Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa
File:                     644325d7-4abb-3e88-bb5f-f2c2949325d2.roa (raw, json)
Hash identifier:          54BQrUGTE3jejb+EunDbNmNG40jiklYLSi62Po8nRdA=
Subject key identifier:   39:FB:AC:B4:2B:C5:9A:A3:4A:64:8D:7B:76:1D:45:9A:24:FF:32:E7
Certificate issuer:       /CN=10c21a82-48fa-4568-908e-8e488e55c411
Certificate serial:       010D0C9F4328584B970CD362CF1719B3562B4AE0
Authority key identifier: 93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     398717
IP address blocks:        23.166.48.0/24 maxlen: 24
                          2605:f4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d3:62:cf:17:19:b3:56:2b:4a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c21a82-48fa-4568-908e-8e488e55c411
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=92ea2293-7d9a-4eec-88a4-87c19526911e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:f3:c8:6d:1a:fd:8f:4f:f4:8a:ca:0b:a2:
                    a4:78:06:bc:72:9f:b4:e7:a4:7d:6e:e4:3c:f6:7d:
                    aa:58:f8:35:17:2b:25:6a:71:dc:ee:30:03:ec:b0:
                    ee:36:3d:5e:1c:0e:f5:b7:b5:f7:e5:4f:ae:38:3f:
                    f8:f7:eb:89:fa:00:86:db:7b:a8:aa:43:05:d2:b8:
                    e6:36:a2:40:73:7f:d5:7c:76:92:a8:17:9e:51:87:
                    4a:56:de:6c:ab:49:40:b7:96:e7:d9:df:53:ad:db:
                    fc:ad:a1:9e:94:45:e2:45:e5:ac:73:ab:01:67:e3:
                    2f:5d:ef:de:05:98:90:ef:70:4e:27:58:05:25:a3:
                    84:2f:fa:ce:ee:61:69:d2:22:84:f0:31:5f:9f:e1:
                    f6:1d:e6:ba:38:f5:6e:e7:25:da:bb:ad:e2:93:4c:
                    2b:89:fc:d4:20:ad:fc:9b:12:41:97:34:23:84:9a:
                    00:7b:6a:82:39:93:ab:02:50:48:89:af:dc:5e:f9:
                    d9:5c:5b:b1:4a:25:2a:f5:df:d0:ed:f8:9a:91:82:
                    ce:8f:42:f5:ef:4a:58:f5:c8:d5:04:c6:6c:87:48:
                    e2:7d:93:31:fb:bf:42:3d:c6:83:a7:fb:e6:6f:ca:
                    aa:da:58:1f:9c:bc:a8:a3:21:39:ef:d1:09:93:7a:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FB:AC:B4:2B:C5:9A:A3:4A:64:8D:7B:76:1D:45:9A:24:FF:32:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl

            X509v3 Authority Key Identifier:
                keyid:93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.48.0/24
                IPv6:
                  2605:f4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b2:b5:12:8f:8c:f6:34:11:3e:54:cb:7b:dc:24:57:3f:8d:
         8f:ad:a3:2a:ae:1c:2f:e1:1d:15:e0:99:93:c9:32:1b:27:8f:
         97:22:0c:a4:51:ac:2b:d9:27:f1:e1:f9:55:31:cf:af:1c:a9:
         be:ba:52:5f:80:87:aa:19:cc:23:7e:98:5c:58:d6:ab:0f:10:
         67:33:19:ea:2f:2e:e4:f7:57:25:60:2c:d8:81:b1:e2:31:e7:
         a2:b5:4a:7f:4d:75:32:c9:ac:a1:09:32:81:bb:44:24:d0:27:
         8b:f8:43:d2:f0:8c:5b:c8:00:af:b3:b2:c8:ee:30:95:ed:28:
         f5:af:55:7d:51:6a:84:8d:d5:02:82:2e:2d:e5:4d:6d:29:05:
         81:01:47:19:d7:05:04:b5:40:97:56:3b:ac:39:fa:9d:73:09:
         e7:ce:60:3c:d9:28:5a:1b:00:36:18:1b:e5:6a:58:cb:4b:73:
         4f:a2:60:73:57:bf:f8:95:f1:37:72:f4:3d:3a:ff:fe:ee:de:
         6b:36:e6:92:43:63:4b:ca:a5:d5:51:72:21:46:37:8a:4f:0a:
         e1:aa:eb:1b:36:b3:c6:e3:54:79:24:81:57:72:4c:b7:b8:2e:
         0c:a1:ba:75:39:76:76:fe:d5:38:de:48:0b:f2:ae:37:a6:e7:
         2b:6f:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:17:10 2025 by rpki-client