNbfPxmv0CgZhjs7lW+5E=
Subject key identifier:   A3:15:1F:B9:97:F1:A7:B6:5D:CA:64:E6:56:FB:87:DF:06:F7:88:68
Certificate issuer:       /CN=7ba6ea55-b21d-42b9-873f-84046b97c5ff
Certificate serial:       010D0C9F4328584AC8928BDD007060BF23A10A80
Authority key identifier: EA:75:A1:ED:67:29:47:60:0A:00:1F:74:48:1C:D3:0D:36:CB:73:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/d44d8d55-73df-3cbf-9b73-72b2a4577a01.roa
Signing time:             Fri 08 Aug 2025 01:57:42 +0000
ROA not before:           Fri 08 Aug 2025 01:57:42 +0000
ROA not after:            Thu 06 Nov 2025 02:57:42 +0000
asID:                     7029
IP address blocks:        23.143.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/7ba6ea55-b21d-42b9-873f-84046b97c5ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/7ba6ea55-b21d-42b9-873f-84046b97c5ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:92:8b:dd:00:70:60:bf:23:a1:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba6ea55-b21d-42b9-873f-84046b97c5ff
        Validity
            Not Before: Aug  8 01:57:42 2025 GMT
            Not After : Nov  6 02:57:42 2025 GMT
        Subject: CN=781bfd90-2109-4842-913f-1093564c966e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6c:f7:99:0e:f7:de:79:a7:8e:86:80:19:d3:
                    e8:e5:db:18:18:d8:1c:24:49:9c:f3:05:b6:c9:cd:
                    8a:48:47:18:45:65:55:ae:fc:52:84:7c:67:4b:1b:
                    48:f1:c5:94:de:8e:9c:d2:c7:94:94:27:b5:eb:c9:
                    7b:8c:ca:2f:d6:61:3d:43:cd:34:ae:c7:ca:74:9b:
                    1b:e2:3f:8c:71:d1:73:a4:e6:6c:e2:ca:33:e9:d1:
                    d0:f1:c0:5d:54:e5:49:ed:c9:f9:10:de:2f:f3:82:
                    cd:39:12:63:c4:f3:06:8c:19:64:eb:8e:aa:b3:c8:
                    8a:31:80:c9:26:4a:bf:b4:39:d3:61:87:28:63:52:
                    9c:9f:24:d1:d2:9b:f6:be:34:9d:5f:b1:2d:d3:59:
                    75:8d:6c:05:12:e9:17:41:d0:c1:ce:04:e3:78:34:
                    15:a8:61:ca:21:70:f3:4d:e9:ab:25:49:8e:89:e3:
                    67:ae:7d:47:1a:8a:76:d8:88:b2:c3:f2:8e:c1:3e:
                    44:df:d6:b2:24:1a:d1:b3:c3:bd:5e:2e:4a:8e:55:
                    40:42:de:fc:7f:8f:cc:dc:34:1d:5b:fe:1d:71:20:
                    04:36:93:5e:4e:66:2f:32:e7:a6:55:b6:21:d0:04:
                    07:22:92:4f:5e:fc:b9:35:15:95:13:3f:fc:b3:61:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:15:1F:B9:97:F1:A7:B6:5D:CA:64:E6:56:FB:87:DF:06:F7:88:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/d44d8d55-73df-3cbf-9b73-72b2a4577a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/7ba6ea55-b21d-42b9-873f-84046b97c5ff.crl

            X509v3 Authority Key Identifier:
                keyid:EA:75:A1:ED:67:29:47:60:0A:00:1F:74:48:1C:D3:0D:36:CB:73:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ac:b2:0e:c8:d8:d4:1f:b9:20:8a:1f:96:ae:ef:16:f4:c6:
         ef:aa:ec:be:8a:ec:f0:90:2b:6f:0b:a9:b3:38:79:56:05:e3:
         27:1f:01:9c:52:cc:29:53:f7:02:74:61:e3:4f:b3:9e:92:cd:
         1c:87:9f:92:dd:54:4c:7e:a5:e7:3a:5f:db:29:89:d3:2e:4e:
         8d:c5:77:ec:f2:73:60:2c:ae:f2:b6:b9:d3:0e:08:24:4f:07:
         cb:00:e2:25:56:bc:1e:0e:60:a4:fe:41:dc:8b:df:18:d6:01:
         6d:c4:47:c5:2e:a6:96:c6:fc:30:c8:e7:be:90:d6:d1:a8:f0:
         e7:ba:20:cc:d0:0a:65:e9:78:d4:e1:45:20:78:52:b6:aa:41:
         20:51:88:be:5b:a3:c8:5b:b9:ab:70:e1:40:8d:8c:75:39:ea:
         5d:6e:17:33:ee:cc:ee:ae:62:39:41:dc:e6:71:86:d2:9c:e0:
         06:72:7f:31:ce:e4:f3:e7:e7:f3:ff:3d:6c:dc:ad:78:93:1f:
         77:75:38:ec:3f:05:5d:a4:e3:c5:28:e2:2e:a3:92:8e:b5:a5:
         28:fb:76:36:2e:17:ef:d0:d3:e2:9c:09:ec:89:7b:6a:73:df:
         31:c9:8d:24:d8:28:e4:a5:ec:ca:d0:c2:3f:4d:c1:28:a5:7f:
         b7:46:84:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:36:01 2025 by rpki-client