Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8a20d9c-2d2e-3fcf-8fa1-bc0f32d21f59.roa
File:                     a8a20d9c-2d2e-3fcf-8fa1-bc0f32d21f59.roa (raw, json)
Hash identifier:          qI1G+che41ZpSogxu54BjPlbFiNOlvYUxKJSoDjcSZE=
Subject key identifier:   7B:B9:3B:D0:54:71:92:42:54:1C:40:FA:34:B7:B3:D0:D8:B8:DE:3C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AEDDC8D8428BC4DEB94816680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8a20d9c-2d2e-3fcf-8fa1-bc0f32d21f59.roa
Signing time:             Thu 21 Aug 2025 10:31:44 +0000
ROA not before:           Thu 21 Aug 2025 10:31:44 +0000
ROA not after:            Wed 19 Nov 2025 11:31:44 +0000
asID:                     20940
IP address blocks:        23.11.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ed:dc:8d:84:28:bc:4d:eb:94:81:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 21 10:31:44 2025 GMT
            Not After : Nov 19 11:31:44 2025 GMT
        Subject: CN=4e823223-1fd4-45f9-bab8-feeb47158f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:0a:9b:a4:b7:f8:3a:1e:0f:93:7f:e9:51:
                    7f:af:5f:dc:09:b8:68:af:9d:ab:ea:08:a6:38:a1:
                    3c:29:08:24:45:df:b1:c1:08:9e:46:14:f7:32:1c:
                    14:35:3c:86:a8:22:8e:60:a4:5d:a0:46:12:83:0b:
                    83:79:60:71:84:23:14:7f:6b:9b:4c:0b:b7:b6:be:
                    de:b5:7e:77:fb:0d:a3:ed:f9:75:ee:cc:45:0f:6e:
                    d6:ce:59:1d:5b:6a:a3:48:25:78:8a:e4:aa:c0:92:
                    28:fd:68:9c:44:d5:80:e3:a5:86:8e:d3:14:26:38:
                    91:8a:53:88:35:b8:fa:74:8d:f7:26:23:e0:41:ae:
                    16:33:aa:58:2c:28:ab:cd:81:6a:62:e1:44:33:f4:
                    0f:51:7d:c4:3d:93:44:d2:ab:37:43:6c:c4:72:66:
                    46:53:f0:92:58:50:ce:77:a8:8a:a3:fe:0d:7b:53:
                    e0:70:d2:57:c5:65:d4:32:d2:1e:e9:76:6b:d5:94:
                    1a:ad:64:ac:d9:dc:c1:4e:5e:54:d5:96:2e:d2:b0:
                    91:40:ee:9e:f9:56:37:f5:c6:15:a0:c1:49:b1:f6:
                    cb:0f:b5:26:b5:17:67:f7:47:e2:e3:54:f9:d3:7b:
                    3a:d9:32:04:fc:42:95:18:00:44:88:76:a6:6d:21:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B9:3B:D0:54:71:92:42:54:1C:40:FA:34:B7:B3:D0:D8:B8:DE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8a20d9c-2d2e-3fcf-8fa1-bc0f32d21f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.11.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:c7:3e:5f:f6:2e:0e:2e:bf:11:66:a8:a7:42:e4:ab:e1:
         f3:26:99:ca:4d:4b:38:23:ab:62:09:e5:11:9e:94:5d:9e:80:
         85:c4:40:3a:dc:1d:2f:cd:cd:b7:5a:6b:07:8c:4d:fa:48:a8:
         31:44:93:57:4b:a4:5a:f1:bd:41:65:66:92:e0:6c:12:b1:ff:
         03:0b:64:93:64:5e:27:2e:3b:fc:67:e2:02:ee:ec:bd:9c:57:
         c8:00:7c:1a:26:40:85:d9:1b:d7:c2:55:52:0f:5d:85:fd:39:
         14:86:cf:86:df:19:25:bc:fb:db:27:13:54:f8:ff:d3:24:bf:
         77:1c:97:11:45:db:6e:0a:bd:bd:6b:ad:67:09:8b:90:bf:83:
         fd:61:ed:86:e6:56:25:11:44:51:89:9d:d8:d1:6a:50:e9:d6:
         8b:0d:fc:43:3f:14:e9:fd:c5:c5:c2:fb:53:6f:9e:25:ca:49:
         c1:96:56:9a:0e:a8:fd:c2:3f:e9:b1:13:ac:22:fe:20:f3:aa:
         b6:60:77:9a:f1:99:f1:3f:02:9b:59:3c:90:51:18:ce:f3:20:
         bb:95:c0:7e:13:76:fd:03:1e:13:0e:9e:0f:1f:a5:f2:3d:6d:
         cc:a3:fa:c3:91:7b:4a:7d:88:5d:82:81:4e:51:36:5f:31:95:
         88:0e:ef:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:44 2025 by rpki-client