Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/42305dbd-39b6-3efd-a5d8-02e74eaa231b.roa
File:                     42305dbd-39b6-3efd-a5d8-02e74eaa231b.roa (raw, json)
Hash identifier:          +SwVMH55zu+mAfR+YarUr96tMEBUEas187wizNj1b9o=
Subject key identifier:   71:46:0E:07:9D:45:F5:C9:5C:04:1C:A4:A9:38:9B:98:34:32:F3:3D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B851641EF6EC58D5710752FA0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/42305dbd-39b6-3efd-a5d8-02e74eaa231b.roa
Signing time:             Tue 14 Oct 2025 14:35:03 +0000
ROA not before:           Tue 14 Oct 2025 14:35:03 +0000
ROA not after:            Mon 12 Jan 2026 15:35:03 +0000
asID:                     23473
IP address blocks:        173.230.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:16:41:ef:6e:c5:8d:57:10:75:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 14 14:35:03 2025 GMT
            Not After : Jan 12 15:35:03 2026 GMT
        Subject: CN=7efe9eb5-fdaa-4e46-827a-abfbaa0e7d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:ef:ba:f5:cd:8c:d6:3b:f8:c3:aa:d2:1a:
                    bd:a0:d1:23:4a:da:88:f3:2c:31:c4:b5:1f:43:88:
                    3e:e2:e4:4e:3d:2b:89:50:63:c1:2f:f6:2f:ed:7f:
                    5c:49:8e:a9:5b:98:5e:d6:08:9f:41:8a:20:ca:84:
                    3b:44:12:f8:46:da:a2:da:9d:e7:83:17:b0:99:99:
                    8a:73:34:70:f0:9b:ef:5c:84:20:ca:89:1b:0a:55:
                    dd:58:8b:82:04:2a:3e:14:65:dd:32:0d:a4:43:1f:
                    95:f5:d8:e2:87:23:1e:3b:d9:a8:1c:56:28:53:ac:
                    49:db:e4:f3:09:d4:85:9f:42:5f:e7:de:55:74:9f:
                    6f:56:89:0b:57:74:e6:a3:85:1e:f6:af:f3:c2:5c:
                    74:e5:70:a8:85:07:f7:f4:7d:f0:3d:65:bc:4a:f4:
                    19:23:ef:85:93:dc:69:b7:4f:62:05:42:2f:d0:5d:
                    57:38:14:a9:4b:0a:41:5e:31:29:80:9f:52:60:4a:
                    a1:63:1b:24:b4:60:a8:1c:33:26:73:1b:95:52:a2:
                    eb:8e:f4:a9:f5:0d:f2:85:1e:24:81:ca:28:2d:11:
                    36:29:30:9b:74:eb:d3:b8:44:8d:f0:9f:6b:d0:63:
                    50:08:a0:76:74:de:bc:60:4f:22:08:d4:6d:8b:cf:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:46:0E:07:9D:45:F5:C9:5C:04:1C:A4:A9:38:9B:98:34:32:F3:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/42305dbd-39b6-3efd-a5d8-02e74eaa231b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:e1:97:b4:1b:58:c1:53:9b:63:2f:48:6f:6f:d9:20:c3:
         ba:48:57:34:7a:d4:c8:ed:ec:a0:a6:70:64:8a:bc:2d:c0:79:
         3a:35:7c:32:97:6a:d3:27:d3:ad:f2:60:e6:aa:8e:41:80:f6:
         c5:cd:dc:12:2e:5f:ac:23:e8:d1:7f:81:1a:36:5e:6f:5b:98:
         fc:09:c5:fb:f7:97:61:87:6d:0a:68:00:90:77:b1:81:f5:0e:
         16:cd:b1:68:60:c3:93:40:7d:77:f5:58:a3:33:87:7d:18:62:
         1c:ed:02:de:27:db:0d:37:6e:4f:33:56:66:ae:e9:fe:83:30:
         2e:c9:c8:4a:94:1e:33:4e:e0:97:d7:8c:8d:30:ff:53:d1:b7:
         4e:41:1c:34:02:8f:4c:93:40:12:2a:f3:c9:ff:42:a3:6a:65:
         8e:6e:bd:38:9d:88:5d:3a:b4:fb:23:6e:4e:91:3b:bd:5a:1c:
         58:bd:47:1e:be:ba:e0:e9:78:3a:87:e9:c7:7c:1a:0b:55:22:
         a6:fc:9d:97:a3:3b:f8:ce:2c:9a:2e:f9:dd:d0:b0:c0:d4:f8:
         06:2d:6a:5e:19:3b:bb:07:06:64:f3:61:ec:21:ea:84:4a:9e:
         ec:b2:2c:d5:8e:37:0a:57:a8:f4:fb:ad:29:e6:9e:4c:00:7d:
         ce:ae:c8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:21:51 2025 by rpki-client