Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/3c165043-6cc2-3519-8dd3-13125500857c.roa
File:                     3c165043-6cc2-3519-8dd3-13125500857c.roa (raw, json)
Hash identifier:          1NkAxiOsVc6svVQ2Oj8KE8X5yNsjvN7VhoVQgZf1Rxw=
Subject key identifier:   03:09:B7:9A:28:D3:80:1E:4C:E2:FD:27:42:71:3C:4C:2D:E6:88:2B
Certificate issuer:       /CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
Certificate serial:       010D0C9F4328584B6632024E8132D5D52FBBDD80
Authority key identifier: D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/3c165043-6cc2-3519-8dd3-13125500857c.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     400799
IP address blocks:        23.163.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:02:4e:81:32:d5:d5:2f:bb:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=0b9a94cd-27ab-4fa3-b8f2-3f3cd9d9822d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:40:0e:ab:9b:f4:98:d5:7d:a2:76:3e:2f:
                    7c:03:e2:23:07:e8:d8:fb:ef:fd:c6:d0:01:db:39:
                    5e:4f:c6:b6:b1:01:84:9d:96:92:2f:d5:58:99:ab:
                    87:2f:49:7b:13:8c:4f:a0:c5:9d:b5:ca:ca:82:90:
                    9d:d1:16:93:5d:bf:6f:22:56:5c:7c:7f:6d:2b:07:
                    0c:71:80:de:d9:46:df:9d:42:a9:a2:d3:af:2b:87:
                    97:8e:9b:3f:1f:99:f2:7a:25:89:17:b2:8c:85:f4:
                    5d:90:31:92:28:e1:e0:25:3b:74:54:f6:99:a0:ef:
                    ea:63:4a:c4:bf:e0:a0:3d:96:b9:b2:b4:23:12:1f:
                    f1:9a:3d:e7:18:6d:f6:07:31:ce:c5:b6:23:06:32:
                    c1:f5:e9:bc:c9:ab:3c:53:84:c7:65:37:92:5e:a1:
                    fc:0b:b6:5c:bf:ad:28:bf:e9:8a:25:35:cc:60:94:
                    f2:e7:6f:d4:60:0e:18:b9:c9:bd:14:07:51:2c:06:
                    36:ab:88:2d:b7:c2:fd:3e:5a:c6:02:b8:17:27:2e:
                    ab:f8:eb:ca:86:a5:9e:a5:b8:b8:84:5e:38:10:93:
                    5a:bd:fe:cb:b2:48:95:68:6f:2e:62:bf:9f:4f:2e:
                    1b:c5:d4:5c:75:0e:de:4c:2e:22:2f:5a:85:f6:fa:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:B7:9A:28:D3:80:1E:4C:E2:FD:27:42:71:3C:4C:2D:E6:88:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/3c165043-6cc2-3519-8dd3-13125500857c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl

            X509v3 Authority Key Identifier:
                keyid:D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:6d:f4:04:1c:c0:7a:bc:2c:1b:a1:40:5a:06:bc:71:01:
         3e:44:5a:84:c6:18:48:2f:8b:97:c2:f5:14:0f:7d:e1:a1:49:
         25:ea:07:dc:0a:e2:70:be:bf:3e:c0:f5:68:34:f2:51:45:22:
         0a:bd:13:15:7b:4d:f0:be:e4:07:45:38:17:3c:d1:d0:a2:53:
         dd:64:51:19:c5:f3:04:86:8a:ba:f5:db:ad:ef:40:33:b0:ed:
         f2:bd:e4:fb:b9:6f:f2:33:6f:06:44:c5:92:55:eb:00:99:26:
         ea:91:e7:46:53:8f:ee:d0:5c:b3:51:97:34:25:a0:21:30:b3:
         db:c0:5f:78:01:56:40:0c:de:56:64:15:c8:d6:4a:7d:9b:37:
         a3:2c:b2:75:c8:43:ee:75:ce:7a:51:5c:90:25:70:0e:e3:3b:
         ba:63:d2:bc:f1:1e:60:04:82:fd:f3:6e:c6:4d:4f:4b:05:c4:
         ab:fa:6f:e8:d5:0a:08:ac:6b:ba:3f:90:dd:4e:c4:ca:ea:7e:
         5a:94:55:2d:c2:e4:26:a0:9e:58:33:fe:4e:be:1b:a0:d1:bd:
         e9:e6:37:27:d9:74:2b:e2:8c:47:26:07:42:33:fa:e5:1a:de:
         7e:ce:5a:60:12:70:4f:c8:ec:87:22:09:0e:86:ea:d5:dc:27:
         e3:e3:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:36:05 2025 by rpki-client