Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0828ba4-f6ef-3383-afdc-ca95dbeb1905.roa
File:                     f0828ba4-f6ef-3383-afdc-ca95dbeb1905.roa (raw, json)
Hash identifier:          +69wHC1bMSZX4imR0Z8fXjUS20QRcSjs+HEYBVghJUY=
Subject key identifier:   BD:ED:D4:BC:3A:D3:8D:2D:6F:50:1F:B2:67:F4:47:5E:F1:63:19:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B0B76CD3C76F2E2C8A3466400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0828ba4-f6ef-3383-afdc-ca95dbeb1905.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.63.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:cd:3c:76:f2:e2:c8:a3:46:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=5fcb9527-dba8-4529-b579-b4359d1e1fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:31:8c:9f:85:3c:44:ae:95:9f:f1:ab:22:
                    0f:ad:84:45:2d:9a:0b:8e:e7:17:e5:d8:d6:92:f4:
                    b3:43:0c:09:51:59:e6:eb:69:b6:55:c7:c0:d9:1e:
                    d8:2d:60:68:70:f5:37:ea:b3:d4:8f:2b:4c:6b:3f:
                    88:74:ef:74:b5:49:8e:da:a7:48:e9:62:89:44:5b:
                    5e:ee:0f:d1:7d:99:83:0f:2e:99:c6:90:69:10:e3:
                    03:3b:34:df:27:a6:56:32:a3:20:14:b5:00:a1:85:
                    8a:58:c3:66:bb:50:7c:ba:0a:c0:f4:2b:63:b1:30:
                    d5:5a:84:af:aa:98:77:56:e4:d3:cd:c6:97:86:a2:
                    6b:fa:45:ea:47:0b:01:fe:5d:ea:35:1a:b8:7f:79:
                    93:02:11:49:e8:02:ad:c0:dd:c3:ff:a3:e3:f4:38:
                    2c:91:f1:e4:b9:8f:ea:da:ee:26:b9:13:b4:c9:36:
                    d0:6c:73:c1:6a:a3:10:cb:3c:8e:58:ff:f5:36:a1:
                    2a:bd:b7:e5:66:41:5e:6e:e4:8d:d8:2b:1d:9c:90:
                    15:b2:34:87:2f:7a:d4:bf:bd:4b:9a:ee:ad:42:5c:
                    b1:3f:e1:58:1c:8f:bc:e8:c6:74:c8:b6:64:1e:c2:
                    7c:1a:6e:5e:6e:13:ff:5c:7a:cc:98:c8:58:56:8b:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:ED:D4:BC:3A:D3:8D:2D:6F:50:1F:B2:67:F4:47:5E:F1:63:19:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0828ba4-f6ef-3383-afdc-ca95dbeb1905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.63.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f4:73:76:cf:e4:cb:49:8a:75:aa:98:9b:2c:5f:e4:0c:21:
         f5:8b:ef:be:66:69:0c:7e:ed:be:84:3e:5c:55:08:8a:06:5e:
         1c:5f:08:67:57:fb:51:3a:d2:f1:c3:2c:86:d9:c7:d3:cf:bb:
         12:1d:3d:6e:47:b9:89:18:a1:5a:2f:e1:74:f5:6f:39:d4:b8:
         6e:6e:3c:21:0f:1c:ce:0c:4e:e0:c3:b4:c0:2e:f4:f1:79:d2:
         4d:31:64:0d:56:eb:80:dd:4f:d4:de:56:fe:7b:10:42:46:98:
         ac:b5:18:01:98:aa:4e:12:b1:6f:da:52:a4:d7:83:6a:d8:50:
         da:0c:48:4f:3a:92:d8:4b:58:07:4d:f6:19:49:61:6d:e5:07:
         ed:ce:f6:16:0c:c2:ff:cc:7a:d1:d9:46:31:2d:40:f0:2e:9f:
         a5:4b:c4:32:d0:b5:66:48:90:5c:0c:71:79:2d:93:f1:ee:89:
         4c:d8:4e:0b:ad:a7:7a:81:00:68:72:14:ea:01:ee:52:fc:7d:
         b1:d9:98:a6:04:ea:e3:e1:7d:83:11:de:a6:1e:78:e0:b2:43:
         e3:56:d7:67:b1:d5:df:b5:d3:8b:36:fc:7a:34:4f:04:11:ab:
         ff:c8:8f:20:c3:8d:8f:40:80:8d:5f:5c:f7:fc:59:de:a0:e9:
         dc:a1:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:53 2025 by rpki-client