Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70527228-5bad-3862-ae83-dd9c8ebc0258.roa
File:                     70527228-5bad-3862-ae83-dd9c8ebc0258.roa (raw, json)
Hash identifier:          yrQmMkWJ4+UJx+2ESTCUyi/vMOuocX1cHk+h/xnbs0g=
Subject key identifier:   B6:08:44:FE:BE:B1:56:56:6B:DD:4B:6F:9F:1C:D4:70:D9:41:ED:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B1C37166AB4A76EC4AFC15700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70527228-5bad-3862-ae83-dd9c8ebc0258.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.44.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:16:6a:b4:a7:6e:c4:af:c1:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=55f018ea-169c-4f88-900b-9f07bc959d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:93:f3:ac:02:3d:19:15:30:c1:9c:46:7b:
                    85:a3:17:55:e5:66:a9:b3:33:15:fb:c1:c1:4a:5b:
                    b4:7a:c9:ef:d7:22:ca:53:35:7c:de:80:88:8a:3a:
                    cb:ab:95:03:23:3b:83:2a:6a:82:a2:e5:4d:98:89:
                    20:30:41:59:07:3e:cf:02:3d:76:65:a4:51:44:e8:
                    5a:fd:5e:af:db:9c:54:04:49:9c:62:b8:a4:fa:cd:
                    0a:d9:b4:4b:12:aa:12:ca:a1:8b:02:4b:ff:4f:05:
                    81:be:f1:cd:eb:50:36:86:7d:2c:94:be:0d:84:29:
                    67:dc:d6:de:3b:c8:c0:7e:c8:6d:df:98:5b:30:66:
                    21:a4:80:6e:cf:d6:bb:5f:38:b0:62:b3:92:c8:6f:
                    86:45:5d:41:15:2f:e7:1f:86:c0:f6:ed:33:55:e4:
                    ba:e8:44:69:41:02:7b:75:38:25:2c:aa:7b:bb:04:
                    75:b0:50:99:1b:6a:55:22:a5:32:2d:70:47:37:15:
                    73:e5:6b:e8:21:e6:71:bb:28:02:20:0f:3e:ae:bb:
                    83:6f:4c:e4:72:e7:43:8e:ba:7c:0c:51:2c:e2:e8:
                    8e:cd:78:54:63:7d:75:e7:9e:06:5c:53:26:34:df:
                    98:d3:2d:c8:44:d5:bf:21:0e:70:3e:16:27:99:5e:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:08:44:FE:BE:B1:56:56:6B:DD:4B:6F:9F:1C:D4:70:D9:41:ED:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70527228-5bad-3862-ae83-dd9c8ebc0258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:78:62:9e:5d:32:65:07:d3:fc:a0:0e:87:96:5d:a2:69:e7:
         e2:33:e3:8e:16:0f:05:c9:a5:7b:dc:f4:64:ff:78:99:a8:dc:
         9a:01:f2:c6:df:7b:b8:f0:ba:84:2a:fb:67:55:54:50:20:11:
         2f:48:18:61:82:5b:d3:83:02:7d:7c:34:91:f4:8d:4b:4f:7a:
         c8:9c:12:02:a6:48:72:d4:35:c2:19:27:e4:11:c5:1f:fb:3f:
         d8:58:28:e2:43:bd:cf:3c:f5:b7:bc:33:15:2f:92:a5:c3:87:
         87:61:10:1f:03:ca:5c:4a:d8:28:65:29:1a:58:4b:1a:62:fb:
         69:78:45:18:75:5a:2b:ea:4a:50:f8:2b:85:50:96:09:08:46:
         69:6f:d6:1d:f9:c1:37:0f:29:c7:23:93:6d:12:a6:98:f0:1b:
         9f:b4:02:b9:28:ff:bf:e7:bb:09:9b:5b:1a:cc:5a:25:5f:d6:
         30:c8:a6:1b:61:81:08:21:ec:b6:a1:64:d2:a3:7c:bb:08:37:
         53:69:fd:90:b7:5e:cc:26:5b:84:3f:17:66:88:e1:5b:fe:b9:
         bc:79:5f:25:45:e0:5d:60:0a:29:81:7f:e2:4f:22:08:10:cc:
         2c:23:cb:21:e1:50:35:8f:86:56:72:c5:7b:e2:bb:4e:44:2a:
         bc:61:11:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:22:55 2025 by rpki-client