Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
File:                     5107cb12-7dcd-3137-83ab-78d947b463bc.roa (raw, json)
Hash identifier:          82V8B4irSDB4l29LomeVDN3kCTLThd+lFfrazhoda1c=
Subject key identifier:   58:C8:BB:FF:A2:E7:B8:99:BE:21:83:FD:51:CA:9E:24:BE:06:67:F6
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584B84E785AB5183F4BFDA19B600
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     16417
IP address blocks:        23.90.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:85:ab:51:83:f4:bf:da:19:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=33763387-0d73-42cc-aba9-bfe90c5d5046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:4f:fd:ac:7e:33:cc:cc:af:c2:9d:95:ac:
                    46:84:05:80:14:66:a4:63:f5:a3:cf:a5:6a:1b:ad:
                    09:0c:e3:a2:05:1b:ea:21:1a:5e:f1:b6:77:dd:9d:
                    63:49:78:59:84:2d:2a:f8:e4:fc:7c:d3:55:88:96:
                    8d:4b:57:64:79:5d:88:92:8a:54:c4:eb:08:00:be:
                    fd:e0:ee:cf:ce:67:ad:81:49:86:8e:c4:61:1d:86:
                    20:c9:82:49:9d:6d:0c:02:d5:12:55:a0:c8:2e:2e:
                    83:d1:61:15:d5:0c:f6:29:27:61:a5:31:96:38:c0:
                    85:f8:08:8c:d1:51:58:92:84:07:ed:1a:48:f2:0d:
                    e4:63:86:b9:32:cf:a1:f7:7f:5c:a2:16:b4:80:dc:
                    d0:ae:b9:e8:70:4b:54:2b:d0:50:83:ba:a9:fb:26:
                    3f:f3:90:dc:74:aa:ee:cd:5a:f8:82:ae:47:7e:4a:
                    33:df:8b:9e:1c:60:b5:6d:42:87:70:e4:ce:2b:1a:
                    4e:a1:27:00:8e:05:44:27:8f:ad:fe:1d:90:1b:a2:
                    ce:0a:53:b4:f6:52:d0:48:7c:6d:13:07:e6:3e:22:
                    75:de:75:92:95:f2:77:81:ad:05:fb:89:8e:44:80:
                    1b:e7:1b:11:40:a9:ea:56:af:cd:ba:81:4c:5b:4e:
                    f3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C8:BB:FF:A2:E7:B8:99:BE:21:83:FD:51:CA:9E:24:BE:06:67:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b9:5e:6a:f3:a0:05:77:2d:aa:34:01:26:87:8a:26:3d:ea:
         db:b0:a6:c5:1a:20:83:3b:42:99:df:71:29:0c:a5:1c:80:88:
         70:b5:47:18:d3:d3:39:f6:79:75:c0:00:a7:5c:48:5d:86:c4:
         c3:c4:d8:36:0e:72:1d:14:e1:70:21:24:47:cb:23:15:9a:c3:
         41:8f:73:a6:fb:b1:e1:4f:96:6a:6a:89:3b:eb:8e:38:d1:d8:
         b0:ef:ad:52:58:e6:87:9f:56:bf:16:72:b1:51:bc:33:4d:f1:
         53:36:0d:60:45:52:82:bf:bc:57:ff:eb:c7:bd:9b:7e:5b:b8:
         e6:cc:17:0b:56:2b:fe:51:d4:98:2e:05:0b:24:0f:4c:da:42:
         4c:1c:6e:81:44:2e:4a:0e:5e:43:f8:4f:37:31:85:4a:58:1c:
         7f:fa:e9:44:e1:a9:2e:bf:13:81:6d:e8:eb:70:69:b1:55:1a:
         40:9e:66:b9:c1:c0:e1:3e:35:11:6c:30:05:ac:e5:4c:39:23:
         79:74:9d:d4:20:5f:67:7c:ee:93:ad:51:02:4d:ed:a5:42:db:
         59:80:51:da:2e:16:ac:c0:01:05:1a:68:1a:3f:d9:a8:cc:7a:
         bf:50:6b:2f:cc:76:5c:7b:f2:64:48:52:90:a6:b9:9a:69:e3:
         04:96:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:46:11 2025 by rpki-client