Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa
File:                     e7592285-1d81-39f4-b9ef-2e69e22050f1.roa (raw, json)
Hash identifier:          KNw/tBv1Ksl0E+4uEFPEcllqwgveLRMk8uq3vI9+790=
Subject key identifier:   B9:15:50:2E:31:39:73:79:7D:4A:3B:F1:A0:AA:9E:68:5A:9F:BB:08
Certificate issuer:       /CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325
Certificate serial:       010D0C9F4328584B5F3779CFEDFF243B3DFC33C0
Authority key identifier: 09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     19710
IP address blocks:        23.138.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:79:cf:ed:ff:24:3b:3d:fc:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=1da83414-deb4-4733-86d9-872ced8e806a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:52:94:81:38:1b:a6:11:5b:f5:7e:d8:18:8a:
                    50:d0:04:ff:e1:6e:d4:79:c1:3c:79:91:6f:78:66:
                    7f:97:6b:66:ac:22:9a:0d:28:7b:83:10:bb:3e:52:
                    07:7b:db:2e:fe:6d:53:eb:e2:ce:8c:ef:4e:49:61:
                    02:ab:07:b8:d5:31:33:3e:de:d5:28:cf:b3:07:81:
                    b7:38:e0:d5:b6:90:87:5f:7e:d5:6e:46:0b:df:8f:
                    0e:7c:83:b1:66:2d:df:85:a9:9c:e8:f4:b3:c2:67:
                    74:6c:a0:ef:e6:ca:3e:ad:0c:4b:73:70:96:62:f6:
                    a8:f4:8c:95:7a:91:d3:5b:2a:66:e2:85:bd:39:e9:
                    f3:11:01:70:53:7b:97:dd:b0:41:da:8c:94:9d:b3:
                    d3:e4:f1:66:b1:bd:27:d6:96:e8:44:a8:ef:a6:8c:
                    96:52:bd:ae:19:76:97:ea:a2:fa:35:e9:6e:80:4f:
                    af:e4:76:fc:8a:93:bf:48:73:79:ec:35:d5:c2:73:
                    83:9e:e1:cd:a8:31:aa:2f:29:fa:50:10:f8:0f:44:
                    db:83:f3:0b:ab:79:ae:9e:d1:a2:73:3a:43:cb:2a:
                    c4:99:d7:92:21:4c:77:95:4d:f3:20:16:24:ba:d6:
                    80:76:45:5a:a1:4e:aa:13:77:b2:9b:d4:ad:84:f2:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:15:50:2E:31:39:73:79:7D:4A:3B:F1:A0:AA:9E:68:5A:9F:BB:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl

            X509v3 Authority Key Identifier:
                keyid:09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:93:02:76:58:4c:e9:4b:55:b3:16:48:d4:f6:62:a2:3c:
         a4:9e:ba:65:90:3d:31:ff:9f:4a:e8:19:77:3d:f2:08:ff:d7:
         87:bf:a8:8d:12:1b:b1:43:3c:46:b7:35:3b:2a:2e:57:e7:0f:
         db:d6:55:a9:08:06:69:17:c8:0a:d8:e6:27:18:1a:2d:bb:d9:
         a6:03:6d:5f:83:84:6f:ae:da:f8:73:5c:b8:91:80:54:17:0c:
         f2:96:1d:b8:ba:e9:6e:d2:8c:a1:9d:08:91:83:cc:64:98:8d:
         93:ee:14:68:a9:fe:d9:d1:f7:ab:7d:a1:df:94:59:1c:fc:ed:
         f0:b1:57:fb:f4:65:a5:7f:53:73:9e:ab:f8:c2:33:37:11:d4:
         7a:bd:5b:4a:99:51:71:82:59:73:24:0d:e0:a0:63:55:70:46:
         06:57:2c:e0:e2:39:ed:a3:ac:33:d0:3a:19:55:21:43:2c:dd:
         c9:0d:56:7e:41:fe:91:13:01:eb:ca:47:69:d3:63:78:8a:d7:
         42:20:fa:52:fe:47:19:cb:eb:00:ea:a7:84:f3:0d:c1:cc:51:
         7d:9e:4f:ef:1d:e4:99:b8:ad:6b:2c:52:01:df:cc:71:4f:54:
         07:a5:4d:62:bc:5e:46:bd:5f:7b:2e:a8:8b:ff:da:21:d2:c4:
         e2:87:fa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:05:48 2025 by rpki-client