Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa
File:                     1d03ded5-67ad-3adf-8fac-21785cf59a34.roa (raw, json)
Hash identifier:          KwNCBfBIvHir20XNfoaly8EoB8OVcnHdha2Jo6d6SbM=
Subject key identifier:   BE:73:D6:98:2D:E3:7B:DD:6A:82:93:71:A0:45:16:C5:D7:90:76:A7
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584B5571D4DB0C07CE7F00F16008
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        23.234.160.0/22 maxlen: 22
                          23.234.164.0/22 maxlen: 22
                          23.234.168.0/22 maxlen: 22
                          23.234.172.0/22 maxlen: 22
                          23.234.176.0/22 maxlen: 22
                          23.234.180.0/22 maxlen: 22
                          23.234.184.0/22 maxlen: 22
                          23.234.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:d4:db:0c:07:ce:7f:00:f1:60:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=5a89dc48-09e4-4125-b796-ceb65f8d5bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6b:67:6f:8c:6e:66:89:0d:fe:e6:46:07:f5:
                    79:d2:3f:b6:e5:36:15:d6:11:a1:73:97:c5:51:a5:
                    d2:55:49:44:82:3d:54:1c:ba:e3:12:03:5a:0e:4d:
                    9f:94:f7:d8:62:35:60:96:4c:0e:61:10:22:8d:26:
                    bd:24:e2:7f:36:b7:a0:db:c4:1d:ca:7d:bd:da:cc:
                    7a:2a:c0:6b:0f:21:2c:75:1d:2c:c8:e3:6f:1d:2a:
                    e5:73:14:1a:27:74:08:d9:7a:61:41:45:5e:2c:47:
                    1c:6a:8e:b6:47:a9:8b:f3:1d:53:52:a6:06:d4:ce:
                    b5:ee:4e:42:87:3e:af:0c:65:8d:71:e2:91:0b:a5:
                    25:6a:17:17:1d:0b:35:8a:b1:03:df:d7:50:be:b4:
                    e2:1a:c9:86:99:f7:55:32:c6:51:a4:1a:1c:2c:72:
                    32:2b:02:21:8e:b6:84:4a:9c:82:cc:56:58:f1:76:
                    cd:34:31:9f:07:a7:fb:b7:a3:98:0a:06:73:8f:b2:
                    71:62:c3:66:d2:5e:b5:b5:bc:ca:6c:05:b9:18:ad:
                    3a:7a:a1:79:1a:16:6d:92:ca:f7:5f:67:bb:c4:b9:
                    ee:b9:36:1b:38:82:92:c6:6a:0e:d6:a8:5c:b9:39:
                    6b:60:79:a0:ee:0a:65:34:4b:9d:a7:d6:72:c5:04:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:73:D6:98:2D:E3:7B:DD:6A:82:93:71:A0:45:16:C5:D7:90:76:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:89:47:20:ab:38:e1:98:38:93:b6:d3:94:64:6d:e7:0f:de:
         77:d2:55:66:38:01:8e:95:ed:8c:8e:a6:62:cc:80:c6:de:8c:
         bc:61:1c:18:4a:d3:94:d1:38:6e:d0:e0:30:20:b2:d7:ba:e2:
         8e:db:38:9f:3b:ea:cb:e9:ea:a2:0f:dc:28:ff:d1:52:d6:72:
         dd:2b:12:15:2a:f8:e0:43:4a:e9:56:cb:98:d9:34:01:87:09:
         cf:32:52:aa:f9:8f:d3:dc:3b:2d:6a:8d:ae:b6:01:35:52:ee:
         9c:14:3f:c4:e7:28:d7:8d:15:9b:87:99:86:b9:06:9e:0d:1b:
         00:c0:4e:97:82:b9:38:22:7e:a1:0f:ed:74:f6:c8:32:14:4d:
         9e:b2:e8:49:d2:7a:78:38:5e:70:e3:7f:51:d0:e7:c2:73:8d:
         0d:46:cb:01:9a:ef:e5:09:80:1b:f8:68:22:df:46:82:fc:61:
         a6:01:be:89:08:44:34:98:94:7e:60:07:61:ee:e5:90:4f:2c:
         e5:28:f7:8f:d1:5e:b0:f5:76:1b:2b:ae:10:d3:ec:eb:51:0e:
         81:1b:42:b0:ce:5e:34:63:15:c7:5e:9b:74:83:4a:37:d4:45:
         02:ce:60:be:e2:c7:74:88:12:94:43:04:fe:50:32:a3:24:5e:
         75:a4:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:12:19 2025 by rpki-client