Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dd7fb6d-aacc-3afe-afde-ed2886bae3a5.roa
File:                     8dd7fb6d-aacc-3afe-afde-ed2886bae3a5.roa (raw, json)
Hash identifier:          p2Hq1lEh7B+e34GkSlhBc1OWUJIfi18iZV0xC/Hdvdw=
Subject key identifier:   F5:CE:29:88:61:E3:70:FC:BC:B7:DA:3C:E0:39:EC:89:77:86:AD:EA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF70A4836CDA5ECFF778300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dd7fb6d-aacc-3afe-afde-ed2886bae3a5.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.58.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:0a:48:36:cd:a5:ec:ff:77:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=7742055e-f13f-4376-b4a4-e007785beaae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:8a:ae:1e:c1:68:d8:e9:54:41:f6:b6:48:
                    55:aa:80:04:07:a2:16:85:f4:91:dc:69:de:c0:c9:
                    57:37:47:ca:87:66:b6:b2:ad:bb:e6:bc:01:70:18:
                    b4:98:9c:9a:0b:3a:a7:91:47:2a:ae:22:3a:5b:b2:
                    09:f3:e6:6c:95:16:f1:62:b3:53:c2:df:b6:f1:77:
                    17:d6:13:9d:d6:4a:9b:ab:a9:15:20:55:91:5a:7e:
                    d8:70:a9:05:ec:b9:71:3e:42:21:9b:d3:37:6e:d3:
                    48:b2:15:b7:cb:43:cd:ac:d2:fc:23:3e:c8:0d:26:
                    84:2c:d7:b4:d1:28:c6:61:b6:bf:69:09:01:4e:41:
                    e3:86:ac:66:d2:e4:70:e1:d0:c0:14:c7:3d:2a:ac:
                    e9:c2:2c:9c:86:f7:07:d3:40:61:76:da:f2:9e:52:
                    b3:37:9b:38:e7:e9:25:4d:2b:a8:4f:11:ed:6d:df:
                    dc:a5:1a:ff:3e:d3:4a:9f:4d:2b:86:c4:c1:89:30:
                    fe:1b:a5:9c:1e:08:99:68:dc:74:0e:5b:34:8b:f9:
                    f6:80:62:89:ef:97:0c:fb:b8:3b:00:45:9d:23:4d:
                    aa:c8:07:b6:79:94:35:6a:04:62:46:c7:e4:3d:21:
                    95:6a:2c:5b:97:33:0f:9e:9a:db:e1:f4:ce:b4:c7:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CE:29:88:61:E3:70:FC:BC:B7:DA:3C:E0:39:EC:89:77:86:AD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dd7fb6d-aacc-3afe-afde-ed2886bae3a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:da:6e:4b:eb:e0:f2:19:73:fc:6f:53:a1:69:dc:71:7a:
         b3:bd:f2:b5:5d:d4:75:97:55:00:ab:88:1e:9c:c2:59:22:c3:
         13:b6:27:97:42:19:41:99:4e:08:0a:d7:25:ed:e6:8c:6d:85:
         7c:d1:40:6e:8e:84:56:6e:70:c6:c3:ed:6a:3c:c1:50:7c:99:
         b9:f2:9f:60:d3:08:1a:58:fb:67:4b:56:d0:0a:57:49:2b:d5:
         a9:7f:90:72:0b:cf:b2:08:fe:af:cd:0e:57:b7:f8:62:ff:62:
         44:fa:e1:02:6e:1a:9e:4d:00:b9:9a:74:c7:40:99:a7:a5:46:
         46:e1:63:4f:7e:51:b8:92:e4:4e:cd:22:66:39:eb:e4:fd:e0:
         eb:62:b3:c5:fa:a5:9c:7a:e6:61:a8:f4:a5:dd:4f:8a:b0:7c:
         d3:82:9f:e1:88:bb:33:79:84:4d:a5:5d:5c:7b:6a:44:3d:16:
         58:e5:13:f9:70:b4:41:d5:95:34:fc:fd:af:8f:3a:47:50:5d:
         7f:f3:b9:c3:29:44:71:e4:d6:9f:cd:01:47:d3:7f:df:95:e0:
         35:e1:70:e5:2d:6b:1d:c0:0c:5a:c4:94:4a:a2:03:e0:ef:62:
         37:88:c3:e4:48:25:cf:5e:a1:94:cb:80:73:8d:dc:ab:b0:19:
         f8:f7:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:48 2025 by rpki-client