Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa
File:                     90b3c37a-65af-33a6-90d6-b28162089b17.roa (raw, json)
Hash identifier:          cxEB57miRb95qTYAfNEaCYjJ0IWWbcbn7uMEckhpIH0=
Subject key identifier:   11:AF:1E:27:1F:63:BD:B4:56:E6:A8:DF:A0:0C:1B:6F:64:07:61:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF6F9AA5CAC2E60E8685180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     24319
IP address blocks:        23.59.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:f9:aa:5c:ac:2e:60:e8:68:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=e661a89d-5ec4-40be-8556-9682b750eaaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:5e:7e:7b:7c:14:fd:5c:74:f0:d5:d9:4d:
                    44:9e:51:b5:1d:59:79:e5:cf:3f:4f:0c:d9:c8:8b:
                    91:0e:9a:f2:47:b5:5f:9e:d2:98:2b:18:a1:85:49:
                    86:f5:d5:02:7e:4f:9c:0f:42:50:d0:02:ed:14:2d:
                    10:45:e3:f8:db:02:ea:52:a8:82:3b:f6:a5:f6:5a:
                    c4:59:a5:c9:f9:5a:8e:6f:21:92:9c:8e:00:10:48:
                    8a:0d:5d:0f:14:39:85:c6:1d:25:d9:04:d4:85:40:
                    09:7f:b6:90:5d:0c:66:bb:be:c2:08:af:20:8a:75:
                    fd:fa:cc:9a:84:3b:e0:ff:9f:4d:13:06:65:2d:4f:
                    72:6e:c7:da:16:3a:07:20:ab:8e:55:9e:92:f7:5b:
                    a2:89:f1:19:bc:f1:77:44:48:15:b8:95:7d:34:f2:
                    d9:6a:14:a8:8f:4c:e6:65:09:68:68:03:9c:93:d7:
                    aa:45:e8:63:55:5e:58:3e:46:e5:f4:47:6a:11:ce:
                    77:27:04:eb:73:59:06:f4:31:56:d3:76:e5:09:12:
                    c3:af:b5:12:3a:ad:b2:ef:e3:e8:bd:c8:27:25:e2:
                    5f:ff:a9:22:dc:46:7a:32:9f:29:ed:00:d8:d4:15:
                    ab:a1:ba:77:58:49:69:d3:fb:b6:43:82:2a:07:a9:
                    d0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AF:1E:27:1F:63:BD:B4:56:E6:A8:DF:A0:0C:1B:6F:64:07:61:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:f0:6a:f6:2d:66:db:80:a5:4b:3b:48:cd:01:9f:fc:47:
         fd:37:33:af:57:f5:8d:33:5b:7d:0f:94:6b:11:24:14:53:07:
         f4:4d:b4:b6:4c:69:be:06:8e:81:53:d3:c0:9a:a0:db:54:97:
         2b:aa:a5:07:48:c0:dc:64:e7:85:f9:d8:ce:4f:fa:8b:b2:df:
         d5:4a:32:a8:54:63:1f:8c:70:20:b4:3b:1f:5c:5e:3d:d3:ee:
         53:ce:f3:17:f7:a0:51:f7:00:51:5b:81:2f:16:6c:64:63:03:
         8c:9e:4b:64:16:b1:73:f0:76:53:af:ce:ab:4f:c0:d7:40:56:
         49:81:d0:1f:0b:f7:b8:1b:11:a6:17:ab:cd:fa:f0:e2:d7:fc:
         9b:cf:7f:e6:1b:b0:10:f8:d8:7a:34:60:db:b9:a4:84:82:e7:
         94:6b:05:54:5e:8c:9b:2c:2d:de:6b:f8:cf:a0:2b:bf:b6:6a:
         64:b4:d5:ea:32:02:ef:f0:56:81:00:12:3d:ad:9a:7c:0e:0c:
         af:67:98:fb:ae:af:39:87:f2:cc:53:5f:00:05:c6:51:33:a5:
         5c:30:2a:0d:4e:7c:96:e2:25:af:aa:00:58:44:2d:fc:8b:3c:
         93:fc:4d:92:c8:97:6e:39:d9:a9:c2:e7:e9:04:93:23:18:d2:
         9d:2f:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:09:56 2025 by rpki-client