Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
File:                     11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa (raw, json)
Hash identifier:          bJBEp6xfafUCK9Cf+3ayheBa+BPjGSLpcTD8ujZOMxo=
Subject key identifier:   9F:14:5D:65:F1:3F:0B:89:60:3B:64:38:7B:02:F0:EA:A3:9B:35:AA
Certificate issuer:       /CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
Certificate serial:       010D0C9F4328584B72C1EE15A06387F2EE436200
Authority key identifier: FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     394760
IP address blocks:        23.140.8.0/24 maxlen: 24
                          2602:fb30::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:ee:15:a0:63:87:f2:ee:43:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=be8816ef-054b-440d-9fc2-03825f126da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:03:e2:a9:ec:4b:a5:d7:4b:35:bb:41:91:
                    5c:52:18:28:5b:75:07:6b:5d:a1:19:c5:6d:1b:82:
                    03:37:2a:89:b7:3b:cb:94:d7:dd:6c:37:30:ae:b0:
                    c6:4a:a0:1f:85:62:03:bc:27:bd:af:59:b0:0f:2e:
                    fa:51:5c:f3:70:b8:09:39:f5:e2:40:f2:45:82:15:
                    7e:96:55:84:79:82:25:40:02:04:0d:4b:39:4b:7e:
                    1a:4f:65:5a:b2:e5:2f:88:a0:b4:4c:8e:23:6c:f0:
                    60:03:79:50:74:b4:41:98:bb:88:00:01:85:12:6f:
                    db:fe:56:e7:53:b3:ca:c4:3d:2f:03:da:06:69:6d:
                    d5:cd:31:1f:51:1d:a3:6b:d6:9c:1f:15:e0:3d:46:
                    f4:93:dc:1f:87:4a:b8:c4:30:d2:5e:b6:c5:7d:e3:
                    78:28:8c:ef:07:7b:8d:bf:31:5a:70:00:9f:ad:4c:
                    93:bd:6f:76:17:42:be:de:1b:c4:c5:78:54:1f:89:
                    c7:7c:fd:e0:e9:50:77:70:9f:ab:29:1a:3c:b9:38:
                    05:36:c5:2f:97:ee:73:65:e9:c6:5c:f2:20:17:cb:
                    3a:41:f3:a5:5e:86:1c:cb:6b:4b:d5:d2:8b:72:36:
                    53:d4:9b:fd:5e:9a:6f:b7:29:5e:e4:8a:7f:5f:f7:
                    e8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:5D:65:F1:3F:0B:89:60:3B:64:38:7B:02:F0:EA:A3:9B:35:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl

            X509v3 Authority Key Identifier:
                keyid:FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.8.0/24
                IPv6:
                  2602:fb30::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:7d:95:61:47:93:2b:17:95:22:bc:3c:d8:4f:5f:21:d0:
         a7:76:04:2c:a0:dd:4a:fe:f3:93:e7:d4:23:c2:49:61:bd:71:
         75:9e:03:2c:f0:00:58:bc:fd:15:69:16:cc:10:3e:bb:aa:84:
         34:2e:47:64:5e:25:f2:77:fc:76:90:d8:2d:d4:73:98:bb:9f:
         c2:81:6f:8f:33:74:df:7b:65:25:fd:9f:6b:bc:cc:c4:9f:df:
         a8:0e:e0:68:8d:95:c6:d2:4d:5f:bb:84:6d:b0:5b:22:1c:c7:
         2e:09:8c:9e:9a:60:c3:09:20:e7:59:bb:19:49:2a:47:52:93:
         a8:94:53:f8:ed:3a:6a:b5:a9:7c:52:d2:e5:44:f8:74:c0:cd:
         7e:c8:6d:bb:0d:14:38:cf:e0:9f:75:82:58:06:99:eb:18:60:
         65:65:67:37:c8:14:49:fb:b4:32:60:96:14:c3:98:ff:8a:6d:
         70:94:24:23:28:f7:85:fa:73:49:af:dd:d3:ad:3b:c0:db:f4:
         9f:29:e5:28:20:f7:87:57:28:ae:78:0a:68:3e:cb:c1:89:c2:
         11:49:2e:6d:06:da:7e:2c:43:68:06:b5:ef:99:57:c7:5e:67:
         3a:81:bf:38:a0:45:3a:64:d7:b0:ce:0d:e7:3a:e2:49:d7:1e:
         45:d0:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:57:45 2025 by rpki-client