Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/79d542c1-7535-313b-a2a3-2996cfb5b87f.roa
File:                     79d542c1-7535-313b-a2a3-2996cfb5b87f.roa (raw, json)
Hash identifier:          f6IQO7YfFcV8rihVkmgDXdIWbIjKbEsGMeAkoPa0pr4=
Subject key identifier:   44:88:56:63:24:79:24:D4:43:09:37:1F:04:EE:24:EB:4E:7E:8C:5F
Certificate issuer:       /CN=fbdf8030-f526-45ac-a17d-e304c3d89f05
Certificate serial:       010D0C9F4328584B6BC7584C5A06B049FB4C1900
Authority key identifier: 91:B4:F2:70:69:98:07:8E:00:C1:19:CF:93:55:11:0A:66:46:E8:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/79d542c1-7535-313b-a2a3-2996cfb5b87f.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     63023
IP address blocks:        23.162.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/fbdf8030-f526-45ac-a17d-e304c3d89f05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/fbdf8030-f526-45ac-a17d-e304c3d89f05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:58:4c:5a:06:b0:49:fb:4c:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf8030-f526-45ac-a17d-e304c3d89f05
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=603635bd-10c8-4e08-8ce0-a4feea33a4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:dd:69:73:d0:d5:fd:f6:73:50:0f:ed:2a:
                    30:17:d7:0b:7b:c9:68:e2:0c:1e:cc:12:30:4a:31:
                    7c:33:59:da:d6:9a:a8:68:1d:9b:d2:c5:41:82:a7:
                    2d:37:2f:45:f1:ea:69:84:d5:7a:45:c9:a6:0e:87:
                    3a:d4:59:39:d0:d0:e6:86:f5:27:94:af:a8:f1:89:
                    d6:b5:37:79:6f:f5:3a:57:ec:78:d9:98:d0:7e:0e:
                    c8:59:85:56:85:83:50:6f:6f:2c:af:2e:37:e0:74:
                    f9:e5:8d:0a:fd:45:4d:e9:7f:c4:95:41:2a:6f:ff:
                    f6:ab:1c:ef:14:f2:c3:6d:26:92:01:dd:ef:df:30:
                    fb:14:71:22:a0:b3:f2:1f:cc:e2:6f:ba:ad:37:95:
                    ae:9b:9d:26:f6:1f:cc:b2:b4:1c:9f:f8:77:de:0e:
                    fc:fd:47:8c:9b:1a:0c:1e:36:e2:df:6c:91:e8:93:
                    de:a8:ba:66:ba:1c:16:ad:55:ac:e4:f8:59:9a:6a:
                    ff:5c:74:a6:fb:19:ca:40:7f:f7:36:3a:20:03:32:
                    6f:e1:66:8b:d1:bd:f4:96:db:77:d9:44:a3:a2:5a:
                    c0:85:61:33:99:d8:72:3a:7d:bb:61:3b:39:c2:d0:
                    c4:1b:a5:92:3e:2a:7b:8c:40:29:5a:13:96:54:a1:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:88:56:63:24:79:24:D4:43:09:37:1F:04:EE:24:EB:4E:7E:8C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/79d542c1-7535-313b-a2a3-2996cfb5b87f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/fbdf8030-f526-45ac-a17d-e304c3d89f05.crl

            X509v3 Authority Key Identifier:
                keyid:91:B4:F2:70:69:98:07:8E:00:C1:19:CF:93:55:11:0A:66:46:E8:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:55:39:ed:3b:aa:c5:8e:ce:fa:03:77:62:da:52:ef:71:b9:
         40:c0:54:ec:0d:2f:8e:1b:41:be:83:c2:0b:2d:55:05:8a:2c:
         04:ab:ca:d7:91:2e:f0:da:c6:a8:4d:0f:d0:c5:a4:dc:e2:20:
         1f:44:92:2f:0e:34:1c:0a:6f:86:ea:08:50:fa:f6:2b:0a:26:
         ca:4b:b7:d8:a9:b3:81:d1:94:46:68:a0:3a:62:f4:13:d3:3f:
         41:60:47:a5:dc:1c:2e:21:40:3e:d4:51:b5:29:01:68:eb:5d:
         71:d4:43:67:06:b3:13:f6:51:52:ae:e1:4f:76:e7:71:41:42:
         80:0d:49:ac:16:a2:19:eb:14:2f:f4:2f:1a:f1:38:25:50:8e:
         ad:f7:4b:8a:4b:3e:2f:ce:df:34:c0:c1:47:3d:cd:78:fb:d6:
         7e:30:c8:4e:ba:96:73:97:01:91:b6:4d:3c:3c:30:c3:0f:f3:
         ef:27:72:a3:42:08:dc:dc:ec:2c:3f:66:9c:6b:ee:48:63:83:
         56:03:ad:c0:85:ed:ce:d2:a2:8a:45:6f:c2:da:2d:20:97:3a:
         e8:7f:a9:75:f9:27:28:f5:26:13:b1:bf:43:35:c7:e0:42:80:
         dc:c0:c9:c0:a3:2e:f2:cd:86:50:30:28:9b:f4:07:f8:30:e8:
         83:45:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:32 2025 by rpki-client