Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/5b9b1057-827d-3378-bedc-a67f58f97a5d.roa
File:                     5b9b1057-827d-3378-bedc-a67f58f97a5d.roa (raw, json)
Hash identifier:          YuZFDgZmr/Jz3R9OikQT+ituytt/GWbzxgo2LAuu8Dk=
Subject key identifier:   EB:80:69:97:F4:76:0B:36:7D:05:80:20:7B:6F:FF:AF:BF:50:4B:65
Certificate issuer:       /CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
Certificate serial:       010D0C9F4328584B2FC1995614E147A474A9F39A
Authority key identifier: 96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/5b9b1057-827d-3378-bedc-a67f58f97a5d.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     212013
IP address blocks:        23.157.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:99:56:14:e1:47:a4:74:a9:f3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=018d338e-8c32-4f32-af7d-416481b46fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:5d:ab:0e:5a:d4:45:9e:50:8f:8d:17:22:
                    66:a5:03:39:1e:7c:80:ea:ab:ba:96:3a:a5:ff:be:
                    b4:d2:67:a0:6a:8d:08:ed:ba:3d:03:0b:a6:cd:62:
                    23:29:88:04:84:9f:21:d1:9f:19:e7:3f:70:00:4e:
                    8b:58:ff:f8:3c:90:cf:ab:b6:91:d7:ae:0d:66:b8:
                    ad:0e:21:32:6a:42:73:18:ac:7e:13:16:5f:9f:43:
                    cf:82:80:9a:3c:45:5b:2b:2f:f3:d0:99:b8:0e:ec:
                    e9:29:d9:70:6e:13:62:e1:0f:de:57:64:b5:ce:89:
                    26:ba:72:2c:20:9a:49:98:f5:c4:97:11:fd:1a:28:
                    78:67:73:3c:f0:5e:c3:30:65:72:fc:63:f9:08:82:
                    fa:88:6f:e0:7a:2e:58:6d:7d:bc:d9:23:9f:85:a1:
                    04:c6:2a:12:2d:74:47:2d:b1:9a:0a:77:bb:a2:be:
                    62:e9:e4:e6:8d:21:da:b6:17:1d:72:0c:15:4b:76:
                    5d:a3:15:6f:ee:67:02:0b:a9:45:2a:99:72:a3:30:
                    9a:60:6b:15:ce:1c:55:8a:9c:32:e3:da:30:57:9e:
                    39:85:f1:e3:1b:9f:bf:22:dc:21:3d:97:4a:ad:ea:
                    ae:65:84:dc:91:99:9b:d4:ed:49:5a:8b:f3:20:64:
                    89:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:80:69:97:F4:76:0B:36:7D:05:80:20:7B:6F:FF:AF:BF:50:4B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/5b9b1057-827d-3378-bedc-a67f58f97a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl

            X509v3 Authority Key Identifier:
                keyid:96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:00:79:54:c5:1e:4b:44:3e:e1:40:87:02:57:3b:42:8c:e6:
         29:15:b9:94:72:6f:0e:a6:99:b7:6a:85:4c:10:eb:5c:a4:2d:
         0d:89:1f:91:57:a6:d9:b0:6e:fe:fc:9e:c6:22:49:99:9c:a6:
         8e:a6:b2:91:d8:5c:c6:47:84:d2:0d:e2:12:70:b3:de:b4:e5:
         d0:85:88:a5:ba:5f:69:23:13:34:91:da:e1:70:26:6e:22:f2:
         b0:6f:95:7c:ca:79:a0:61:f0:a3:2a:74:7d:90:05:71:ae:9b:
         c1:24:28:dd:da:cb:6f:34:3b:97:80:2e:5e:bf:0a:7f:e2:84:
         c6:9c:56:6c:87:32:76:24:43:27:22:6c:ab:1b:65:27:15:16:
         78:e5:2a:56:ab:d1:08:78:70:14:e4:98:bf:e0:d7:df:b4:47:
         dd:68:e0:6e:29:d7:98:27:21:a8:8a:f8:58:dc:41:0b:2f:cb:
         02:42:25:75:53:c4:82:14:ab:66:db:c5:87:8f:01:42:f3:67:
         44:77:ae:ad:da:0a:7d:30:3e:21:2b:75:88:d4:37:dc:c7:f3:
         46:f7:aa:0f:ca:c9:a5:c5:5a:4a:6b:68:e1:bf:9e:6c:e4:f1:
         05:d9:ae:dc:04:40:bd:88:6a:56:66:e1:60:fd:9b:66:25:83:
         4a:2e:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:10 2025 by rpki-client