Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa
File:                     99dd9df1-85c8-3156-9ead-c836be3c6a64.roa (raw, json)
Hash identifier:          tBJVoSEzXBeK1uXyanSPUl1lE+XA0IPou16pk1oL95c=
Subject key identifier:   A8:99:FB:E2:B0:A0:31:45:AE:71:42:E8:9A:E3:B5:60:A6:9D:7A:4D
Certificate issuer:       /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Certificate serial:       010D0C9F4328584B76F256B4349A6426DCCCFA60
Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     63101
IP address blocks:        23.188.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:56:b4:34:9a:64:26:dc:cc:fa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=2f81a85e-16d3-4d4e-aaab-56d133827d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:21:5b:aa:79:95:85:bb:21:21:5a:5a:17:
                    63:28:72:1f:be:0a:be:e1:34:ec:c9:32:6e:27:5f:
                    85:d0:4d:bd:92:12:80:be:97:f1:88:8b:d8:e0:30:
                    df:e6:83:82:d0:e6:8f:70:61:72:51:87:c9:8c:88:
                    88:8b:c9:85:e0:1b:c5:96:fe:db:fa:c3:90:91:b9:
                    e9:30:c8:50:9b:33:bc:ed:e5:99:c1:98:3c:c4:ba:
                    bd:dc:6d:b4:d7:f1:b9:9b:00:01:b2:b6:69:40:a0:
                    8f:6b:cf:b9:36:60:06:a9:d1:90:b4:9a:c4:80:f9:
                    55:c7:d0:61:f3:4d:c3:44:be:f9:ea:4f:b2:44:a3:
                    8e:86:2f:c8:94:f2:45:f9:cd:e6:7d:a5:f8:cf:06:
                    de:8e:0f:39:c5:13:bd:30:e7:14:fa:e2:4f:56:31:
                    ee:5c:07:c2:30:7c:6c:0a:ec:31:ec:26:fa:32:3e:
                    93:17:b5:35:ea:c0:c9:db:cf:ff:3a:16:21:ea:95:
                    0e:46:17:04:3a:a2:1a:6a:0c:c4:98:8d:58:e9:2a:
                    d4:0c:62:6c:c7:6c:18:05:7b:33:fc:1a:67:8b:8a:
                    79:6a:d5:c6:d4:16:3d:2c:ff:f4:a8:1f:ad:51:80:
                    d0:26:2d:91:c1:81:56:b6:1c:ae:c2:a0:c6:d5:c6:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:99:FB:E2:B0:A0:31:45:AE:71:42:E8:9A:E3:B5:60:A6:9D:7A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl

            X509v3 Authority Key Identifier:
                keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:dd:81:df:1d:70:be:b4:43:4f:0f:49:04:18:80:bd:cd:0d:
         e5:6d:83:e2:d4:ad:5f:3d:82:4e:16:40:7b:80:71:0b:88:40:
         69:89:c8:b4:c5:f1:2c:94:0c:d7:23:65:16:e1:f3:b9:ca:f3:
         27:eb:fd:6d:9a:8a:2f:5a:ca:6d:43:f5:a1:21:b9:ba:ba:12:
         4b:6d:26:5b:6a:02:14:69:b5:40:2e:e8:36:ea:48:51:fb:3f:
         79:6b:55:a6:b2:2c:db:26:f0:4a:45:62:76:54:d7:0f:85:78:
         07:4e:6e:aa:d3:9a:47:15:a1:4a:0a:31:8f:85:f3:ce:33:c1:
         0d:8b:e9:d1:68:3a:1d:db:2e:8d:85:80:fa:d2:1c:e5:75:77:
         d1:b8:d7:fc:71:c5:f7:61:ca:4a:b1:04:44:8f:b3:e0:24:41:
         3e:d1:7e:3c:cc:a8:8c:14:53:91:a3:ca:82:e2:ba:38:b2:13:
         dd:3a:f8:47:14:1d:c8:8c:54:a6:af:33:81:e3:7e:19:59:5d:
         a1:58:84:d5:3b:61:95:4c:b6:44:19:26:86:da:f2:00:46:b4:
         2d:1c:3d:4a:af:4b:49:0f:f1:a3:cf:0e:89:f8:d3:08:f5:02:
         35:32:ed:fe:e8:7d:b2:99:f9:73:24:ec:3f:36:df:e9:ea:72:
         37:9d:5e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:45 2025 by rpki-client