Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f1533d4b-0abd-30b4-bf41-ff2b02037383.roa
File:                     f1533d4b-0abd-30b4-bf41-ff2b02037383.roa (raw, json)
Hash identifier:          QaI8JoSbsLLyPi78J11JHHlzBA/SFyr+wH4lbYU+CZM=
Subject key identifier:   16:B7:91:9F:20:A4:F6:DD:A4:E2:91:FE:24:52:10:35:5C:F4:D3:1C
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584B540C627478E50E904BE9D800
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f1533d4b-0abd-30b4-bf41-ff2b02037383.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     63150
IP address blocks:        23.150.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:62:74:78:e5:0e:90:4b:e9:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=0a7b2654-9553-4882-b0f5-a1a63b9a7419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:f0:bf:07:1e:42:5d:4c:f1:83:05:14:13:
                    cd:02:23:ac:a7:67:6a:52:da:84:77:27:fb:63:03:
                    95:cd:2b:df:47:d4:cf:55:e2:f0:36:88:45:24:03:
                    6a:58:26:0b:30:77:d2:3b:38:9e:66:5e:be:a2:73:
                    4f:2b:a8:8c:da:6c:13:e7:25:be:58:df:14:8a:97:
                    98:0a:7e:df:fa:b2:f0:04:bb:57:d2:3f:d3:9f:71:
                    ca:ba:4e:0a:75:f5:40:90:01:3c:ca:e5:af:97:6a:
                    0a:2a:a0:4c:08:c6:f2:05:b1:2a:d1:64:95:10:e6:
                    e3:f9:87:3c:b2:ff:7d:05:4f:a7:4b:4b:84:ab:75:
                    10:d3:55:f5:35:94:fd:52:69:24:8c:a6:11:96:ad:
                    42:9f:64:a0:5f:cb:b1:13:f5:6e:2c:b0:99:d8:7d:
                    8a:7f:38:d0:81:83:2d:49:13:ac:1b:b2:91:0a:18:
                    14:cc:aa:2d:b1:da:15:f5:da:d1:dd:bb:b7:0e:c6:
                    ac:6e:12:6e:b2:27:a7:b8:78:b9:2c:4b:67:e6:85:
                    d3:ec:a7:a9:cc:23:bb:21:27:a5:be:1f:c5:9c:3a:
                    db:c9:d5:76:b0:ec:92:17:04:76:d3:b1:57:c9:db:
                    f7:d3:e7:39:80:94:e9:d3:8a:31:fd:0b:df:45:d8:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B7:91:9F:20:A4:F6:DD:A4:E2:91:FE:24:52:10:35:5C:F4:D3:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f1533d4b-0abd-30b4-bf41-ff2b02037383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:31:a6:74:44:0a:5c:15:97:82:e4:ec:97:4d:93:fc:cc:c5:
         24:bf:9c:ba:5d:04:ab:a3:f6:9f:ac:3f:35:7a:10:5b:7d:4b:
         39:e5:1a:aa:a3:34:d9:9d:ef:77:6b:53:ee:d8:3e:b8:df:16:
         69:c0:c9:a4:aa:6a:2c:a8:27:fe:15:e4:6e:ad:36:6f:48:44:
         ec:4b:ab:13:af:90:43:7e:76:2c:cc:c0:a9:e6:f1:e0:2c:f2:
         35:1e:6e:ac:22:c5:fe:02:a6:d6:40:15:75:62:27:1f:04:00:
         c7:8d:b4:f5:7e:fc:4c:3a:40:55:c2:e5:cd:7e:07:01:da:e8:
         a9:8f:7d:37:0a:c2:e1:81:25:18:84:cf:47:71:db:f3:8b:db:
         d3:bf:e1:63:4c:78:eb:4a:f0:99:26:57:b4:fd:e6:e8:1d:b4:
         08:88:36:3a:ee:d0:f5:ea:6e:35:24:97:90:8c:98:68:b1:62:
         3e:69:32:1d:99:b5:f6:8f:28:30:87:45:e8:54:9c:1c:91:ee:
         35:77:db:96:a8:7a:13:01:42:1f:b5:3d:4e:69:e7:68:6b:5d:
         3d:47:31:8c:ec:da:ac:5b:85:3f:b1:ae:b6:25:ac:95:cb:73:
         3e:f0:54:dd:dc:30:ec:75:73:a1:97:3f:e1:d4:f7:98:fc:86:
         fe:64:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:23 2025 by rpki-client