Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/3bc7e763-1e26-314c-ac7a-edd9ab8e21dd.roa
File:                     3bc7e763-1e26-314c-ac7a-edd9ab8e21dd.roa (raw, json)
Hash identifier:          RvrKxNMHbHqCz0ppq7brZ6IGLIwVm6MvJWGQDwe2kd4=
Subject key identifier:   C6:E9:33:D9:2B:90:D1:95:AB:51:CA:BF:07:9A:12:AD:2B:B7:D0:21
Certificate issuer:       /CN=5e82123a-01c9-459b-ba48-23e5cdf5e7a4
Certificate serial:       010D0C9F4328584B87B22235D18D20030C5BFEA0
Authority key identifier: E2:2B:2C:05:67:46:19:AC:9A:DD:7B:23:1A:06:D6:5E:35:BB:8A:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/3bc7e763-1e26-314c-ac7a-edd9ab8e21dd.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     7029
IP address blocks:        23.188.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:22:35:d1:8d:20:03:0c:5b:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e82123a-01c9-459b-ba48-23e5cdf5e7a4
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=1e197f8c-b933-4333-8bbc-b1c64780ec1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:50:a4:2a:3b:a3:7e:bb:05:93:7d:0c:c3:
                    bd:11:26:b7:ff:bf:00:a7:24:fc:17:c0:61:c3:b4:
                    2a:50:09:0a:62:45:99:4a:50:07:fa:56:0e:75:83:
                    eb:88:54:e1:1d:e6:64:cb:f4:57:82:4a:fa:d5:38:
                    dc:eb:f2:d5:75:63:5a:25:08:75:ab:f8:0b:27:8e:
                    3d:23:51:8a:52:4b:63:43:d1:80:be:29:a9:fc:4c:
                    f7:8f:35:39:da:36:86:ba:b0:db:cc:d7:78:a6:f3:
                    6e:68:df:da:51:a7:fe:2d:07:06:18:53:30:ff:1a:
                    82:44:ae:05:90:01:1b:1a:2c:e7:fb:a7:1e:ae:1d:
                    46:5e:cb:0a:33:0d:cc:51:a2:55:28:46:68:35:6e:
                    90:b4:fd:3a:ed:9a:46:1b:cf:9d:7d:bf:a4:36:f0:
                    10:5a:3d:0e:79:b3:c7:c8:07:eb:81:90:2e:64:dd:
                    e3:5d:4e:4c:da:9e:1e:fa:fe:39:c7:13:e8:c0:67:
                    f8:3a:e2:9b:83:67:6c:d2:c6:62:b5:2c:13:fd:4e:
                    d5:c8:83:1a:9e:17:4f:98:17:e2:bc:c7:4d:16:f5:
                    17:44:c1:4b:e4:ab:d7:a9:80:3f:3a:b3:44:7e:71:
                    17:86:f8:c7:4c:61:a2:01:25:fd:83:7b:e1:22:6a:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E9:33:D9:2B:90:D1:95:AB:51:CA:BF:07:9A:12:AD:2B:B7:D0:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/3bc7e763-1e26-314c-ac7a-edd9ab8e21dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.crl

            X509v3 Authority Key Identifier:
                keyid:E2:2B:2C:05:67:46:19:AC:9A:DD:7B:23:1A:06:D6:5E:35:BB:8A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:88:20:e1:e8:4f:fc:95:57:86:fb:2e:8c:d4:1b:58:0c:50:
         a2:52:23:e2:49:8c:ac:38:20:f0:f1:4c:5a:ea:ef:7e:b9:61:
         90:61:d7:74:30:12:10:96:e9:96:b3:4c:1a:a3:72:27:21:5c:
         bd:1c:1d:e8:40:28:ed:d4:0d:1a:78:39:a7:5e:f9:69:ac:9a:
         9d:fd:c1:d2:cd:45:bb:07:d9:c1:94:7f:aa:d0:9f:81:dc:a0:
         25:d2:b6:47:a2:c1:cd:1e:0b:3c:7a:35:9f:bd:3b:bd:e6:5b:
         ff:bf:de:fe:94:e3:14:ac:59:1a:9c:43:53:43:4b:40:87:33:
         ab:8c:f2:77:cc:e5:b5:b3:56:9d:d0:e3:e7:88:45:01:d5:9d:
         a2:49:6b:39:a3:d7:c6:8f:9f:e3:10:09:36:77:80:64:ed:ef:
         7f:43:f6:84:be:7d:8a:3b:92:86:ce:90:92:27:fb:b2:ac:a5:
         cc:f0:9b:6a:75:d5:48:32:4f:96:aa:a0:5c:7e:10:a7:95:e8:
         1b:45:29:a0:6a:1e:c6:f7:f1:31:b3:75:6f:1a:cb:ed:f7:e8:
         aa:53:fc:16:5d:a3:85:99:3c:b6:df:34:a3:79:6b:8a:1f:18:
         a7:0f:18:b5:45:a7:dd:e0:49:5c:34:b8:aa:32:e0:dd:47:84:
         78:f0:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:27 2025 by rpki-client