Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/c62a69a2-a7b6-3a15-a94c-8e7dee1da206.roa
File:                     c62a69a2-a7b6-3a15-a94c-8e7dee1da206.roa (raw, json)
Hash identifier:          w+d3qb3S7EhcmdYRAHh9o1wVWb0zb+wSZdTDx/XOdmw=
Subject key identifier:   E8:65:74:56:2B:B6:5E:42:0E:0C:37:3A:D7:8D:1B:1B:58:E5:75:61
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F4328584B5E9F4048F30C954FEB388480
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/c62a69a2-a7b6-3a15-a94c-8e7dee1da206.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     210630
IP address blocks:        23.137.248.0/24 maxlen: 24
                          23.137.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:9f:40:48:f3:0c:95:4f:eb:38:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=43cfb5c2-9ca5-4a7b-abbb-9f6890002024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:c3:e9:0c:83:74:e7:ec:5e:3c:1f:7d:f5:
                    9b:ed:39:0a:82:a1:1c:27:27:e6:3a:18:94:bd:44:
                    28:46:2b:b5:dc:77:f7:a3:48:ba:af:6f:df:74:56:
                    a5:9b:25:b9:1e:d1:8e:d6:bd:15:33:28:46:d9:b9:
                    76:5c:31:4c:a2:72:ba:dd:82:62:0e:5a:a6:11:f5:
                    69:0e:dd:71:30:c5:d5:9e:0d:3e:2e:8a:40:2c:3c:
                    bf:c7:9e:cd:5a:73:19:52:0c:2c:1d:d5:5e:3d:63:
                    bd:af:c7:61:84:9a:5c:b3:6e:a2:08:29:48:f4:2e:
                    9b:8b:80:9d:55:3d:47:b7:03:76:c6:fb:19:8e:8a:
                    6e:27:22:fb:48:9a:c1:e5:7f:d4:16:98:36:9b:a7:
                    76:72:9e:0e:61:73:6f:02:da:22:bc:07:62:24:ec:
                    2e:18:c4:d7:3c:52:a6:22:93:4a:04:98:a1:69:90:
                    ce:18:7c:8c:20:d3:9a:db:8c:32:80:54:52:1e:5e:
                    29:32:fa:8e:67:6d:75:35:03:5b:a6:fb:34:4e:ea:
                    14:25:fc:77:1b:97:1c:44:18:e1:d1:3a:23:6c:ea:
                    bc:c2:9e:15:65:91:5c:98:f7:73:fc:7e:0d:dc:19:
                    aa:c9:a9:ce:62:39:2b:f4:79:dd:e0:cf:0a:c5:e1:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:65:74:56:2B:B6:5E:42:0E:0C:37:3A:D7:8D:1B:1B:58:E5:75:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/c62a69a2-a7b6-3a15-a94c-8e7dee1da206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4c:be:c3:00:9f:04:cd:4a:11:4a:f3:72:13:03:54:8b:c0:
         86:fd:0e:80:f0:75:14:60:e1:54:d6:2c:e6:60:e0:54:4e:75:
         cd:93:6d:18:bc:69:4b:bb:14:e3:c6:ef:24:49:4b:a3:02:07:
         04:07:ed:d4:c5:90:32:04:d9:f1:68:0c:d9:17:49:fd:cf:7e:
         3c:a2:9a:ca:23:7d:89:82:63:1d:e8:bf:f5:23:51:ab:aa:df:
         29:b3:82:39:cd:02:ce:47:a0:d9:a7:68:ed:ed:81:81:70:e2:
         2a:23:c2:30:46:fb:d6:16:1b:f6:a8:7b:30:75:38:ef:39:3d:
         15:05:cf:3c:d6:e4:a8:a9:93:a4:0f:2c:86:6b:6f:09:f8:0f:
         03:f0:e6:7a:a1:1a:9a:3d:d5:e0:ca:59:37:a4:3e:15:e4:42:
         e0:08:08:30:98:d5:bc:65:e3:50:d0:76:b3:ae:bc:f9:17:b9:
         60:1f:b0:6c:ed:6d:31:85:c3:ea:c1:ee:c6:08:38:ee:e9:5f:
         69:af:b8:09:48:32:dc:5b:a8:49:e9:c8:47:08:eb:d2:8e:f1:
         cc:d1:60:fc:3d:69:d1:c3:ec:14:1d:fd:b0:2b:52:43:f5:05:
         d1:21:4a:7d:dd:79:a0:09:d4:ad:af:a5:b2:ae:0b:c4:8e:86:
         f3:42:ea:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:00 2025 by rpki-client