Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c4f753c-3bd3-3321-93ef-f536b4b0fe38.roa
File:                     0c4f753c-3bd3-3321-93ef-f536b4b0fe38.roa (raw, json)
Hash identifier:          fsjXRhK+Qm0tWn0Vn6Z3yGnsp0qNQxl7o+h4RDXJaUc=
Subject key identifier:   CB:1B:1D:D5:19:7C:9A:C6:E4:93:EB:38:B4:3C:3D:A6:42:CD:BA:05
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2FC1B2DC98C8463ABA1CC600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c4f753c-3bd3-3321-93ef-f536b4b0fe38.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.201.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b2:dc:98:c8:46:3a:ba:1c:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=6c766dd6-90b5-4de3-a3a6-4f36678711ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:a9:da:9b:59:b0:76:8d:1c:ac:98:e5:53:
                    48:f8:b2:e8:84:eb:01:f3:ef:a4:62:df:d3:4c:4f:
                    c8:8a:b9:6d:ab:d2:2a:dc:27:59:7f:f2:5a:0f:32:
                    95:93:70:0c:02:c6:61:ff:26:e7:84:9b:07:3f:8c:
                    38:23:6c:dc:49:e5:7c:72:ed:17:22:66:87:3c:d7:
                    f7:75:33:c7:3d:09:51:66:0a:56:39:d9:0c:32:7b:
                    58:a0:23:eb:07:ec:7d:3c:b5:df:1f:4f:95:e7:50:
                    7f:ad:db:0a:d7:10:97:6d:9d:09:18:5e:48:a2:fd:
                    48:14:2a:fa:05:62:cc:3c:3f:38:ed:9f:fc:8b:93:
                    4e:37:15:71:81:f9:af:9f:77:9d:12:42:36:d1:82:
                    03:1a:2c:aa:4a:19:97:94:0d:1d:2b:94:b0:7a:e1:
                    ce:de:fe:f4:4a:8f:47:23:2e:da:b8:24:4f:49:25:
                    11:6e:56:34:3e:67:a0:99:d9:9e:81:e4:1d:f5:27:
                    06:8e:2b:fa:5a:39:e6:29:d5:db:bd:1d:1c:14:11:
                    83:88:a8:93:d1:10:03:ec:4c:a1:b6:98:df:0e:e0:
                    6c:43:96:a7:87:47:7b:53:70:f8:3e:1e:5c:ee:2d:
                    51:6c:f2:70:11:87:52:c2:b5:6b:ce:4b:c2:d4:13:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:1D:D5:19:7C:9A:C6:E4:93:EB:38:B4:3C:3D:A6:42:CD:BA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c4f753c-3bd3-3321-93ef-f536b4b0fe38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:36:bb:80:30:e9:5b:a6:83:d3:01:6c:ad:38:3b:a3:9e:a1:
         2d:15:c3:3e:dd:10:71:96:89:cb:19:b9:7e:b1:03:f1:49:d7:
         82:5e:f5:9e:b0:c6:14:b1:ee:9c:82:d4:79:a2:9b:b2:d5:23:
         ea:46:c3:53:5e:e6:ba:32:63:03:c1:fc:8c:9c:4b:1f:66:2d:
         1a:4e:d5:cd:04:fb:7e:14:14:6e:40:82:6c:e0:8a:4f:0f:4f:
         29:4b:2c:33:00:4e:59:bc:7f:90:48:76:2c:20:9d:48:4e:c0:
         61:93:2b:e2:79:fe:b9:4d:da:dc:72:ce:e0:1e:37:71:92:d9:
         d6:ff:af:a0:4a:08:43:36:52:35:ea:37:44:24:e9:21:77:74:
         c0:97:27:ee:c3:1c:b6:bb:8e:4d:35:6c:da:35:72:4f:6f:0d:
         5a:1b:06:06:d6:51:eb:45:35:10:e6:39:98:3f:94:ba:24:ba:
         7c:82:70:cf:20:dd:e8:99:d7:90:ad:89:62:b8:1b:44:83:81:
         aa:6a:30:c5:df:18:2e:d1:ec:ee:11:c4:30:39:d7:8f:d6:ac:
         ee:03:98:f4:cd:c5:30:7c:25:e7:99:c4:56:87:c8:9e:ea:44:
         c0:38:ac:6f:fe:90:a5:13:68:50:14:6a:d2:98:38:ea:07:f1:
         9f:a6:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:26:40 2025 by rpki-client