Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59267cd2-09eb-35ab-b3c0-916ada507ecb.roa
File:                     59267cd2-09eb-35ab-b3c0-916ada507ecb.roa (raw, json)
Hash identifier:          AXsCPNlljWIhTapTaQFST6b9bmETKYPd/8N5wEmFZvM=
Subject key identifier:   1A:EB:A1:97:28:08:62:EB:6B:04:46:F6:A0:9B:13:1E:09:43:38:95
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2066DCACBBF0EAB969DE1AC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59267cd2-09eb-35ab-b3c0-916ada507ecb.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.49.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:dc:ac:bb:f0:ea:b9:69:de:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=884eab3b-31c2-438e-b7e6-193f915d4bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:d2:9a:ee:6c:6c:2b:5d:c3:d4:3f:58:ed:
                    5c:9d:b3:dc:36:ba:62:ef:7b:5b:4f:39:93:c5:2b:
                    a2:41:51:5b:c0:51:bd:05:81:ee:a4:74:50:7c:bb:
                    73:8c:7d:40:67:89:de:f1:11:de:df:37:29:3c:5b:
                    ac:aa:84:ad:46:f8:e0:8a:cd:23:88:b9:f3:41:a5:
                    de:49:c3:f7:f2:2c:28:3c:8c:5e:8e:25:20:c1:1a:
                    48:12:8a:df:49:6b:9b:4a:2d:d9:4d:bc:2e:b6:07:
                    56:50:5c:02:21:4f:13:5f:c7:52:6c:f7:87:25:f8:
                    f3:74:bd:bd:60:82:67:fb:2d:ea:92:74:d4:b1:52:
                    ae:5d:ca:dd:b3:0e:01:e4:12:f6:9a:a4:25:3a:3d:
                    cf:47:cc:ff:0c:3c:46:90:55:62:b2:c5:d6:29:29:
                    e3:07:e6:ea:d6:71:84:0b:02:65:f1:8c:e7:f5:68:
                    9c:d9:49:f8:e1:e4:9d:f9:cc:8a:e1:4e:92:39:06:
                    af:8b:5d:28:8e:f9:ab:83:e1:28:d2:1c:f8:4a:de:
                    80:6c:6a:e1:52:be:78:a7:c3:40:5b:28:b4:16:80:
                    7e:ad:59:1d:c9:e1:b1:ef:bd:62:96:b5:8a:95:cb:
                    c2:94:b6:55:bf:7f:79:78:be:2f:d9:e0:16:9f:e6:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EB:A1:97:28:08:62:EB:6B:04:46:F6:A0:9B:13:1E:09:43:38:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59267cd2-09eb-35ab-b3c0-916ada507ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.49.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:63:94:37:52:82:1f:0b:4a:af:7f:1f:34:09:27:1d:c9:05:
         a1:62:ea:9e:00:5b:ec:09:3c:d9:c6:67:ea:77:eb:9a:72:56:
         5c:43:1c:b4:04:a4:11:7a:d5:9d:a0:fd:07:f0:48:b2:a5:87:
         69:c5:70:4c:7d:d9:fa:97:95:4a:dd:4a:c8:74:64:56:13:ca:
         37:74:27:b9:e8:f9:0e:a1:6f:2c:41:1a:aa:98:48:5e:76:5d:
         fe:0a:23:31:4e:5d:e4:fd:9f:06:da:e0:ba:80:44:a5:55:d3:
         10:cb:9a:7b:a7:69:7f:96:62:01:f7:78:0b:6f:0a:04:a5:b3:
         de:c2:02:a1:fb:ff:ae:73:b7:e2:02:2d:d9:9a:d5:83:b7:8a:
         3c:12:09:35:65:89:79:b2:a8:8f:94:ab:a6:26:70:26:25:48:
         f7:d5:36:79:62:00:d8:6c:fc:e9:14:ae:9a:78:c3:c6:31:48:
         84:2d:34:3f:f0:97:91:c8:5f:5c:ca:ea:95:b1:56:cb:c5:ec:
         3e:6b:b0:55:e6:b3:ac:be:58:0c:b2:f9:6f:5f:e6:b0:7e:df:
         48:6e:5b:fc:c8:dc:41:e5:19:4b:86:56:f1:d8:a5:4c:48:67:
         95:4c:81:1e:62:21:c5:07:57:ee:52:ad:8e:b3:fa:c4:21:81:
         40:34:3e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:51:38 2025 by rpki-client