Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/40ab9ebe-4871-33e6-b755-8c99c310f04e.roa
File:                     40ab9ebe-4871-33e6-b755-8c99c310f04e.roa (raw, json)
Hash identifier:          7CG7PdoWwcAgnlwSJF0QXJz630FNTze9j6Q1hvlptBc=
Subject key identifier:   A7:8F:CC:C6:0B:CC:92:2D:08:B8:91:BF:7D:EB:A1:09:72:86:5F:19
Certificate issuer:       /CN=77c31fd1-c3ac-425f-9d0e-b9b227466366
Certificate serial:       010D0C9F4328584B63F20A715C6BFBFDF528FF80
Authority key identifier: F5:4E:60:BA:39:BC:90:C1:05:BE:FC:9C:91:63:40:C5:71:5D:C5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/40ab9ebe-4871-33e6-b755-8c99c310f04e.roa
Signing time:             Thu 02 Oct 2025 17:40:25 +0000
ROA not before:           Thu 02 Oct 2025 17:40:25 +0000
ROA not after:            Wed 31 Dec 2025 18:40:25 +0000
asID:                     16509
IP address blocks:        23.131.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:f2:0a:71:5c:6b:fb:fd:f5:28:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c31fd1-c3ac-425f-9d0e-b9b227466366
        Validity
            Not Before: Oct  2 17:40:25 2025 GMT
            Not After : Dec 31 18:40:25 2025 GMT
        Subject: CN=d616676c-27d5-4c20-902d-907937689d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:88:8c:4b:df:ab:09:46:b3:5e:2d:03:8e:90:
                    5b:e6:d1:f1:cb:cf:e2:f5:3f:28:2f:d1:d1:25:12:
                    f2:81:44:e0:9c:cd:9f:fe:8e:0b:1d:ba:a9:58:9f:
                    bd:7a:f3:92:98:e2:97:b1:a4:ca:79:0d:dd:b7:88:
                    a0:ef:db:39:81:dc:99:3d:ef:9b:9e:3c:2f:7a:9a:
                    72:6d:b4:5f:08:03:7b:12:3f:26:7c:73:77:d5:11:
                    96:b6:82:02:b9:7b:93:dc:a7:bb:16:ed:75:57:e3:
                    15:cd:86:cb:f2:2b:17:18:84:ea:22:fe:68:c7:ae:
                    6d:ff:96:7a:1b:2b:21:c8:ae:16:16:12:04:10:3d:
                    3b:17:a9:bf:72:44:90:72:d9:9e:05:97:51:63:c3:
                    86:af:cc:22:b1:76:02:dc:42:dc:d2:78:7b:64:71:
                    eb:07:1d:bc:09:99:c1:08:2a:f3:11:2e:91:22:d1:
                    45:0b:13:77:97:87:43:3c:50:4f:b3:1c:65:b5:4c:
                    c3:67:92:1a:3d:df:bc:70:06:b0:b3:61:70:03:a2:
                    8b:31:00:e9:25:b7:60:1f:3e:40:21:7d:ef:a7:58:
                    57:c8:03:28:d0:f2:aa:a4:91:4f:72:32:07:53:ab:
                    8c:21:97:44:a2:d3:c7:a2:04:72:42:f9:57:70:6b:
                    fe:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8F:CC:C6:0B:CC:92:2D:08:B8:91:BF:7D:EB:A1:09:72:86:5F:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/40ab9ebe-4871-33e6-b755-8c99c310f04e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.crl

            X509v3 Authority Key Identifier:
                keyid:F5:4E:60:BA:39:BC:90:C1:05:BE:FC:9C:91:63:40:C5:71:5D:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:df:ee:f2:f4:9d:cc:31:f5:83:1d:00:56:2e:8e:ef:73:4c:
         b4:9e:b9:56:07:3c:df:1d:ae:d9:7a:ef:ff:05:85:36:4e:3c:
         5c:9f:3e:a2:41:f3:12:34:c9:dd:63:39:eb:f6:e5:73:a3:d6:
         53:ff:2a:10:ca:16:f2:c9:a3:a9:1e:63:be:52:2a:e0:78:78:
         55:89:88:6a:56:66:fd:b1:51:8b:49:2d:cd:24:ef:f4:c2:76:
         43:8f:ae:b0:c8:84:8c:7b:f8:19:37:27:c7:0a:63:4e:c7:a1:
         f6:e2:67:01:7e:6f:1c:18:ec:ab:2c:fd:e3:20:76:c6:26:dd:
         b7:4a:55:d2:4f:4d:a5:6c:06:78:22:1f:4a:dd:13:24:b3:be:
         21:97:28:95:cb:f3:d4:da:e2:72:e0:f4:02:13:a3:63:aa:3c:
         9e:d5:e2:1b:42:73:83:d4:57:cf:3d:c0:02:b0:f3:5e:9b:70:
         d8:9b:a9:66:dd:83:d6:ec:9e:05:62:91:0c:70:59:39:1f:db:
         7a:57:4a:6e:ce:50:7e:71:65:63:80:93:ed:11:57:62:24:40:
         ef:08:b6:d6:f3:17:86:ba:75:b5:5b:ae:dc:8d:97:df:15:c9:
         4e:4b:69:88:df:63:84:35:e4:bc:65:98:f0:e0:53:06:5b:e3:
         4a:17:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:55 2025 by rpki-client