Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/98104829-5327-3a51-8250-8d6b1f3459da.roa
File:                     98104829-5327-3a51-8250-8d6b1f3459da.roa (raw, json)
Hash identifier:          3dlxYyyZwu/yq3928wPe5LSRGa/G/X4GV5igLqSeNNQ=
Subject key identifier:   F6:BA:36:4E:B7:A0:37:ED:9E:26:AE:7D:9B:DB:7D:37:46:3D:B5:31
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584B64CCC0234E7B63E150C6F680
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/98104829-5327-3a51-8250-8d6b1f3459da.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     11870
IP address blocks:        167.23.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:c0:23:4e:7b:63:e1:50:c6:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=63b580e5-ff22-45e5-8e21-0e8d17c9b222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:6b:29:c8:6c:e5:f6:a0:74:f8:2a:fb:c5:
                    fd:5d:6f:cc:58:d4:ec:c5:1c:6c:ec:25:b7:26:22:
                    87:45:79:7d:94:89:05:5a:79:52:33:2d:0f:de:3f:
                    4d:c7:d7:de:96:29:2b:42:b9:e4:fe:da:9a:2f:0e:
                    8e:b4:bc:7e:b4:4f:2b:1f:4f:fc:fc:42:90:53:fe:
                    8d:74:d6:80:c7:ab:15:04:ea:b9:da:aa:e0:94:7a:
                    cb:06:f7:78:a8:62:26:61:78:4b:6b:ab:41:5c:7b:
                    e1:ab:da:f8:76:0c:06:18:6a:c1:e2:b9:9b:75:a9:
                    3d:94:a6:5d:e4:63:a8:a6:63:65:76:d8:d9:13:8b:
                    4e:8f:86:6e:4b:bc:71:40:83:2e:8c:7d:9c:ac:9a:
                    8f:fd:a3:e5:41:5f:68:b8:17:71:58:71:99:70:17:
                    ac:f6:74:b0:ff:63:00:88:70:75:b0:a1:e6:f7:a6:
                    a9:89:57:67:1c:7b:6c:78:37:99:f1:68:3b:d5:5c:
                    92:c2:d2:b6:bf:2b:68:6b:26:fb:dc:aa:35:fc:5e:
                    8b:c9:17:76:02:33:30:8a:a4:5d:61:00:1b:00:e3:
                    f0:54:f2:bf:c6:71:80:6e:a6:c0:cd:d9:4e:62:fe:
                    ff:81:26:6e:8c:6f:ae:3d:05:f8:ca:93:48:0c:38:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:36:4E:B7:A0:37:ED:9E:26:AE:7D:9B:DB:7D:37:46:3D:B5:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/98104829-5327-3a51-8250-8d6b1f3459da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:64:69:da:1a:75:f8:0a:7c:0c:04:6b:8a:db:52:9a:69:bb:
         1e:e9:9d:23:60:f2:7e:e5:3c:8e:c7:95:d2:fc:0e:d9:ed:ed:
         c8:f4:8d:81:fe:7c:88:33:04:00:52:75:fc:36:19:71:b8:da:
         e7:59:41:d2:df:c0:d2:68:5f:ec:93:f7:37:39:27:83:70:bf:
         ee:9a:c3:8f:d0:c3:55:b0:f2:fc:17:df:ec:9d:7f:15:20:cf:
         cc:00:03:6d:09:cb:ca:54:cc:61:99:2e:dc:75:aa:3a:49:95:
         63:30:52:84:5e:af:80:b1:73:58:20:90:03:c4:95:86:39:de:
         4c:4f:38:aa:cc:75:d7:11:d5:e9:ec:b6:d6:03:a2:b1:26:7f:
         fe:55:cf:7a:3a:8a:11:57:22:af:dd:9d:b1:d5:09:fc:a0:8b:
         8d:98:b9:7c:fa:8d:b0:32:d7:33:23:04:27:33:62:c9:81:7b:
         66:2a:45:5a:88:fa:6c:86:1a:b4:f9:cc:f2:62:b5:27:34:e7:
         13:bf:26:75:bf:7d:fd:8c:c6:8a:cf:c6:c0:d9:22:22:a6:3a:
         f2:b6:bd:fa:6d:c0:9d:59:cb:ed:ab:51:6d:f6:77:8e:2e:d8:
         9b:7a:d6:81:a3:f8:23:63:bf:10:cc:40:da:a0:55:79:6d:4b:
         80:78:6d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:06:21 2025 by rpki-client