Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/efb834f3-4901-351b-81eb-f56fe0d2d61a.roa
File:                     efb834f3-4901-351b-81eb-f56fe0d2d61a.roa (raw, json)
Hash identifier:          ZH5HbgeODwz9Wz5FZDUXfekEW9AYtQfvAm51AHobkoE=
Subject key identifier:   63:52:4D:C0:57:5C:FA:F0:EC:E2:84:59:DE:6E:1B:FB:53:04:9B:65
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584B7C875F616C3B2BE840CDF200
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/efb834f3-4901-351b-81eb-f56fe0d2d61a.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     397041
IP address blocks:        23.160.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:5f:61:6c:3b:2b:e8:40:cd:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=8ebd72d3-154e-4c3e-84fe-66db141f0be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:29:4c:73:d2:19:d8:f1:a8:23:a1:b9:00:5f:
                    1f:5a:2f:03:9b:a7:3d:43:3b:4e:63:af:60:5d:4d:
                    93:9d:1e:a6:5e:56:a4:95:6e:d8:7a:6a:72:ed:04:
                    1c:f5:c8:02:39:92:4e:c4:99:31:d1:2e:05:4c:65:
                    bf:41:f8:ef:e5:17:dc:af:ee:38:74:81:18:4d:63:
                    3d:97:b8:55:52:d9:27:43:22:e6:51:cc:97:b1:31:
                    8b:32:41:a6:ed:f3:b3:77:ac:6e:86:c4:20:33:d3:
                    0c:90:b5:6c:20:95:e6:6b:a1:3f:e8:d1:d7:87:84:
                    b1:6a:bb:5d:8d:88:3c:03:a7:ad:8e:13:c9:bb:0a:
                    1d:ac:35:2d:86:81:b8:40:d8:8f:33:70:39:09:22:
                    5e:23:5c:3f:7d:e5:d7:a6:18:13:7f:80:1c:ed:c6:
                    c1:59:23:a9:76:58:6a:15:71:75:1f:c2:88:2f:3a:
                    d5:da:c5:43:f2:97:c7:3b:dd:ca:81:ee:aa:46:b3:
                    47:09:c8:6e:04:bb:e0:fe:b3:18:6a:6d:89:97:f4:
                    ca:bf:6c:ee:1d:88:c9:27:70:33:35:f3:8a:83:b5:
                    c4:e2:c6:04:10:d1:e5:37:9c:92:ca:1b:23:a5:4e:
                    60:b1:b8:09:08:56:ac:5f:86:06:3f:8f:5f:8f:8d:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:52:4D:C0:57:5C:FA:F0:EC:E2:84:59:DE:6E:1B:FB:53:04:9B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/efb834f3-4901-351b-81eb-f56fe0d2d61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9c:03:4d:7a:5f:6c:f2:cd:21:62:20:a1:7b:93:cb:bf:03:
         24:0e:04:10:5b:8a:fd:a1:fc:85:55:6f:31:f9:2f:d8:32:72:
         fe:29:fd:43:d7:57:64:01:68:4f:ea:3f:52:02:27:09:e7:88:
         b8:ed:52:e1:b0:66:df:82:94:24:a8:41:8d:1f:e7:c1:30:07:
         25:e2:7f:4c:bc:5a:a1:73:6b:2c:f8:0e:a5:2b:78:31:d6:13:
         54:91:c8:6b:cd:8a:a8:95:1b:25:de:ff:7f:5a:b2:21:3a:fe:
         87:aa:b4:05:8f:25:4c:f7:d8:c5:22:8b:21:30:f2:2a:1a:09:
         3d:d6:20:da:a5:5b:4d:e3:68:37:ca:6f:81:ea:8a:4d:8a:fe:
         cc:4d:87:f2:be:48:b4:b7:db:a5:c1:db:29:5d:26:10:9a:da:
         d4:4a:04:80:fa:1c:f5:c0:76:56:80:e4:6e:d4:c4:11:8b:88:
         27:7f:72:cb:87:a4:0d:da:e6:ff:2c:d4:12:c6:ee:97:45:9c:
         96:52:e8:74:a1:c2:ad:ef:22:2f:a4:50:15:56:0e:14:89:94:
         ca:13:be:dd:ca:d9:10:c1:dd:f2:00:2b:17:0c:a7:78:1a:f9:
         32:ca:4f:ac:5e:df:db:cc:f2:9b:22:8f:e2:d4:d4:1f:d1:69:
         b4:5d:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:53:48 2025 by rpki-client