Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/868d68d7-7731-3293-92c9-81d427b2860f.roa
File:                     868d68d7-7731-3293-92c9-81d427b2860f.roa (raw, json)
Hash identifier:          vm+1qa/Q3LqBOTHK3/laBv8CcHtvaJQdpB3p7wWxuPM=
Subject key identifier:   4D:E2:98:74:C2:F5:DF:26:27:C0:DB:29:FD:AC:59:29:80:4D:6A:A7
Certificate issuer:       /CN=e4f064d0-9017-41e7-be21-c7b9883020d5
Certificate serial:       010D0C9F4328584ACE0BA1060BE3FDBF39F67900
Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/868d68d7-7731-3293-92c9-81d427b2860f.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     21903
IP address blocks:        23.183.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a1:06:0b:e3:fd:bf:39:f6:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=0ced4aa5-8b3d-4daf-bbd8-98d6f4704191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3f:3c:c8:2e:a5:31:56:14:8c:8c:d1:17:5c:
                    64:c6:9d:9d:13:2e:d1:bd:b3:cc:9c:da:38:e5:aa:
                    36:ad:c4:f5:8c:f3:32:d9:f4:69:0c:1c:d9:87:05:
                    56:dd:6e:62:88:c6:64:9d:a8:65:9c:16:d0:06:55:
                    28:d8:34:5f:33:8e:63:e7:91:79:01:87:7c:ff:9b:
                    a4:04:5e:e0:be:97:4d:3c:f7:68:a2:51:71:4f:23:
                    e1:a4:90:dd:3a:0e:18:f2:e2:e2:ae:1b:08:4e:9d:
                    53:fa:34:83:bb:f9:17:9d:56:18:e1:fa:39:e3:ae:
                    83:40:dc:74:fc:de:be:b7:a5:5e:d5:34:b1:ce:5a:
                    0f:2d:c9:7e:90:45:aa:56:97:e5:48:79:87:25:88:
                    b5:c8:ae:e8:5b:7b:b5:98:f5:db:98:7a:24:15:f4:
                    7c:18:66:8d:01:ae:46:39:94:8e:86:be:e9:63:e7:
                    a6:a8:48:6d:ff:20:f8:e8:fc:95:56:52:8e:e0:33:
                    45:7c:3a:ac:6f:e3:c3:06:65:97:48:79:66:00:ec:
                    2f:1e:13:49:93:b5:9b:ff:fc:80:74:0a:a0:86:cf:
                    9f:fe:39:f5:75:28:11:07:74:a1:b8:50:e0:1b:df:
                    ab:7f:72:f2:f8:92:29:b5:ee:52:98:07:be:7d:bc:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:98:74:C2:F5:DF:26:27:C0:DB:29:FD:AC:59:29:80:4D:6A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/868d68d7-7731-3293-92c9-81d427b2860f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0a:8c:e2:d4:89:c5:ad:cc:b1:2a:d9:99:41:94:96:00:6b:
         c9:3f:f9:9d:6e:84:1b:43:83:62:a9:c2:4a:90:9d:99:0c:a7:
         b2:01:fb:a4:9c:0e:57:71:17:6a:8c:c5:9b:7e:3f:c1:d2:8b:
         66:50:e8:ce:f7:d1:ed:d0:5f:ad:b9:f7:ca:39:03:cf:9a:4a:
         61:74:38:06:c4:c2:da:1e:32:54:d4:86:b2:13:75:e7:25:68:
         f9:11:84:98:f1:ee:6d:ad:c9:56:ca:59:86:5b:c3:49:a7:3a:
         a7:85:ed:8e:22:b6:d7:69:38:d8:da:98:a5:8a:94:40:38:e5:
         86:bb:7c:ea:85:91:6d:0a:b4:ce:be:67:45:8b:a7:45:e7:fe:
         6c:90:f7:00:47:d6:79:62:4f:52:ce:b5:4a:0e:fe:14:9a:c6:
         15:2f:8b:67:13:30:0b:8c:42:dd:b4:80:15:8c:6b:bc:35:f7:
         61:b0:7f:cc:40:6e:43:86:fe:00:7b:21:71:77:a9:70:ba:0a:
         34:7a:07:8c:4a:13:ae:f4:fe:1d:95:75:cd:74:e2:d4:79:ba:
         b7:ac:89:2f:fa:d8:23:97:43:5b:9b:76:01:46:eb:92:33:23:
         05:9c:8e:90:66:14:dc:75:f4:1d:a4:4e:83:94:17:e1:75:e9:
         c0:b3:06:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:28:46 2025 by rpki-client