Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/30c7134b-40eb-32f5-8e24-6aadae966e69.roa
File:                     30c7134b-40eb-32f5-8e24-6aadae966e69.roa (raw, json)
Hash identifier:          LJMLOt7jwo8PCgcZj5FZ+oFZd6l75PSXiX5jQsrYdnU=
Subject key identifier:   7B:EC:5F:27:63:DA:31:85:9F:A8:79:31:F0:5B:E0:9E:6E:14:D3:10
Certificate issuer:       /CN=f7e22a46-44cd-4462-bb02-872f7aa721b7
Certificate serial:       010D0C9F4328584B92DCE0BCB4A55154C8162640
Authority key identifier: 4B:FF:DD:B3:5D:E7:17:48:AF:51:A3:98:D0:AF:FE:9D:45:3B:D5:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/30c7134b-40eb-32f5-8e24-6aadae966e69.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     30542
IP address blocks:        23.140.80.0/24 maxlen: 24
                          23.181.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/f7e22a46-44cd-4462-bb02-872f7aa721b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/f7e22a46-44cd-4462-bb02-872f7aa721b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e0:bc:b4:a5:51:54:c8:16:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e22a46-44cd-4462-bb02-872f7aa721b7
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=ee342eb0-4aec-4ee1-9e88-f4b5d9df230e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:80:57:97:10:ec:e4:ee:0f:73:da:bf:cf:7a:
                    dc:46:37:05:4e:27:99:55:e9:ee:1d:9b:c2:95:78:
                    84:64:a1:67:77:13:e8:8b:39:93:bc:74:9a:15:95:
                    b4:d4:61:1c:c1:bb:70:2c:07:84:77:e1:bf:01:b1:
                    e6:32:a1:1e:fe:6f:52:53:75:0f:ed:f8:25:05:6e:
                    45:92:35:93:1b:3f:01:65:6b:d2:37:12:5c:f1:c3:
                    0a:3f:55:79:40:8a:07:af:18:5a:df:55:c0:f2:7e:
                    ac:e3:c3:c1:50:9c:b5:34:22:27:6f:34:6b:5f:b8:
                    4c:9a:b9:67:ec:ed:96:31:4a:6d:cd:0c:7b:70:08:
                    97:2e:aa:11:da:4d:7d:b9:04:cf:5a:0a:fc:e1:b0:
                    0f:ef:54:7a:d0:00:06:4e:a7:4b:f4:24:88:d7:d0:
                    82:fb:ad:68:e5:ee:11:87:51:52:45:2c:70:af:cf:
                    5b:90:5f:6d:61:c2:0c:82:f9:28:15:ea:b9:03:f0:
                    16:13:77:38:78:db:85:7c:c3:52:eb:7b:0d:8b:03:
                    9f:bf:10:97:35:04:bd:f9:e9:9c:e4:cd:f0:d7:8e:
                    ed:ec:ba:4d:7e:bd:03:69:0e:9e:8d:d9:bc:5d:f9:
                    8f:da:03:71:31:9f:ee:05:e6:7b:74:f9:d7:af:fc:
                    66:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:5F:27:63:DA:31:85:9F:A8:79:31:F0:5B:E0:9E:6E:14:D3:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/30c7134b-40eb-32f5-8e24-6aadae966e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/f7e22a46-44cd-4462-bb02-872f7aa721b7.crl

            X509v3 Authority Key Identifier:
                keyid:4B:FF:DD:B3:5D:E7:17:48:AF:51:A3:98:D0:AF:FE:9D:45:3B:D5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.80.0/24
                  23.181.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:12:ad:ba:2c:93:d4:5b:49:5b:f6:cd:ed:2f:f9:ab:3d:
         4f:7f:24:50:02:f6:b7:db:6a:a3:a3:ec:d1:84:2a:0f:4e:2e:
         b7:7f:4c:4c:2f:e4:af:d7:0d:ba:85:99:5b:bf:ed:d8:0e:d9:
         7a:03:cb:40:01:98:b1:5e:b1:de:ec:d2:db:87:48:58:2d:ab:
         33:31:2a:8d:db:40:bc:1a:e5:3e:4e:02:a1:58:ed:e6:e2:c5:
         f5:95:37:57:e7:a0:c2:e2:f9:c3:08:c1:c2:b8:c1:e1:ee:67:
         86:f3:21:a6:0f:47:32:2b:40:a6:fc:0d:78:54:57:18:a9:de:
         9c:e9:ee:af:5b:9e:6b:50:4a:ae:0b:43:c3:2a:fc:e5:21:f0:
         88:b8:bb:64:c1:a8:a5:f8:04:16:69:8a:9b:26:2e:a8:10:a2:
         dc:81:fb:ad:c2:13:aa:c7:64:b3:7e:0d:f2:fd:17:4a:3a:86:
         3c:29:2c:0b:00:9a:83:07:37:ee:73:e5:78:88:12:3c:ec:c9:
         4d:44:04:99:4a:08:4f:cf:77:82:c3:24:da:1a:b9:93:76:da:
         49:50:54:ad:06:be:d1:20:16:d2:ea:4d:bf:78:8d:61:75:e9:
         ff:96:6c:58:ca:61:62:a8:88:4c:aa:9d:9a:c7:08:7a:93:3f:
         03:c1:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 17:59:00 2025 by rpki-client