Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/1b03e4c3-4a70-31fb-8c6b-296a4300933d.roa
File:                     1b03e4c3-4a70-31fb-8c6b-296a4300933d.roa (raw, json)
Hash identifier:          fgJEj/sP8vPXW+jTXNQPmou1+ouKUkWZvFKTCCQ7Aj0=
Subject key identifier:   8D:45:83:B4:F8:25:55:C1:3E:F3:0A:45:16:E6:AB:00:31:1E:1C:D3
Certificate issuer:       /CN=55a1eb83-a00f-4ad7-9fc1-d44b90ef547e
Certificate serial:       010D0C9F4328584B3C51AAE08C1D9F239E411240
Authority key identifier: 7A:BF:47:66:28:D2:AC:65:DC:39:48:86:E8:AF:26:0B:45:15:0D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/1b03e4c3-4a70-31fb-8c6b-296a4300933d.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     8796
IP address blocks:        23.186.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:aa:e0:8c:1d:9f:23:9e:41:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a1eb83-a00f-4ad7-9fc1-d44b90ef547e
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=c0ea7fcb-d143-4f85-a5e2-17ac5f551ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:84:7c:dc:26:15:38:df:75:71:10:9c:04:
                    aa:a8:f9:3b:ca:c0:5a:c7:56:0c:40:4a:31:6e:55:
                    7f:82:c3:fe:76:7d:9d:e8:3d:a7:cb:37:46:32:18:
                    b9:c6:83:61:1e:e5:7b:fb:a0:a9:2a:1a:0c:fb:b7:
                    15:0b:b4:26:3d:64:7d:bc:65:1e:7e:a6:0b:02:7c:
                    f9:68:50:f6:69:e8:ec:0c:f6:c9:42:9c:1b:55:36:
                    0d:1f:a5:9e:66:56:f3:9a:c8:52:56:41:e9:45:51:
                    14:35:7d:ad:6d:48:6d:8a:70:3c:bd:47:e4:e4:05:
                    56:11:08:72:cc:c0:1c:4b:66:88:eb:77:44:8e:6a:
                    bd:d2:2f:32:c8:c4:66:e6:42:6d:cf:c1:18:5c:f7:
                    27:cf:29:ac:4f:73:12:c9:ce:11:34:c4:1a:2a:3b:
                    fb:83:7a:ea:a5:de:8f:d4:ab:a7:b9:c4:b6:7e:a2:
                    a9:c1:de:84:16:ec:60:02:af:52:ec:7d:6d:d7:d8:
                    b1:86:06:64:a4:13:47:1b:2d:86:e4:9c:d2:df:30:
                    05:24:00:11:aa:f6:9d:22:44:2a:b4:52:7f:c1:ac:
                    9d:e3:ed:e5:6b:e6:71:f8:68:89:47:89:50:9c:13:
                    d7:36:d6:88:b3:a1:c6:33:e6:8d:64:37:8e:41:66:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:45:83:B4:F8:25:55:C1:3E:F3:0A:45:16:E6:AB:00:31:1E:1C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/1b03e4c3-4a70-31fb-8c6b-296a4300933d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:BF:47:66:28:D2:AC:65:DC:39:48:86:E8:AF:26:0B:45:15:0D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:27:c4:0d:5f:b9:56:f0:fe:d0:8c:29:4b:58:84:26:c5:6f:
         44:f4:aa:cc:d1:e0:3f:8b:57:86:a2:16:72:ee:7e:b4:65:4b:
         a8:04:06:80:c7:67:7f:fd:81:f3:78:4a:c8:95:8b:6b:7c:f9:
         f8:8f:7c:e5:da:01:93:01:3e:dd:8f:cc:4d:f6:7d:09:12:a8:
         9b:d7:59:8a:24:1b:5e:59:da:6d:57:ad:e6:32:04:20:51:ef:
         da:e1:9d:44:46:c9:9a:b1:8e:eb:e6:2c:1d:69:f0:bc:0b:fb:
         55:2f:6f:c3:d2:e9:5c:d7:74:7c:bb:20:cf:c4:3a:96:6f:1c:
         d6:3d:54:c4:65:98:a5:1d:d0:5c:88:ea:9b:a5:0f:d4:25:60:
         be:3f:0a:54:18:bf:53:ee:49:61:9b:69:09:c7:8c:af:53:38:
         db:32:d8:ed:02:95:c2:c5:2e:de:6f:fc:c8:44:53:d0:75:19:
         dd:89:ad:c0:2e:d9:a0:33:29:6e:71:11:ff:89:42:24:9b:66:
         5b:0f:fb:6d:99:e1:90:0c:c2:d3:fe:75:02:34:14:39:94:41:
         09:1d:57:ba:b0:6d:c0:bc:bd:92:84:90:5a:9c:a2:02:c3:e0:
         99:7d:92:6b:6c:6a:39:c6:ae:32:e2:c6:35:42:b6:e1:2d:f7:
         94:12:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:05:58 2025 by rpki-client