Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa
File:                     9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa (raw, json)
Hash identifier:          XhwY4P3nHupHJPUxEuPKRO7O1ncecqRTbFwsgfZ/nBo=
Subject key identifier:   27:F7:82:58:77:8E:80:73:FC:8F:65:CE:3E:5F:85:6F:E5:AE:52:9B
Certificate issuer:       /CN=55263d01-2075-432b-94d1-01f0c1c34295
Certificate serial:       010D0C9F4328584B4FDC8064A50440A818A24D00
Authority key identifier: 2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     401556
IP address blocks:        23.133.68.0/24 maxlen: 24
                          2602:f71f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:80:64:a5:04:40:a8:18:a2:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55263d01-2075-432b-94d1-01f0c1c34295
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=83d5ddc3-059b-4392-a304-3aadda1688b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:36:9d:41:b5:27:d1:09:d5:7a:c9:58:1a:
                    c1:22:d5:c3:ed:b7:db:9c:82:e5:82:09:bc:cb:3d:
                    6d:24:a1:c8:95:c7:9b:7c:ee:91:67:4e:38:b7:ff:
                    a3:2a:1a:6a:5c:82:a0:c4:19:36:28:44:19:08:6f:
                    44:8f:bd:9f:f3:50:83:75:f8:7c:74:21:70:90:59:
                    f3:66:0e:2f:dc:e0:20:70:95:1b:23:a0:09:77:7b:
                    c5:7f:31:e3:da:43:b6:4c:60:99:99:7e:53:d7:11:
                    9b:a0:55:14:63:e3:33:86:1c:cc:81:d7:dd:1a:9b:
                    52:53:39:b5:bc:e5:8d:1e:fd:f7:fa:a7:b5:37:a9:
                    b2:f7:1a:bd:72:a7:c0:13:36:2b:09:a9:1b:a8:5b:
                    15:62:51:67:28:9a:81:5f:ba:5e:41:7a:08:44:51:
                    36:3e:55:39:f1:ab:1e:26:07:7a:34:75:74:3f:70:
                    38:a5:02:b1:60:a5:6a:19:21:c8:ba:53:39:74:e2:
                    6d:9f:7f:df:83:f0:7d:49:de:3f:12:39:ed:3f:36:
                    be:3a:68:45:2f:af:9f:a0:c3:63:9d:90:0b:7b:25:
                    16:f8:ce:24:4a:71:ed:6a:aa:21:4c:71:1c:84:03:
                    24:cb:92:a2:83:e5:32:46:94:e4:02:cc:5e:2d:9a:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F7:82:58:77:8E:80:73:FC:8F:65:CE:3E:5F:85:6F:E5:AE:52:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl

            X509v3 Authority Key Identifier:
                keyid:2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.68.0/24
                IPv6:
                  2602:f71f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2c:1b:34:6a:47:91:23:9c:63:17:bd:ab:fc:5a:39:16:59:
         9d:d3:50:34:4f:68:cc:2d:80:29:d3:52:0b:d1:bb:ed:ae:c9:
         06:75:0f:1f:79:e6:6e:78:c5:ae:f8:72:f6:b7:e2:6d:0b:20:
         ab:ca:ec:c8:9f:7f:74:56:1e:a0:37:05:a3:a8:fd:f8:55:09:
         2b:e1:ec:b6:c0:ba:47:14:69:50:c0:7b:64:d8:1c:33:cd:6c:
         6f:0e:b7:1a:9f:c3:ec:36:47:42:07:46:8b:70:0b:45:a0:ba:
         9f:96:ef:8e:d5:73:66:c3:f5:63:9e:1b:47:3a:47:c7:68:ac:
         aa:e9:fc:3c:56:09:43:73:3c:45:9e:45:ea:71:2f:5a:0d:b7:
         1e:d0:44:e0:0c:06:82:0b:6e:57:de:11:2f:b5:72:2f:b8:b1:
         d6:33:ce:c4:2f:d4:ea:6f:83:41:10:85:ff:3f:d0:9a:60:1b:
         6b:d2:2d:da:ff:a8:d0:90:36:86:94:ed:53:cb:1c:77:4c:16:
         d3:31:68:13:84:f4:c4:b6:6b:25:f1:a4:55:d0:9d:f7:b3:d1:
         29:83:1d:d3:9f:37:39:5f:f9:ce:d1:45:e1:aa:b7:b9:77:11:
         36:a9:a7:fa:9c:3d:7f:df:03:58:ce:78:fe:4e:cb:d0:a1:81:
         77:8d:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:26:23 2025 by rpki-client