Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa
File:                     4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa (raw, json)
Hash identifier:          PcOqd7zGHC+Rxsnz0ukTulKwCR5E8h/K8G4DJQt4PdI=
Subject key identifier:   AF:C5:8A:4B:BD:B2:A3:D4:49:1D:E6:34:9B:C5:C1:E4:4D:48:3F:04
Certificate issuer:       /CN=45e986ce-813b-4783-89cf-d434e6e641a5
Certificate serial:       010D0C9F4328584B891784ADA8038141E2FDBB40
Authority key identifier: 51:5A:A1:6E:09:6E:3A:E4:38:1C:9C:67:31:3F:8C:E1:C5:C6:39:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     54566
IP address blocks:        23.138.140.0/24 maxlen: 24
                          2602:f664::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/45e986ce-813b-4783-89cf-d434e6e641a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/45e986ce-813b-4783-89cf-d434e6e641a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:84:ad:a8:03:81:41:e2:fd:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e986ce-813b-4783-89cf-d434e6e641a5
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=18b1cb43-0824-45b4-9d05-c26ec88d93ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:ab:d3:61:d8:7e:f0:3b:7a:dc:9e:0f:f2:
                    65:c6:83:5a:65:db:bb:e6:e6:0f:0a:7b:f4:2e:4d:
                    74:a4:2d:56:10:b8:c2:99:f4:36:c5:d4:27:a1:4f:
                    52:4d:ec:2c:58:15:2a:74:be:ed:50:00:cb:90:87:
                    eb:c7:40:36:c7:09:f5:1f:4c:b0:b6:56:1e:3a:d5:
                    79:3f:d5:16:92:e1:85:51:b9:ed:c3:ea:50:b7:56:
                    98:c1:9f:21:43:c2:e1:0a:3e:4d:4d:24:59:8a:8a:
                    47:dc:9a:91:7b:4d:e9:ea:8b:de:12:b2:70:bb:c8:
                    0a:ad:5b:ad:f0:e2:0e:c9:7b:f5:7b:82:12:5a:ad:
                    74:97:c6:ca:bd:94:e9:27:6b:58:a3:99:8c:41:51:
                    a3:0e:4e:72:4e:b6:64:da:b2:12:44:bf:e0:14:dd:
                    c7:68:40:4f:40:76:c5:12:79:4e:32:17:bb:07:2d:
                    29:18:4d:4d:17:3c:a1:11:ea:ed:53:db:ad:39:63:
                    55:2d:fd:78:28:86:61:33:4f:4d:22:9e:4d:7f:9d:
                    8f:21:26:1c:69:15:c6:e9:58:77:ea:15:25:be:3c:
                    ee:30:c9:92:c8:52:1b:f4:84:55:5b:fc:47:71:57:
                    2e:3f:30:11:d7:3d:d8:b3:5a:21:66:1a:4e:7d:e9:
                    19:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C5:8A:4B:BD:B2:A3:D4:49:1D:E6:34:9B:C5:C1:E4:4D:48:3F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/45e986ce-813b-4783-89cf-d434e6e641a5.crl

            X509v3 Authority Key Identifier:
                keyid:51:5A:A1:6E:09:6E:3A:E4:38:1C:9C:67:31:3F:8C:E1:C5:C6:39:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.140.0/24
                IPv6:
                  2602:f664::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:ed:44:2b:12:4e:36:d1:c4:35:f9:6f:ac:b5:90:4c:56:
         cb:65:e5:eb:d4:67:96:e0:c3:5c:dc:cb:e6:19:9f:fe:e4:ed:
         e9:5d:8a:69:c8:ed:2e:a8:47:a5:e3:5e:28:37:bf:11:20:11:
         16:3b:5d:0c:bd:8a:20:e6:04:7e:a1:fa:3a:89:03:46:23:08:
         ec:bf:2f:82:80:0a:2e:95:11:0d:99:49:41:a4:6f:ee:5b:d9:
         c5:8f:df:ac:f6:df:cd:e2:81:4a:59:a4:2a:3a:6f:5a:8f:62:
         53:cd:23:fd:77:bf:e7:9f:8a:00:d4:cd:2c:c7:c6:ac:d3:e4:
         f6:6b:01:8e:12:94:13:b5:b2:86:92:dd:f5:cb:0f:1d:02:ec:
         76:64:75:ef:8c:88:78:bb:25:2d:72:83:4d:bb:d2:4a:15:3f:
         ff:65:a6:ed:c6:ef:b5:42:02:97:56:f4:dd:90:3e:a5:c7:75:
         e8:78:75:3e:c9:e4:4f:a2:88:34:2a:60:24:a3:91:fc:50:3f:
         d5:05:26:0c:20:e3:50:84:1d:5f:4d:65:55:94:94:75:da:dc:
         14:0f:e1:9e:a4:6c:11:d5:73:5a:d2:e7:73:bb:d4:2a:44:47:
         71:b9:c1:21:10:f0:1c:91:92:b3:cf:04:01:cf:00:18:37:8b:
         ae:01:e9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:38 2025 by rpki-client