Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa
File:                     7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa (raw, json)
Hash identifier:          mcw+maVQ1OIemJ9Nv3H3dJvsqgSuFakBOkHoKw0FCUs=
Subject key identifier:   E5:45:6E:43:C9:8B:AE:EA:AD:ED:3D:47:36:B8:98:0A:86:EB:4C:51
Certificate issuer:       /CN=937e4376-b17d-4219-977d-431a97bf5b34
Certificate serial:       010D0C9F4328584AECC143C556F5FB8FF0C9F600
Authority key identifier: 05:25:1C:56:9C:6B:1D:B4:CD:12:A0:6E:26:CD:6E:B1:98:16:B5:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     401361
IP address blocks:        23.190.248.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/937e4376-b17d-4219-977d-431a97bf5b34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/937e4376-b17d-4219-977d-431a97bf5b34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:43:c5:56:f5:fb:8f:f0:c9:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937e4376-b17d-4219-977d-431a97bf5b34
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=80dce220-b573-4cef-b1da-bc19ae39a8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:92:71:f6:48:82:ea:40:45:64:46:45:d3:
                    36:6c:22:f1:53:40:7a:f5:25:1e:53:30:df:d8:ee:
                    00:68:5b:dc:a5:a6:8d:a2:46:56:9f:4a:c9:25:8b:
                    9e:1c:b8:02:e2:e2:42:b3:30:53:49:3d:e8:5f:51:
                    19:e4:e1:cb:c6:7e:6d:30:b3:68:08:90:94:23:9d:
                    52:32:11:b2:91:8e:8a:19:ff:f9:3f:bc:92:57:31:
                    cc:59:66:b9:f3:20:24:4e:c8:1c:a4:f3:49:ff:45:
                    b2:d3:39:fc:4c:04:f2:09:f7:3a:a4:64:16:f4:17:
                    67:de:90:f9:6f:f2:6c:54:a6:6e:cf:07:a3:32:fb:
                    ff:2a:b4:18:cf:b9:be:76:aa:0f:19:91:2b:4b:94:
                    3a:64:eb:f8:88:56:b2:1d:97:5b:d7:57:04:25:a9:
                    a6:07:ff:f8:f6:e4:24:9a:0c:29:72:2e:14:ae:ec:
                    8e:73:e0:38:2e:03:84:a9:fc:64:fd:de:b5:ac:d0:
                    b4:b4:12:db:28:4a:95:5b:84:5b:87:a7:c8:0c:df:
                    c5:38:22:b7:d2:17:a5:60:29:e9:30:b5:a8:9c:e8:
                    e6:9f:17:34:4d:fa:a4:bf:1b:c0:58:41:40:d1:9b:
                    f0:44:84:b7:a4:35:02:39:1c:19:cd:44:ee:84:6a:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:45:6E:43:C9:8B:AE:EA:AD:ED:3D:47:36:B8:98:0A:86:EB:4C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/937e4376-b17d-4219-977d-431a97bf5b34.crl

            X509v3 Authority Key Identifier:
                keyid:05:25:1C:56:9C:6B:1D:B4:CD:12:A0:6E:26:CD:6E:B1:98:16:B5:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c9:8c:f0:1c:6c:ba:64:60:4d:c0:0b:fe:6a:3f:90:71:95:
         23:9a:6a:e2:ed:5b:5f:8d:a5:62:ed:56:e1:6f:1c:f0:cc:6a:
         72:3d:94:22:86:19:76:d1:ed:07:4d:3e:d0:f5:19:9a:95:34:
         66:d5:43:77:bb:d1:fe:7e:08:79:1d:56:95:de:48:4a:9f:9d:
         f2:6d:cc:51:37:78:b9:21:68:19:04:7c:5f:9e:6b:fa:c3:db:
         d3:a5:28:9c:19:58:11:28:16:0d:4d:05:31:fd:f7:d8:95:4e:
         d3:94:db:6e:a9:60:b0:bb:7f:42:5f:72:0c:27:ce:c4:82:b5:
         29:2a:df:a8:0a:40:f2:05:27:59:2f:02:20:58:56:77:0d:46:
         a4:34:df:7f:b2:dc:73:a2:3c:b9:21:9d:10:49:fe:00:d5:b6:
         9a:7e:2e:3b:0a:5f:78:70:37:cd:b1:86:90:75:eb:b0:da:95:
         51:da:07:f6:cf:ad:1c:dd:ab:2c:49:01:8a:a6:78:db:7d:ea:
         ba:e0:f9:23:db:87:74:84:b6:87:a8:29:26:3a:b9:ba:16:3d:
         d3:50:b1:e9:81:3d:89:0e:7b:b1:95:bb:47:68:16:c8:8e:c6:
         fb:52:50:c8:bb:ff:45:cd:c4:91:d3:a1:7c:f2:d1:d9:5e:3d:
         82:04:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:41:39 2025 by rpki-client