Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55a6349e-4bed-35b9-b206-13b03136a383.roa
File:                     55a6349e-4bed-35b9-b206-13b03136a383.roa (raw, json)
Hash identifier:          I5IQ6HGgsTOFs71Q5r8q5qx6cRf19mpmhR1ELlNmQaY=
Subject key identifier:   A7:CD:92:98:9A:A7:8B:73:B1:87:15:7D:A2:8B:F4:69:1D:82:63:8C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B477C980422AF046F14A59A60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55a6349e-4bed-35b9-b206-13b03136a383.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        23.200.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:98:04:22:af:04:6f:14:a5:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=2201c653-a28d-4f68-a09a-b468c44d29a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e2:b1:9a:77:6e:92:40:b6:93:bb:10:47:ce:
                    14:2e:20:1e:e2:b5:76:f2:88:b0:b8:90:47:8c:47:
                    3b:c1:53:17:73:23:11:fa:ba:9d:ce:f4:d7:b4:76:
                    ba:8e:35:04:5a:5a:a0:af:e4:21:af:2d:dc:3e:e9:
                    28:74:14:99:45:44:18:9d:21:96:da:ef:a4:06:28:
                    09:67:fd:af:e1:86:56:34:73:dd:7b:e4:2b:89:ef:
                    42:9f:3d:0c:8b:43:19:4a:d1:2c:23:6e:ce:4f:5f:
                    5a:84:77:3d:23:98:a4:77:79:1e:24:a5:11:3a:87:
                    19:12:fb:05:e9:ba:5d:dc:f3:3c:32:cd:d5:47:a8:
                    71:fe:ec:4e:49:25:8d:64:e6:1d:fc:1a:0a:ab:ff:
                    c2:af:12:b4:4a:71:95:96:7b:27:92:4a:2b:58:94:
                    62:d0:42:7d:20:11:93:0c:dc:e2:6e:55:20:dc:fc:
                    6a:61:b4:f7:94:69:ef:79:8d:ce:1e:3c:d9:8f:82:
                    c1:35:94:99:4b:06:70:0a:91:35:95:29:06:4e:21:
                    bb:2f:dd:45:3e:2d:d1:4e:89:e8:65:7f:d2:6e:c0:
                    26:19:29:4b:60:be:51:45:f1:7b:38:44:c5:a1:e7:
                    78:1f:90:b0:d7:0d:d5:22:53:4a:d3:2a:d4:4f:3c:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CD:92:98:9A:A7:8B:73:B1:87:15:7D:A2:8B:F4:69:1D:82:63:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55a6349e-4bed-35b9-b206-13b03136a383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b3:d1:7a:23:b2:40:d3:ec:61:7b:59:ba:73:44:63:92:72:
         4e:06:25:13:de:43:cb:d2:00:85:29:1c:53:b0:b6:cb:43:a7:
         a6:5e:fe:66:1d:20:42:f2:2f:5a:4a:25:50:20:e9:16:38:10:
         93:73:fd:04:ee:96:ba:de:26:34:d5:f7:85:5b:e6:b1:74:1f:
         ef:e1:10:90:2f:01:7a:ef:f5:ba:cf:12:2a:2d:d1:e3:c5:fb:
         58:c9:f9:e0:ad:66:d3:e0:f8:ae:35:6d:bf:76:24:1b:e4:24:
         6b:64:ba:9d:25:a2:9b:e3:eb:00:fb:6d:0b:13:af:3e:18:f4:
         36:0a:bd:58:31:1c:33:d3:6f:5b:86:54:5a:19:a1:9b:16:2d:
         ba:f0:2b:fb:66:b9:64:1e:b6:ac:78:ca:62:fa:e4:90:de:46:
         14:7f:fe:b1:06:6f:96:1d:4e:9a:18:f6:2c:2c:e9:a7:a1:45:
         69:0e:b9:ca:42:ef:05:c5:f3:c0:d1:aa:5e:23:56:f7:81:2f:
         f2:5a:69:cb:fa:c6:d4:da:f4:ab:b5:08:9d:e9:c9:a5:a6:0e:
         96:70:39:f7:22:ab:61:1a:23:be:24:e8:3b:4d:89:ea:7c:07:
         83:68:de:f0:bf:25:b1:bd:71:10:01:41:10:15:30:12:91:cb:
         42:c1:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:05:12 2025 by rpki-client