Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa
File:                     8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa (raw, json)
Hash identifier:          N2RlaPztj3it5tYrAPCY+2eKO9CrLsj6B1J+Yw2O04Y=
Subject key identifier:   E0:4D:C9:3B:A6:17:CE:A3:D4:7A:6B:29:93:F0:0B:7C:C7:D9:C3:1F
Certificate issuer:       /CN=9d6bbef3-ee9e-47e1-8865-b0b861ae1d80
Certificate serial:       010D0C9F4328584AE1968B84B2F8B658E3C49AC0
Authority key identifier: 2C:5A:5F:CA:70:2A:F7:AB:AD:EE:66:73:1A:26:0B:66:11:6C:BE:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     20277
IP address blocks:        23.155.40.0/24 maxlen: 24
                          2602:2eb::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:8b:84:b2:f8:b6:58:e3:c4:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6bbef3-ee9e-47e1-8865-b0b861ae1d80
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=c5e0675e-aab5-4753-b3ad-e9656beaf172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7a:14:ec:c8:00:10:4e:9f:f9:ba:9a:bc:bd:
                    6e:3c:38:87:4f:08:71:c3:78:6d:43:a0:aa:fc:b7:
                    57:1a:e9:07:fe:2c:38:ae:dc:5b:6d:fb:ec:0b:f0:
                    5c:08:94:f9:3f:1a:d4:bc:f9:2c:72:13:1e:f2:29:
                    d3:16:af:9d:f9:3c:80:4a:8b:49:2c:c9:93:0f:67:
                    42:7a:1b:3a:5f:df:46:6e:23:04:6f:61:74:c7:f0:
                    e6:d3:77:36:0b:32:70:f1:3a:30:b1:ba:f0:04:89:
                    92:65:8b:9b:28:ed:65:c2:17:e4:7f:53:10:4e:d9:
                    ab:c7:68:c3:26:78:0a:67:a4:c6:c6:ce:c2:8e:3c:
                    63:44:fc:c4:b5:97:9d:af:57:ee:7c:f2:d6:d6:ed:
                    13:c9:f6:b3:2e:80:00:38:b2:b1:51:1f:cf:35:70:
                    d2:1d:62:f4:6f:67:65:eb:7c:90:72:10:25:98:2e:
                    61:e8:f5:a5:b3:3f:f2:fd:cd:e2:95:9f:60:b8:09:
                    df:dc:57:21:7a:58:1c:91:de:1c:7a:55:16:e2:46:
                    69:ec:1b:de:d1:fe:de:9d:97:6f:ee:c3:44:af:4f:
                    9b:44:9c:5c:06:50:88:19:a0:af:66:6a:48:28:de:
                    97:90:5f:e9:cd:d4:cf:76:c2:0c:7d:32:7a:0a:48:
                    69:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4D:C9:3B:A6:17:CE:A3:D4:7A:6B:29:93:F0:0B:7C:C7:D9:C3:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.crl

            X509v3 Authority Key Identifier:
                keyid:2C:5A:5F:CA:70:2A:F7:AB:AD:EE:66:73:1A:26:0B:66:11:6C:BE:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.40.0/24
                IPv6:
                  2602:2eb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:17:24:c5:96:ff:82:ba:63:81:56:72:5c:24:3b:0f:75:57:
         56:87:df:31:8c:ca:74:dc:c8:45:60:ba:bf:87:c7:7b:aa:64:
         9e:0e:88:61:39:f2:92:77:b9:ba:18:e6:41:65:67:86:7a:1b:
         a0:08:2e:f6:b2:41:dc:d3:95:51:c4:7e:aa:56:c2:26:21:43:
         4f:18:93:c5:0e:61:8f:b4:3b:23:a3:14:00:10:b2:a5:9c:a2:
         44:12:02:f0:a7:02:ae:26:5c:9a:1e:80:13:86:4f:90:ed:d5:
         8e:7f:92:55:3d:4a:bc:4a:58:62:1c:47:34:e4:00:fb:2c:a1:
         dc:a8:f7:58:b2:8f:5f:de:6f:97:65:36:7b:c5:c4:29:ef:6d:
         e5:0f:a4:e8:16:b3:a2:55:00:6e:a0:85:7f:2e:25:9e:66:34:
         77:64:b9:1c:fa:1b:2f:31:16:b2:8f:3e:03:3c:64:ba:64:1f:
         45:19:1d:3b:06:7e:d8:9e:97:95:bc:01:58:62:1c:f3:18:8d:
         2b:a1:5d:8b:99:f9:69:68:1e:dc:ee:3c:87:02:a0:0f:d3:aa:
         d2:43:6e:5f:6f:3f:9d:7a:0a:8f:81:45:70:2b:c6:33:92:01:
         1a:a6:33:11:53:07:21:f8:98:c7:49:36:00:3d:97:2a:c6:92:
         1c:a5:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:18:13 2025 by rpki-client