Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b88b0ff-0a4f-3d15-b56c-1566639fc0c7.roa
File:                     5b88b0ff-0a4f-3d15-b56c-1566639fc0c7.roa (raw, json)
Hash identifier:          Stc8CFsu7jaWU/p2lMFtQo0hi39NbPeiPE95QdRwzKk=
Subject key identifier:   55:E4:89:FB:48:65:87:8B:47:3E:3E:A6:D1:EF:57:9C:36:04:CB:A8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AD7D130ACCDEBDD62F9D1DE40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b88b0ff-0a4f-3d15-b56c-1566639fc0c7.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.77.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:30:ac:cd:eb:dd:62:f9:d1:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=8990f088-bc3e-4fce-9fc0-e80e9c6c39b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5c:72:5d:e6:54:88:5d:49:d7:f4:8d:37:14:
                    cf:5d:2d:4d:f9:20:3d:2b:6b:a4:e5:45:85:b6:0d:
                    6e:05:69:ee:f2:1d:7d:19:77:b8:b1:9d:5c:27:08:
                    a8:ca:87:1d:c0:e4:c7:12:2c:cc:6e:8e:87:ab:0c:
                    e9:36:85:bb:24:12:dd:e3:b1:78:d9:d6:f6:72:95:
                    7b:fa:53:7b:42:af:71:ae:28:52:67:2a:32:68:15:
                    1f:0b:b4:5c:3b:fd:38:d8:90:fe:f5:8e:72:b2:2e:
                    51:be:5c:12:b7:6a:09:e4:45:13:c0:91:f2:bf:32:
                    54:57:51:e8:68:45:e2:e7:45:db:0c:35:cd:e1:35:
                    23:16:b6:c5:ec:be:26:5d:c2:28:3d:aa:db:c2:42:
                    89:65:94:9d:f3:cc:7b:94:d4:6d:29:ec:b1:67:d0:
                    1c:06:66:09:e4:4f:27:fb:4f:04:5d:cf:b9:3d:f8:
                    fd:07:fc:2b:f2:91:4e:c5:ad:bf:b3:f0:e0:d3:6f:
                    ee:d4:dd:00:e8:50:59:3e:c1:28:89:e6:1b:68:a2:
                    cc:4e:f4:39:4c:af:33:cd:03:d8:89:e8:b4:44:bf:
                    e0:13:78:0b:20:2a:76:60:f4:39:b2:cd:40:93:22:
                    82:84:e7:8c:69:2d:e0:84:76:59:8c:7e:8f:f2:9b:
                    35:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:89:FB:48:65:87:8B:47:3E:3E:A6:D1:EF:57:9C:36:04:CB:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b88b0ff-0a4f-3d15-b56c-1566639fc0c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.77.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:36:62:59:35:3e:3f:7d:6b:40:6a:e9:4b:44:72:3f:76:72:
         b7:5b:7f:ea:69:53:71:64:40:f3:75:15:32:ed:a4:2f:74:ca:
         64:05:b0:98:81:4e:03:8f:6b:3b:7d:1d:f4:30:f9:e5:5b:8e:
         eb:61:4f:60:36:c1:c0:f7:69:a5:a3:ca:09:bf:48:31:3d:7b:
         6c:c5:4a:b6:81:59:ce:95:8c:7c:02:43:44:47:05:fe:26:68:
         90:33:6d:33:06:6b:fb:dc:27:b5:a1:54:2a:c2:04:3d:ac:41:
         ec:26:1d:0b:54:7e:fe:a8:3e:4c:c1:2d:96:4c:00:08:56:25:
         04:a1:be:1b:f6:43:d0:c3:e6:59:52:e8:5e:61:19:1e:64:20:
         f3:ab:f1:a0:6a:7d:e6:62:5d:ba:6a:50:29:35:19:6d:71:69:
         18:89:03:9f:d2:ab:52:ef:c7:59:75:2a:da:6c:9d:5e:fe:7c:
         95:87:70:67:ed:9b:03:42:bb:15:d8:11:20:e2:78:f3:ca:7a:
         d4:9c:22:c6:d6:6f:7e:d8:a8:21:a2:e4:ca:d4:30:66:3c:2f:
         93:34:8a:35:29:85:28:79:29:99:b5:aa:7a:a5:a8:25:a0:24:
         05:0c:c2:a6:e1:0a:a0:ec:6f:a9:59:a2:cb:a1:f5:1e:10:b5:
         80:c1:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:54:39 2025 by rpki-client