Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
File:                     603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa (raw, json)
Hash identifier:          JXQwZxwPFS5UH2QdlJw8ZC6mXgftNUfbq5fgpe1KbYU=
Subject key identifier:   BB:54:0D:F6:A0:54:0E:E2:58:D2:42:B6:F9:87:8D:D7:E9:57:1B:A8
Certificate issuer:       /CN=4164770e-1f48-4239-921d-775b5152fa2e
Certificate serial:       010D0C9F4328584B7B21FAE1B413C03A318BEAC0
Authority key identifier: 83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     20055
IP address blocks:        23.131.120.0/24 maxlen: 24
                          2606:acc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:fa:e1:b4:13:c0:3a:31:8b:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4164770e-1f48-4239-921d-775b5152fa2e
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=05824cb0-b60c-44b4-b5cb-887bc6cb704f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:81:dd:e1:de:c7:b3:ac:09:25:22:7b:8d:c6:
                    07:36:a2:66:14:02:a8:02:73:ac:29:82:c6:46:ee:
                    8a:98:6b:cf:17:ae:d0:f4:9a:44:10:8f:8c:d5:94:
                    a8:48:15:dc:d3:20:c0:e6:7d:38:3e:3e:db:dd:17:
                    af:c0:8f:49:cc:45:07:c7:a9:a2:cf:8e:c2:e2:84:
                    81:de:73:20:ea:6d:b4:e4:3c:ed:1b:b3:16:a6:af:
                    32:a6:2f:4b:49:21:f7:7a:2c:07:1f:80:d3:f3:c4:
                    87:0f:90:5e:1b:ad:b9:84:f5:7b:9f:e4:db:d9:5b:
                    74:ec:eb:2e:b9:d4:f9:ae:fc:ff:4b:12:cb:56:73:
                    a8:0c:9d:b3:f8:df:61:e1:7d:4f:07:62:14:fa:08:
                    5e:d6:e3:72:b2:4c:01:e6:ac:42:19:a6:2c:2a:e5:
                    df:e9:58:89:c0:21:03:5b:e5:c0:5e:bc:b8:a0:b8:
                    45:f8:32:d7:93:95:8a:de:47:ac:a5:db:ad:b1:91:
                    a4:27:a5:fc:1c:5f:62:b3:13:d4:0d:5e:e1:f2:fe:
                    70:1c:4c:fc:b4:c2:8a:73:c5:30:53:35:ff:e9:89:
                    dd:83:0c:0b:e5:bf:36:e6:b1:8a:f2:d6:05:94:36:
                    58:30:cd:ff:dc:12:3b:51:80:42:46:5c:00:bd:51:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:54:0D:F6:A0:54:0E:E2:58:D2:42:B6:F9:87:8D:D7:E9:57:1B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl

            X509v3 Authority Key Identifier:
                keyid:83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.120.0/24
                IPv6:
                  2606:acc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:d5:01:25:37:7f:3c:0f:69:e8:68:b5:d6:3c:d4:93:c3:
         cd:c3:8e:14:c2:fc:56:c5:a4:32:ff:d7:89:68:fc:c0:46:95:
         b8:53:88:75:d2:aa:29:4e:28:c7:8d:91:e9:e3:bc:5b:f9:3b:
         22:45:94:e1:54:a0:8d:48:88:5f:64:61:3b:d5:75:0f:9b:69:
         fa:97:b4:7e:6f:04:da:e0:23:ba:70:eb:59:aa:68:8b:7d:e1:
         ef:0e:dc:1a:b7:b2:d4:97:01:11:3b:8a:e7:2d:20:79:df:58:
         a4:c3:fa:74:34:7b:9f:1e:52:e4:b5:94:bb:03:38:13:ad:11:
         12:30:2d:b4:80:af:4e:15:8c:ff:96:7c:7f:7a:aa:61:ec:61:
         58:ba:cb:33:f6:7a:53:93:51:13:e0:26:3b:ed:9f:ba:7c:af:
         3a:e8:e1:63:4b:09:23:00:bb:b6:45:f8:4f:b9:00:f8:8f:00:
         3a:80:73:f8:4c:da:8d:72:d9:f6:7f:0b:47:25:f5:28:d9:a8:
         7e:5c:9c:bb:d9:f1:5f:40:6d:03:dc:d4:42:b7:a7:ae:38:41:
         4f:04:a4:4d:15:31:08:3f:ab:01:33:c2:1d:1f:98:85:14:64:
         4c:5e:9c:67:a3:e0:48:bd:fc:4d:7c:b8:7e:d5:67:46:8a:0c:
         ac:1d:3c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:50:44 2025 by rpki-client