Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/e596a165-02d5-33fd-87fe-483f72b6c767.roa
File:                     e596a165-02d5-33fd-87fe-483f72b6c767.roa (raw, json)
Hash identifier:          CHM+v3eX3IRfnWLv9/smoTNtzLOTlBUjK3/0qt2zaQY=
Subject key identifier:   46:23:64:BB:A4:21:5B:AD:D0:26:FC:E8:6D:98:BB:C3:E5:E6:63:70
Certificate issuer:       /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
Certificate serial:       010D0C9F4328584B3F1C5F080A974DCA12508AD8
Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/e596a165-02d5-33fd-87fe-483f72b6c767.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        23.169.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:5f:08:0a:97:4d:ca:12:50:8a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=b07e6060-4d79-45cd-9322-a2f26f5a0610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:81:89:13:c9:7d:1e:d3:3b:3e:c1:17:68:
                    40:2d:12:19:d7:91:cf:0b:af:a3:19:58:ce:09:43:
                    39:3b:3a:51:81:37:78:f1:a2:a0:0e:f9:f2:fb:0b:
                    44:1a:58:5e:3c:1d:a9:17:69:9f:a1:f1:11:ba:43:
                    87:48:7b:b8:92:97:82:31:a5:ca:10:85:7e:82:51:
                    98:2c:c6:b5:ea:47:f0:ed:c4:3d:24:28:92:01:a6:
                    1a:ed:d5:51:36:0e:e3:4e:28:7b:e0:2b:18:67:94:
                    1a:09:64:d3:9d:d7:b1:fa:0a:5a:67:68:4c:72:ae:
                    f1:c6:b1:59:a7:e5:24:af:ba:ef:76:97:a5:d6:0a:
                    f2:15:d3:7c:3d:0c:cf:c2:67:16:b0:80:60:86:07:
                    ec:7b:32:62:a6:a5:04:d2:4e:95:dc:9e:8f:95:c9:
                    f2:1b:b5:47:0f:48:13:8b:41:b1:df:33:92:56:b1:
                    18:4e:7b:3b:8f:88:31:81:85:10:aa:b1:bf:95:8e:
                    b7:5d:3d:33:ab:d6:b1:5d:59:98:56:6d:c3:31:51:
                    da:85:0b:1a:0c:25:fc:cc:32:2f:12:c0:dd:74:55:
                    0b:1a:e6:50:87:e9:ca:ec:20:bd:b2:de:7d:68:51:
                    5f:d9:ea:8c:0e:49:2c:f6:99:e4:2b:b4:d2:b7:c5:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:23:64:BB:A4:21:5B:AD:D0:26:FC:E8:6D:98:BB:C3:E5:E6:63:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/e596a165-02d5-33fd-87fe-483f72b6c767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl

            X509v3 Authority Key Identifier:
                keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:65:bc:3f:66:91:36:94:67:68:8b:9a:3f:cb:73:08:15:cd:
         2a:e8:19:cd:5e:f5:74:c7:62:af:e3:6d:18:c2:da:49:7a:cc:
         b0:8c:67:05:02:75:b0:48:11:f7:87:9a:b1:07:64:b1:44:86:
         18:74:7b:77:82:32:4f:98:3c:23:63:93:89:03:ff:a1:d9:f8:
         20:43:bc:c9:4d:eb:73:0c:02:79:18:71:10:fb:06:b9:e2:67:
         db:c6:58:7e:38:f1:c0:71:41:35:c4:bb:3d:74:49:25:b1:76:
         44:bc:cf:33:dc:4e:31:a8:67:0f:5f:ec:f1:00:10:e1:8f:47:
         67:59:5b:df:ea:61:84:cf:e2:64:2d:3a:29:3e:f4:f7:81:27:
         c3:92:7c:dc:12:37:e1:11:0e:a8:58:bb:e1:1d:a9:d1:74:e0:
         a2:53:30:0f:30:31:1f:3c:10:c2:6c:91:77:da:6c:d4:b4:9c:
         f9:a5:8b:df:84:a7:43:76:71:8b:37:71:f1:cf:3f:92:75:7e:
         ce:f8:d5:cf:86:b7:75:50:01:f9:19:14:b5:b7:a3:48:20:3b:
         6f:6d:67:1e:42:66:d2:f7:00:1f:e3:73:44:9b:14:7b:e9:c3:
         6c:8c:d6:e4:92:f4:91:7c:4e:ff:0b:97:e7:50:af:a9:c0:d7:
         9d:37:bd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:11 2025 by rpki-client