Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa
File:                     bd2f992d-6e4a-3230-8636-0526743d0a78.roa (raw, json)
Hash identifier:          pyCnHWUO03kBDGRdaPSz1vfrojEbmXabIZ2gjo4dbpY=
Subject key identifier:   15:41:96:84:33:09:37:1F:59:BE:37:D6:BC:39:E3:98:BA:43:B0:E4
Certificate issuer:       /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial:       010D0C9F4328584ADECBC3041EC6630553DE5670
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     399646
IP address blocks:        23.165.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c3:04:1e:c6:63:05:53:de:56:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=51c5e10b-e53d-4d1a-b9e3-570c8be0741e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:64:44:b6:eb:b5:4f:a7:cd:3f:0d:44:58:82:
                    14:ef:1f:c3:70:ce:5e:f7:ef:a4:87:ac:2b:3c:99:
                    c5:ce:e6:84:f6:cc:e5:67:17:b7:10:58:95:40:73:
                    b2:16:5e:81:d1:b0:01:d6:8a:87:fc:bc:b4:cd:8c:
                    e1:45:31:11:6f:df:2c:32:15:7e:ae:af:91:6a:d7:
                    51:f5:da:51:e2:4a:73:cf:7f:fe:07:27:b3:b7:a9:
                    0a:50:ef:78:c1:79:ee:09:67:a8:74:55:bf:97:2e:
                    88:10:a4:5b:01:ea:11:8b:99:2b:92:dd:34:9b:ec:
                    ca:4d:0b:2e:d5:a9:25:d6:59:f5:b6:1a:da:ca:36:
                    cd:61:57:cf:94:ca:47:df:68:37:77:42:fc:e6:c6:
                    fd:7e:20:0c:92:06:e2:d5:39:0c:81:c8:a5:cc:3d:
                    43:12:f9:55:97:82:0e:21:d9:8d:71:f8:e7:b3:b8:
                    99:30:c9:39:37:b3:c4:44:5a:fb:6f:2c:eb:11:28:
                    d9:9c:24:1e:59:00:82:44:07:28:3d:11:19:fd:b8:
                    99:30:95:2d:78:f0:58:b9:a7:32:29:d8:5b:0b:ab:
                    e1:bc:45:c4:4a:eb:45:4f:32:64:78:53:28:93:13:
                    1b:fe:07:dd:a1:d5:9c:10:24:87:54:be:c9:aa:b0:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:41:96:84:33:09:37:1F:59:BE:37:D6:BC:39:E3:98:BA:43:B0:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl

            X509v3 Authority Key Identifier:
                keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ed:94:a5:f4:8d:84:0e:87:49:53:58:a3:42:cb:57:84:5d:
         3e:7e:24:a7:5f:46:b7:53:6e:5d:5d:73:2f:f4:3a:47:7a:81:
         14:48:9f:d3:5f:74:02:2b:d8:2d:af:45:f3:42:33:83:1d:35:
         42:1d:fe:97:83:93:2f:61:23:d9:ab:92:af:17:38:9b:2f:4d:
         1d:80:43:1a:91:92:a8:ce:22:4a:c5:83:97:11:a6:84:ab:ed:
         c5:c9:d9:34:e8:22:7b:28:cc:6b:a0:d8:66:b7:2f:0b:2e:5a:
         1d:ec:a6:af:50:c6:03:f9:4f:22:68:f2:c6:01:56:a5:bd:7f:
         9e:7c:97:14:fb:eb:f7:3d:9d:99:7b:a0:7c:ff:22:00:f7:0a:
         40:39:32:72:7b:a5:14:6f:46:27:de:db:dd:6b:fa:54:51:5d:
         53:14:b8:58:0e:ff:3f:50:66:28:27:45:03:8f:87:99:0d:1b:
         b4:7c:99:c5:21:b9:4a:65:46:42:0a:a3:84:33:71:f5:62:9d:
         c5:ba:37:58:87:05:70:1a:59:eb:b2:2b:a2:fd:b5:a4:da:21:
         c0:95:bd:09:21:b4:e0:cb:8b:f3:37:7f:92:cd:f3:a7:ea:f4:
         a0:b5:e5:6f:73:f2:b6:53:03:4d:c1:3b:d3:fe:75:05:08:95:
         48:3b:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:07 2025 by rpki-client