Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4d56f81b-1f9c-39c3-9a28-0244c01df128.roa
File:                     4d56f81b-1f9c-39c3-9a28-0244c01df128.roa (raw, json)
Hash identifier:          /eriEu0bsF+ULR6Ln6OUedffKlZKF4FKFs4dSQNOcqo=
Subject key identifier:   91:70:34:56:ED:FE:8F:C2:75:77:10:F2:03:5B:0C:B2:F2:7D:A5:CA
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584B7F520D8B4E07494CA2B7B480
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4d56f81b-1f9c-39c3-9a28-0244c01df128.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     62517
IP address blocks:        23.186.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:0d:8b:4e:07:49:4c:a2:b7:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=f1539921-ea60-4ffc-8fb4-915b419daa74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:db:76:fd:36:d7:db:17:0a:37:00:23:6d:
                    a4:5e:a4:37:06:60:a3:7d:92:99:ee:86:da:25:3c:
                    09:6f:e6:d4:be:a6:eb:62:ad:6b:0f:30:7c:9e:8d:
                    c5:8f:bd:c9:3d:9d:26:42:31:30:af:7f:b9:84:75:
                    91:ee:c4:45:55:63:11:01:00:56:22:01:ce:1a:b6:
                    fe:5a:49:bb:a5:e4:a3:92:c7:17:50:10:dd:0a:6e:
                    ab:62:50:c3:e2:f2:9e:a7:60:dd:ec:08:f9:b8:b1:
                    56:81:ca:36:74:6c:f8:a7:89:e8:f2:be:54:0b:7a:
                    1a:ed:42:83:cf:86:d1:db:ac:0d:5e:d1:07:af:37:
                    0c:5d:09:92:25:46:d9:1a:d3:e2:e1:ff:e4:80:a1:
                    e5:de:b3:9f:f8:b2:c4:31:a2:64:a4:55:c6:ae:8f:
                    ae:10:58:87:f4:73:03:a5:de:e2:a0:54:47:88:ab:
                    79:1a:c4:9f:9e:fe:05:04:ca:d7:c3:f9:eb:a8:d1:
                    eb:0a:04:e2:88:47:02:1a:0f:20:50:ed:d6:6c:53:
                    ab:e0:1a:37:b6:c6:b4:59:90:87:c7:75:cb:8d:ee:
                    8a:41:96:2f:0b:55:b3:a6:a4:3c:ff:3d:09:0c:1b:
                    e7:2a:9f:de:b2:19:d2:19:82:ef:d5:ae:4b:06:58:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:70:34:56:ED:FE:8F:C2:75:77:10:F2:03:5B:0C:B2:F2:7D:A5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4d56f81b-1f9c-39c3-9a28-0244c01df128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:74:0a:10:36:b8:dc:5e:1c:12:cc:31:11:b3:e7:2d:38:51:
         c4:08:08:24:85:d1:80:ae:a4:f2:3a:71:cb:be:3f:b4:64:a5:
         af:91:de:da:41:1a:25:be:c7:b2:80:1c:b6:d5:c4:6c:c1:01:
         de:a1:b8:6b:44:32:57:1a:69:72:0d:1b:65:00:97:7d:bc:1e:
         85:02:2b:a3:01:81:d0:ce:71:4f:80:ff:e1:50:69:16:30:9e:
         ba:54:f3:d2:6c:b1:8a:a0:39:4a:b8:66:e4:4c:0e:b7:36:9b:
         73:12:e1:c3:da:3d:0d:e9:64:a0:de:9c:31:44:90:45:1f:44:
         e2:4c:67:83:86:6a:4a:03:e1:05:69:f7:ca:70:36:47:3a:60:
         57:81:fb:ac:b7:5d:dd:24:35:0b:bd:e6:b3:ce:a4:94:26:45:
         b1:ed:be:5e:3a:d2:72:dd:ed:31:e6:22:db:09:fa:7c:08:6b:
         b5:fc:bd:04:44:23:5f:15:57:d5:11:9a:b6:bb:4e:fa:28:6d:
         17:41:08:57:d3:08:42:1f:08:32:54:33:d4:e1:8c:31:1d:95:
         f5:62:9a:d3:f6:85:c4:ff:9d:d7:36:14:27:21:c6:e7:2d:32:
         00:61:b9:d5:9d:63:02:32:01:6c:9d:a9:e6:dd:5a:16:0a:ba:
         af:58:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:35 2025 by rpki-client