Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/15743654-6254-3166-aa8b-37d44c1efdd0.roa
File:                     15743654-6254-3166-aa8b-37d44c1efdd0.roa (raw, json)
Hash identifier:          b0XYHR7cQDskzbrKeXD9tE9jA8WaxX2tHEBDw+R9KjM=
Subject key identifier:   BA:05:5D:3B:34:FB:12:86:AB:8A:7C:59:51:71:B3:AF:43:77:CD:BA
Certificate issuer:       /CN=a4a5ba5d-c707-479a-82b6-0d1735321896
Certificate serial:       010D0C9F4328584B8EACDE56F37C5302861D8080
Authority key identifier: F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/15743654-6254-3166-aa8b-37d44c1efdd0.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     396904
IP address blocks:        23.226.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:de:56:f3:7c:53:02:86:1d:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a5ba5d-c707-479a-82b6-0d1735321896
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=c466c757-02c2-4915-a8db-85f66b715b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:93:c0:8b:a6:47:56:26:53:1d:e5:52:b1:
                    b1:70:0d:d7:a6:ba:80:49:0a:43:de:8a:bd:59:80:
                    6c:24:31:40:9a:78:73:92:4d:ac:98:35:4b:27:53:
                    52:c3:42:2a:c3:e2:73:e4:91:15:10:c2:b1:a1:b1:
                    bb:92:1a:88:96:5d:9b:26:27:ba:8f:c1:ee:29:c4:
                    93:0e:bc:79:a9:79:78:4e:b6:5a:e8:0c:a4:e1:aa:
                    8e:d8:db:5f:7b:52:38:30:e5:57:06:cb:8c:c0:2f:
                    58:1c:00:fe:9d:19:6a:05:5a:9e:5f:31:0b:ca:a6:
                    dc:2b:ab:a5:64:8d:3e:cf:eb:81:fa:5d:8a:d1:76:
                    5e:99:6e:5c:84:e3:20:ae:02:11:d8:f9:f9:fd:0f:
                    ab:c3:84:b9:58:ed:35:2e:fd:75:a8:b8:01:d7:2b:
                    d4:86:e3:27:53:f3:40:37:5f:c9:9d:33:93:37:68:
                    c4:f8:ca:72:a0:f8:b5:87:e3:64:c7:7a:68:48:b7:
                    03:ad:db:44:b4:42:f5:05:5e:49:ee:b0:65:cf:40:
                    c6:20:0d:2f:c4:a5:15:11:8d:21:c0:5d:41:04:0e:
                    e4:f7:0f:58:80:d4:30:a3:44:3b:6d:40:83:1e:9b:
                    b9:21:e1:09:36:5d:19:55:0f:84:71:0d:ae:d8:d4:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:5D:3B:34:FB:12:86:AB:8A:7C:59:51:71:B3:AF:43:77:CD:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/15743654-6254-3166-aa8b-37d44c1efdd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.crl

            X509v3 Authority Key Identifier:
                keyid:F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:0a:23:3a:28:54:7a:eb:78:db:e6:ed:48:0e:82:01:97:
         22:9d:68:df:ec:8e:f7:c9:66:ba:71:8f:d5:c2:d5:5a:be:b8:
         e2:e1:96:8e:4e:c6:f7:93:d1:34:38:76:b7:29:46:0b:5a:fb:
         38:a6:2b:44:e9:2b:9f:b8:46:7d:b1:fc:13:b1:e4:fe:8c:48:
         b8:ba:1d:17:ce:bc:b4:f3:0e:5b:31:33:13:8b:e1:bf:4b:c7:
         bc:2c:86:a6:84:68:94:82:41:48:4d:ca:8a:79:b3:56:eb:7c:
         b4:64:55:99:fd:8c:9a:6f:7e:c9:9d:70:e3:ef:5d:87:86:63:
         85:b2:50:b6:16:71:96:59:10:e2:09:5d:69:93:86:d2:05:30:
         e7:01:30:d8:e0:59:bb:b0:0f:fa:79:d8:8e:66:f7:ce:0e:15:
         de:ba:6d:23:18:1a:39:2d:d3:8f:40:0d:dc:76:c9:41:c0:9c:
         3b:85:04:6b:0e:90:1f:5b:56:c1:bf:9c:1d:ca:0c:ef:57:33:
         50:7e:34:f9:ce:ed:6a:e4:50:62:7a:6d:54:dc:69:3e:98:f7:
         9b:c6:a3:4a:0c:ab:11:f4:b7:5f:26:0f:51:37:9f:2e:58:4e:
         36:21:cd:d1:72:a9:57:c5:00:33:21:d5:3c:99:51:49:28:dd:
         87:02:74:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:58:23 2025 by rpki-client