Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa
File:                     4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa (raw, json)
Hash identifier:          GALNLCgKQuhgScvrEjGO1e8xBN+7Nxf50qoYLrG75E4=
Subject key identifier:   86:28:A5:51:C7:03:F0:84:C3:2A:D8:FA:36:E1:C3:05:40:49:07:6F
Certificate issuer:       /CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
Certificate serial:       010D0C9F4328584B6BC75F411F821947718D5780
Authority key identifier: 33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     197841
IP address blocks:        23.188.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:5f:41:1f:82:19:47:71:8d:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=44a547ee-6960-4b92-b718-38227d181e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:1a:da:35:11:53:b5:d5:1c:ea:21:c1:d4:
                    1d:d6:b3:c1:31:a8:0c:27:e9:a3:4a:a2:df:70:52:
                    9d:68:83:8d:99:f5:0e:5e:0f:0b:0e:fa:c8:a4:66:
                    13:80:e4:d3:e5:cf:63:47:2e:f0:da:58:19:4d:38:
                    92:e5:6b:9a:7e:9b:0a:39:5c:7b:da:2a:97:cd:a8:
                    d0:e1:2b:1f:ff:c2:2b:c1:91:3a:a7:63:fb:42:9f:
                    99:ef:f8:73:02:26:a9:a8:8c:1c:25:2d:af:f4:5d:
                    f2:e8:9a:23:50:64:ee:b9:46:b9:c1:e6:b5:97:6d:
                    02:67:8a:14:1c:9d:b7:c6:26:99:de:9d:b1:8e:4e:
                    a6:be:97:b3:b7:a6:59:4d:37:72:82:b0:db:de:4f:
                    71:45:03:58:76:a0:87:5e:f5:24:96:59:58:27:e2:
                    6d:bd:63:4c:b8:f8:29:a1:36:3f:4c:c9:40:0c:d5:
                    7c:b1:1f:9b:bd:a6:64:0f:f3:e4:cd:8d:1f:c1:1b:
                    0c:26:51:3c:12:08:b0:cd:7d:e4:b7:51:7b:b7:22:
                    23:15:f1:76:1a:20:44:2e:88:1d:46:47:1a:6d:54:
                    93:82:bb:bb:bc:49:97:c8:f0:86:fb:e5:7b:b3:88:
                    da:8e:d7:b9:d9:4f:8f:ef:56:85:e9:83:c7:6f:cb:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:28:A5:51:C7:03:F0:84:C3:2A:D8:FA:36:E1:C3:05:40:49:07:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl

            X509v3 Authority Key Identifier:
                keyid:33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:e0:3c:33:59:3c:e8:99:cc:60:f9:06:12:51:f6:92:10:
         a9:04:74:3b:1e:fc:9f:2e:1d:93:8c:9d:1e:2a:ae:03:bf:c4:
         1f:1d:ae:04:ff:3b:9d:4b:7c:27:56:9c:e5:e1:23:8b:29:0b:
         4f:58:32:cf:e1:a8:6b:8d:41:4e:56:10:c0:80:34:ac:92:cb:
         c0:5e:87:85:12:63:9a:f9:47:46:84:85:b7:0f:e7:bc:ed:2c:
         c6:6e:67:5e:b6:b2:af:d0:5e:63:a9:fc:91:90:cf:51:1c:d3:
         2d:d0:83:97:e2:fc:e2:99:5b:73:70:64:0b:59:86:c5:2c:42:
         9f:31:9e:c8:05:67:d1:d2:aa:36:40:2e:de:51:ef:98:f9:c0:
         db:e1:5f:df:04:f2:52:ef:88:88:34:6f:76:9b:67:e3:45:00:
         f8:fe:a4:66:2f:bf:45:40:80:a7:53:0f:97:5c:ba:b7:56:b3:
         13:bb:14:4a:ee:4d:10:9b:50:09:92:62:df:d4:81:e3:be:49:
         78:ca:29:8e:93:1f:67:51:a9:02:72:4e:48:be:4d:31:75:49:
         56:2d:18:67:82:40:09:c6:a1:b5:c3:9e:0f:85:e4:bd:d7:11:
         c8:e7:87:24:ce:a9:93:bd:3c:31:d4:dc:76:09:75:e1:77:09:
         b7:74:80:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:12 2025 by rpki-client