Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e57a01b2-626e-3974-b97a-b41c3d3bff21.roa
File:                     e57a01b2-626e-3974-b97a-b41c3d3bff21.roa (raw, json)
Hash identifier:          1XvvTMTcu0JduEYG3/CUBfcIqbUTtgXa/mUrZR4h+fk=
Subject key identifier:   10:B0:37:DF:7A:25:3E:B4:FA:B4:A3:F4:87:62:3A:E0:7C:BC:60:77
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B758CA7D335ECCA38B6CD28C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e57a01b2-626e-3974-b97a-b41c3d3bff21.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     21342
IP address blocks:        23.63.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a7:d3:35:ec:ca:38:b6:cd:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=7cf7706f-8ab5-4314-bda7-f5962cb86365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:b8:10:71:a0:2f:8f:65:cc:e0:61:28:7f:
                    f4:49:e3:00:1c:10:92:8f:f5:1b:15:5a:64:ca:86:
                    d1:02:c2:83:ef:01:af:06:1e:3b:d1:db:70:ff:1c:
                    83:68:71:8a:3d:5d:fa:ce:c9:23:67:20:a8:7a:fc:
                    66:8c:0c:81:1f:5c:5c:1e:38:a9:1b:14:40:c3:23:
                    53:dc:a9:0d:57:5d:84:e3:e8:b6:7e:63:bf:b0:65:
                    e7:a8:cf:33:45:af:76:4a:d2:21:2b:d8:ed:fe:1f:
                    b2:04:79:bd:c9:05:2c:90:c0:3f:d2:4b:38:d9:50:
                    69:5b:88:f0:d8:ea:95:6f:2d:f9:a1:83:62:81:c0:
                    53:ca:42:3d:82:75:43:b5:c1:82:68:e3:ee:c6:46:
                    9a:86:0a:76:dc:a0:2f:8b:af:4e:50:d7:87:f3:c0:
                    46:82:14:18:ee:27:b3:72:c9:f7:ee:c4:5e:e0:f7:
                    5e:b2:7c:f4:f3:a0:97:79:49:ef:39:62:5e:79:49:
                    be:ac:bf:2c:da:a9:89:00:73:c5:c7:ce:a3:5e:69:
                    fc:f5:71:61:65:75:cb:8b:23:1a:c9:71:50:18:5a:
                    c8:6f:9c:fe:eb:69:77:7e:bc:c1:fc:e5:0c:8f:8c:
                    de:c7:56:55:3c:7e:cf:c5:5c:a3:36:c4:d8:fd:5e:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B0:37:DF:7A:25:3E:B4:FA:B4:A3:F4:87:62:3A:E0:7C:BC:60:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e57a01b2-626e-3974-b97a-b41c3d3bff21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.63.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:db:8e:f6:b4:1f:d9:d0:f6:94:11:58:9a:59:3d:a0:06:92:
         70:cc:e3:8e:54:93:29:1c:7a:2d:df:61:9d:5f:25:7f:48:9a:
         84:e9:c1:36:47:c6:8f:40:4d:6b:60:60:e5:31:54:71:6b:4e:
         bc:3c:78:5a:6a:1a:93:31:72:40:59:8f:c6:d3:ca:96:56:e2:
         70:c5:81:d3:8e:d3:ca:e8:1e:b5:6b:35:3d:49:7f:21:8b:07:
         0a:1e:4f:0f:cd:59:83:4d:3b:59:58:9b:11:f0:d2:67:5c:3f:
         c2:cf:a6:62:e3:5a:53:d5:22:81:c6:ff:8c:c4:d7:7a:d1:ce:
         1e:e6:31:2f:f0:9c:1e:2e:73:84:ae:42:1a:8e:99:63:f9:44:
         8f:94:97:7c:0f:db:98:31:82:ce:06:70:6a:d7:57:ab:55:8c:
         c6:b9:f5:f5:fc:9b:ae:c9:5b:c7:79:db:af:7f:e8:22:1e:cb:
         8a:da:43:89:52:5e:51:4e:f6:29:a2:45:06:ec:a0:a0:ea:6b:
         45:0f:7c:d3:02:78:4f:ad:10:65:20:f1:df:dc:33:d3:bc:32:
         c2:c0:5a:0b:3d:bd:af:f5:cd:92:20:bd:92:9e:d2:b6:20:b4:
         43:a5:9a:5e:ed:50:9c:89:04:9e:76:f3:9a:c8:34:63:62:83:
         5a:08:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:36:21 2025 by rpki-client