Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa
File:                     d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa (raw, json)
Hash identifier:          ZUC7GEquv7AOcaM+AzOYBwrYG4CXMgotC7J7N+IxlqM=
Subject key identifier:   4E:6D:03:02:30:BD:71:EF:6F:A4:0D:EE:69:66:27:FE:3F:F3:27:4F
Certificate issuer:       /CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
Certificate serial:       010D0C9F4328584B715CB58FBA2CF73D4FE217D0
Authority key identifier: 0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     133199
IP address blocks:        23.155.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b5:8f:ba:2c:f7:3d:4f:e2:17:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=e009bc60-93e7-4172-a627-3b31358f6bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9c:22:c4:9f:37:e8:de:cd:a1:11:ec:5d:ff:
                    b8:b3:1b:2c:55:5c:e9:f3:5e:a2:72:b6:3c:f4:3d:
                    10:eb:75:ab:61:43:c5:9e:a4:24:b6:87:6f:54:d5:
                    d3:e4:8b:eb:cd:5c:bc:a3:9e:ab:d9:c4:34:b6:32:
                    55:1a:e7:7f:f4:f4:b3:a1:0e:ff:5f:b9:a7:c2:cf:
                    21:70:1f:bb:28:fd:21:f4:11:b2:2c:98:86:d3:ff:
                    b8:ca:52:cc:ad:5d:f3:1c:27:1c:27:81:e0:fe:c2:
                    9d:2e:12:bf:cb:2f:ae:b1:90:ff:f6:a0:e8:f2:1b:
                    53:3c:05:dd:c1:0d:65:58:f9:9c:17:6e:08:3d:2c:
                    93:ce:90:04:be:a7:85:ea:f4:c0:42:1d:f1:a4:5c:
                    89:8d:fd:f1:72:31:ca:97:25:98:8b:39:06:e3:12:
                    84:5e:76:56:5c:2e:04:67:da:04:15:6a:fc:c1:c0:
                    82:cb:4a:ec:8c:b3:6b:3a:15:a6:55:09:b7:fb:05:
                    9f:5f:f7:ae:dc:d3:6d:80:7c:fc:e9:b3:ae:58:7e:
                    27:8b:bc:f8:df:f9:42:30:39:45:54:94:09:3d:57:
                    83:07:f7:95:1a:67:9d:aa:b4:c3:b0:0f:ec:6c:5d:
                    66:22:be:b3:02:12:50:91:b5:61:55:2c:bc:51:cd:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:03:02:30:BD:71:EF:6F:A4:0D:EE:69:66:27:FE:3F:F3:27:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl

            X509v3 Authority Key Identifier:
                keyid:0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:2e:39:b2:98:ec:7e:fc:eb:92:6d:fc:ba:24:a7:08:bf:cd:
         db:a5:55:fe:bc:50:52:fe:9a:ee:db:98:81:38:e2:58:c6:5f:
         e8:5e:ed:17:ac:6f:4b:a7:8c:fc:46:96:07:7d:38:a5:d2:23:
         4e:67:ac:23:62:c9:73:88:f7:12:87:73:22:02:a8:15:d6:5f:
         33:f6:85:c7:b7:16:5b:a1:55:3f:4c:90:60:f2:34:89:cf:b1:
         59:82:00:cd:35:f4:12:d4:74:9c:21:13:34:54:c1:8c:68:84:
         0f:fb:2e:61:26:2c:27:80:64:a1:d0:7d:67:ca:88:3c:c4:91:
         95:16:a5:00:96:4f:3d:70:1d:55:fb:2e:75:93:24:8f:1a:a4:
         00:f4:df:3c:2a:49:41:33:d9:0f:c8:2c:d2:9b:de:c3:51:49:
         de:33:19:98:ed:26:df:4e:72:2c:f1:ad:e1:16:54:98:64:52:
         88:28:4d:55:a6:01:74:b5:5b:70:2b:82:16:a4:22:36:57:a3:
         71:c2:ba:fd:20:89:d3:79:aa:e9:39:f3:28:a6:2b:b1:02:47:
         51:78:9d:de:54:2e:d2:07:21:6b:2f:bb:0b:a9:b9:e0:e5:c2:
         92:54:c2:1f:38:de:4f:d8:ae:df:c8:af:af:b0:81:1c:7a:cd:
         c5:ac:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:34:57 2025 by rpki-client