Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/29b86d3c-46e2-35a7-96eb-60fa4bdbbeb9.roa
File:                     29b86d3c-46e2-35a7-96eb-60fa4bdbbeb9.roa (raw, json)
Hash identifier:          VE3dxv3c/eYEQuF2gOd0L4xrWiAYaPSEdf0BkUOzG88=
Subject key identifier:   EE:7F:94:BE:14:15:54:9C:C8:30:5F:DF:AB:47:BC:99:D1:D3:4D:CD
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584B328C31AF4366444CD05CFB40
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/29b86d3c-46e2-35a7-96eb-60fa4bdbbeb9.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     29802
IP address blocks:        23.163.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:31:af:43:66:44:4c:d0:5c:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=c78f3b89-41d0-4133-8e3c-a0c3e50c6f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:68:11:80:39:c9:36:3f:2b:6b:d1:22:f8:
                    31:65:d4:f5:ba:1d:47:7f:88:ec:a7:8b:35:cb:ce:
                    5f:a9:2a:22:4c:c8:99:90:07:73:dc:ec:17:a1:26:
                    e8:28:9d:79:42:ad:70:d9:b3:a2:c8:30:10:85:f7:
                    b1:6e:64:1e:d8:bb:8f:3c:0d:24:1f:6d:fb:cd:2a:
                    e1:39:3a:6a:3a:63:1f:d4:cf:43:c4:33:f2:5e:06:
                    04:d4:34:c9:a6:3e:7c:dc:20:59:ec:63:76:7e:c9:
                    d7:80:df:56:96:cc:5d:0c:09:39:4b:1a:dc:93:8e:
                    dd:74:6d:0d:61:e4:89:de:ca:4b:81:59:c9:1f:42:
                    4a:4b:3d:f1:a7:24:75:17:fe:b6:f1:15:80:96:dc:
                    52:3e:1c:a2:8c:6e:74:12:03:98:95:bf:15:0a:d6:
                    eb:fb:98:52:82:4f:ab:ba:9d:b4:2e:6a:a4:b4:43:
                    55:9a:40:84:d0:6a:7c:d0:49:ee:2e:5b:76:19:00:
                    9e:a1:47:49:02:fa:77:37:73:72:d4:64:d1:3e:d0:
                    52:e4:03:73:1e:d3:77:a5:2f:26:4d:e8:9c:62:75:
                    7c:4f:71:ff:11:50:33:b3:fb:11:89:af:e4:97:96:
                    bc:e4:71:34:8a:0b:3d:19:63:23:8f:b9:15:9b:94:
                    43:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7F:94:BE:14:15:54:9C:C8:30:5F:DF:AB:47:BC:99:D1:D3:4D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/29b86d3c-46e2-35a7-96eb-60fa4bdbbeb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:4a:51:b1:23:4b:11:15:27:bc:d6:d0:82:fa:86:45:6c:1e:
         67:15:46:15:75:16:25:60:b0:8e:e1:bd:be:bd:06:1b:3d:6f:
         2f:cd:ef:3b:b5:1d:a6:95:6e:5d:f3:4e:38:41:a3:bd:2d:4d:
         c6:12:a5:c1:4c:4e:e3:2e:cd:46:29:44:d3:4e:5f:3a:30:ea:
         b3:3d:eb:3e:e6:eb:ff:7c:02:eb:d2:81:62:ec:73:88:11:a4:
         c6:f5:68:dc:b8:9b:e9:a7:df:a3:29:a8:ef:71:a0:ee:30:68:
         48:23:16:c8:53:82:96:59:fb:04:ab:51:e6:1b:38:c3:9b:fc:
         75:d9:bc:55:d9:0d:7f:dd:23:22:41:bb:e4:7e:3a:11:4e:9d:
         48:47:9a:2a:0c:35:43:de:f5:b5:1d:5a:cc:b0:6e:fe:79:3c:
         29:74:80:c9:22:9a:ff:75:7d:2d:11:44:2c:17:b3:86:84:93:
         56:05:c6:70:e7:f7:b6:2a:7e:f1:e0:2a:9e:0c:62:96:c5:f0:
         dc:bc:55:c4:9e:a6:08:34:b7:99:91:40:95:0b:03:e3:8a:d3:
         82:d5:98:a1:f2:6d:63:00:1f:3a:98:02:aa:ee:09:81:02:02:
         52:4f:98:e6:4c:3e:63:2a:1d:1d:19:ca:47:5b:48:2c:44:c3:
         75:28:a6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:54 2025 by rpki-client