Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c88fb08-1d81-3d09-b9a9-483bda5f693d.roa
File:                     1c88fb08-1d81-3d09-b9a9-483bda5f693d.roa (raw, json)
Hash identifier:          tnxCRWoQhv1zXFf9iC+IqATr/5cDPDYj8uO8vYrZh+A=
Subject key identifier:   14:C4:83:1D:E4:EE:94:77:49:D3:B4:AF:F0:D5:39:73:29:38:12:EF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5218110BECBD0103DECB00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c88fb08-1d81-3d09-b9a9-483bda5f693d.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     19157
IP address blocks:        23.86.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:18:11:0b:ec:bd:01:03:de:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=2516da50-2d2a-4239-9624-3122a8d5235d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:46:ab:59:0e:6b:d0:a9:3a:3d:70:70:49:44:
                    73:0c:d9:f5:23:ba:d7:f4:4d:a2:04:3f:a1:99:bf:
                    c4:15:ce:92:07:db:04:b8:2e:d5:3c:3e:67:21:64:
                    f7:5e:8b:0b:53:8c:26:6c:d9:67:da:f5:12:c0:63:
                    10:4d:59:78:d0:bc:ce:62:a1:65:d3:be:67:b9:61:
                    a8:a0:6a:1e:80:12:6c:2a:a8:4c:0d:51:46:ae:08:
                    a8:dd:f2:7d:21:88:c1:0f:e9:66:14:98:15:4f:67:
                    1c:59:b7:ac:75:bc:a2:de:dc:e2:0f:cd:93:bb:91:
                    d2:74:14:c8:c7:ab:d8:34:19:e8:da:39:2c:87:24:
                    fc:8d:f3:37:d5:38:b2:2d:da:13:42:27:dd:14:e4:
                    67:cd:69:43:e6:43:42:90:e8:9f:e1:0a:68:a6:c7:
                    64:0d:be:4f:43:62:bb:4a:c9:e3:5b:0c:c7:c4:78:
                    d5:fa:35:ee:6b:2c:b6:b9:ca:f0:df:05:f9:73:e9:
                    a5:2f:86:4f:62:0e:11:59:f8:a0:c6:ee:65:32:79:
                    c2:71:cc:e6:f6:21:d3:19:0d:5e:62:d8:91:bb:9d:
                    4f:aa:e4:93:a3:18:b8:77:59:bd:af:9a:de:2c:ee:
                    f9:b9:76:44:4e:ce:e1:44:3b:ed:f8:54:b8:cf:3b:
                    0d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C4:83:1D:E4:EE:94:77:49:D3:B4:AF:F0:D5:39:73:29:38:12:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c88fb08-1d81-3d09-b9a9-483bda5f693d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:55:a6:1f:56:d1:f2:45:ab:16:53:88:e1:9a:cc:b6:ea:9d:
         b2:c7:75:ec:84:f1:dd:a6:88:c6:cc:5f:53:f4:1e:3a:e2:e0:
         51:23:c9:f9:6b:dd:4e:3f:ec:8f:3a:fa:32:0b:f6:08:70:86:
         c3:cc:e2:4a:cc:c1:d0:93:ae:05:a5:83:42:74:67:d3:33:51:
         60:70:ff:f5:fa:6f:35:91:ba:72:4d:a6:d1:60:e9:df:00:59:
         5a:92:1a:97:60:5e:cd:50:60:ca:a9:35:de:c6:fd:49:79:17:
         45:4b:95:10:96:46:85:7c:d4:a0:f3:4f:49:ab:cb:52:7e:ee:
         77:2e:9c:fb:5a:7b:13:40:9c:bc:c6:d0:19:79:e7:51:72:5a:
         86:94:6b:29:bc:5a:c6:d6:b0:c2:60:da:6f:0e:02:47:e5:aa:
         33:9e:f1:02:0f:70:05:5c:a6:3f:33:16:e1:57:41:c5:1c:7b:
         65:d6:1e:da:8b:f7:66:eb:3c:f6:db:65:8b:ce:60:60:01:b6:
         55:90:15:ac:1c:fc:57:8c:73:23:1e:b4:21:87:71:9c:7c:07:
         fa:7c:b6:45:99:e4:00:58:d5:1e:80:eb:04:16:3c:be:f6:85:
         25:9d:35:28:b2:21:57:f2:11:45:7b:09:40:ce:38:da:cf:19:
         94:50:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:42 2025 by rpki-client