Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b00f00-5871-30ef-b7d4-09c38abab189.roa
File:                     e2b00f00-5871-30ef-b7d4-09c38abab189.roa (raw, json)
Hash identifier:          7mEBVp8tQLGrVfyCFDI5LQgXuwBAQtt3VGXfOQxClMA=
Subject key identifier:   AA:AE:8B:4B:C0:B8:1A:37:FF:37:1F:E4:77:C3:5E:6F:10:15:29:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF6F283A8EF20005A0BE780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b00f00-5871-30ef-b7d4-09c38abab189.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.55.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:f2:83:a8:ef:20:00:5a:0b:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=4f747280-e53d-4d4a-8b0d-343d8428307c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:f0:78:53:4c:2d:4f:1f:a7:9a:71:27:17:
                    54:e4:f0:e7:66:ef:8e:20:46:11:bb:64:81:16:7e:
                    a5:92:dc:f5:1b:f0:21:0d:95:98:0e:0e:a9:52:fe:
                    d8:5c:5e:a0:26:d9:38:11:a1:ef:e9:77:e6:b0:65:
                    03:98:1f:70:a4:dc:66:7e:34:40:66:8d:de:30:98:
                    8b:67:67:bf:9a:1f:c3:c3:7d:34:95:db:69:bf:60:
                    63:cb:8e:28:d1:eb:2a:3d:d4:05:a1:fe:28:d6:e0:
                    3c:f1:8b:ed:94:e7:13:07:f3:43:63:ab:9d:82:df:
                    74:b0:90:ac:1d:8d:2b:d4:80:63:88:82:96:23:fe:
                    21:ab:19:c2:57:1a:ef:10:bf:69:dd:c4:4b:7f:d3:
                    29:79:4d:48:44:9b:b0:39:6d:b3:8a:da:31:9c:17:
                    52:30:9c:08:a1:5b:b9:a8:a9:57:fb:1a:18:c5:21:
                    28:7f:c8:49:59:c3:e6:ca:35:0f:b3:fc:e1:c3:b6:
                    f2:0d:1e:29:80:c3:86:0b:8b:ce:c4:e7:36:6f:0c:
                    c9:42:e8:b4:f0:ca:32:8e:ed:bf:3f:59:5a:e0:60:
                    42:33:61:52:dc:3e:e9:5a:c1:91:70:87:cc:75:df:
                    22:ad:30:a0:e9:1e:1b:c2:22:ee:00:46:e9:fd:d6:
                    5c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AE:8B:4B:C0:B8:1A:37:FF:37:1F:E4:77:C3:5E:6F:10:15:29:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b00f00-5871-30ef-b7d4-09c38abab189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:52:c9:fe:31:57:cf:fd:97:5b:d9:4b:8e:7f:88:7b:ed:1b:
         21:8c:a7:01:40:ef:a7:90:be:00:63:3a:31:05:96:47:8a:0e:
         8c:91:ca:58:d7:84:42:43:d0:c7:e5:db:76:cc:54:86:86:3c:
         11:70:e6:dd:d3:13:d7:fb:df:c5:01:e6:e5:83:b8:d3:2e:b4:
         31:85:3f:df:a6:bb:83:82:cc:86:a4:fd:85:91:d0:66:43:d4:
         42:72:03:5f:1f:02:cb:bc:86:bd:35:27:53:ea:da:b4:ee:80:
         94:2d:69:45:2f:c2:0b:19:9d:3d:28:67:7f:2a:e7:fa:b2:99:
         d9:41:8c:12:90:22:e1:c3:be:a5:6c:ee:ff:d9:5e:85:fe:77:
         8c:d0:56:a3:bf:33:43:72:8e:46:8d:2b:d7:be:88:4e:3a:12:
         85:22:c6:1c:d7:0f:13:b3:b4:e7:f2:17:ef:40:a2:1d:e1:d7:
         5f:3d:cb:d5:3e:8d:11:61:63:50:25:cf:49:8b:cf:2a:63:4d:
         95:b0:e9:3e:ab:91:a3:09:2e:0f:95:71:ea:0d:a7:fa:60:d8:
         10:80:d7:03:24:b5:67:20:f9:57:a1:9c:94:8b:95:f4:10:41:
         ae:1e:69:7e:57:2a:89:96:37:e2:f4:35:ef:42:ab:e4:c4:18:
         94:a5:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:16 2025 by rpki-client