Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa
File:                     b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa (raw, json)
Hash identifier:          H1J634U7LT4BrzWzqgm3c759RUqDo8D/4qhH+UYXbI8=
Subject key identifier:   0E:14:D1:24:6F:B0:7B:8A:7D:47:9D:2C:B0:5D:B5:31:CA:C3:81:F7
Certificate issuer:       /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Certificate serial:       010D0C9F4328584B891762673635E6A0D0E72D80
Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     11831
IP address blocks:        23.111.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:62:67:36:35:e6:a0:d0:e7:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=87e90091-0853-4fcb-aa4d-7bf62e09e788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:24:1f:77:6d:f4:d4:c4:7e:b9:46:22:07:93:
                    6e:5b:9f:70:93:fe:26:ae:cb:cb:82:a5:1d:ca:cc:
                    55:89:60:cf:53:8a:9d:73:0d:db:ce:3d:b8:33:b6:
                    3d:d9:2f:39:37:ba:7f:ee:19:9a:24:59:f0:28:27:
                    3c:9f:01:ff:52:e1:55:86:32:c0:6c:7b:34:05:15:
                    63:be:09:ad:94:f7:81:38:84:69:b7:53:0e:37:e6:
                    9c:bb:20:89:92:40:ed:d9:38:c3:41:1a:99:67:4c:
                    c2:e2:92:2d:74:08:18:d1:5b:0d:91:70:63:14:a9:
                    04:ae:58:c2:c3:96:d8:a6:25:ec:d1:39:ee:ca:76:
                    a2:86:4c:15:58:48:26:b9:f6:87:f6:8b:18:40:ed:
                    9f:0e:c9:2f:54:c1:4f:0f:ec:6c:7b:3b:1a:63:ca:
                    15:ff:72:66:dc:ce:3a:72:9e:0c:17:a0:9e:19:43:
                    06:92:c0:b1:65:79:40:ac:b5:cd:3d:92:fb:5c:9a:
                    da:c5:1a:17:db:61:9d:2f:5d:24:3f:a7:55:d6:70:
                    56:f3:d0:df:c3:35:39:a0:19:0a:c0:a2:b2:51:ab:
                    9f:6e:51:d0:8f:87:25:18:6c:f3:d0:f3:f4:33:99:
                    c1:38:9e:67:b5:70:04:fc:d9:0d:c1:6a:42:86:d7:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:14:D1:24:6F:B0:7B:8A:7D:47:9D:2C:B0:5D:B5:31:CA:C3:81:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl

            X509v3 Authority Key Identifier:
                keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.111.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:99:37:6e:e4:a6:5d:a5:58:18:a5:3a:38:84:65:e0:65:3e:
         9e:22:9f:58:57:b5:a7:58:b3:d8:fe:85:2e:79:e5:d8:c8:ee:
         f0:18:e0:12:52:4c:52:41:ef:1c:77:9d:67:48:cd:f4:22:7a:
         da:7e:fa:89:a7:58:78:7e:d2:02:47:fe:74:7a:af:67:f7:c7:
         a4:09:53:58:e0:83:54:3a:56:92:5d:b7:52:10:3f:55:fb:62:
         d4:96:42:75:f3:55:b1:68:a3:0f:25:22:3b:89:00:1d:1a:d2:
         d6:0a:5f:eb:b7:cd:dd:e5:07:75:9f:ae:ab:af:92:d7:50:4e:
         99:a6:ad:99:cb:77:8a:2c:08:27:69:67:f8:a5:8f:03:03:b2:
         85:d0:f8:81:27:81:fe:67:44:b8:5a:59:ee:48:a9:3f:2c:71:
         60:9d:0b:b3:0b:81:ac:dc:dd:8b:c9:00:86:a4:8d:b3:a0:88:
         0e:04:44:cc:0e:8b:6c:8e:c4:75:2d:ca:78:7a:d4:14:38:22:
         ad:3c:e2:d8:4f:5c:67:d6:de:ff:44:d1:e7:4a:42:a5:98:cd:
         38:df:32:a7:d9:75:4c:98:65:28:5e:91:12:3d:85:99:ba:12:
         41:56:a5:83:f2:27:9f:c4:1d:d9:8a:74:bd:15:6a:09:f6:1d:
         ae:4f:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:44:33 2025 by rpki-client