Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/335be716-cf01-3825-bfab-8258026b8d98.roa
File:                     335be716-cf01-3825-bfab-8258026b8d98.roa (raw, json)
Hash identifier:          ovSZpFQ8AusLP9QsgZCker51FeHrsfrvr73qPO68dnw=
Subject key identifier:   67:8D:72:75:0D:8A:5D:AA:F3:FE:94:5D:61:85:09:D2:05:7B:90:90
Certificate issuer:       /CN=17ca7b45-83e1-4a1c-8713-317adea0e270
Certificate serial:       010D0C9F4328584B3556E5A5FE751697E614CC40
Authority key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/335be716-cf01-3825-bfab-8258026b8d98.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        23.144.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e5:a5:fe:75:16:97:e6:14:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ca7b45-83e1-4a1c-8713-317adea0e270
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=a8c04ba5-c5d0-452d-85ad-fcb6d1548f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:cf:b9:db:d1:74:01:81:0f:ac:9e:00:9c:
                    65:bb:d7:ba:ed:86:fe:c7:4b:58:c0:2d:63:26:6c:
                    00:67:84:3e:74:83:b5:d4:95:5f:bc:ac:13:32:6d:
                    f9:ab:45:4a:f3:52:e3:77:7a:cd:3a:34:1c:d2:16:
                    3c:5f:84:45:9f:9d:6a:ee:45:29:55:1f:a6:0a:7d:
                    47:fd:0f:fe:9d:a8:a4:17:c6:90:51:4b:41:1f:5a:
                    e7:e4:0f:21:f4:9b:c7:66:84:07:59:0f:b6:0e:7d:
                    47:8f:b9:ca:4e:ed:a5:c4:ac:f5:a3:b0:d4:4c:27:
                    cc:13:ec:7c:da:4b:a1:c7:55:a2:09:48:cf:37:99:
                    d5:ed:98:5b:ec:76:8a:12:61:1d:7e:b2:27:5e:e2:
                    34:c7:51:69:b4:ed:1b:aa:f1:0b:f6:ce:33:b6:16:
                    bd:ec:11:22:74:39:ef:b8:99:ca:d8:7f:8a:e4:fd:
                    90:e0:80:7b:51:79:aa:7d:07:41:ce:43:c5:6e:03:
                    a4:2d:46:e9:16:f1:56:4f:a2:7e:ba:55:3b:73:6c:
                    12:c7:73:b2:17:86:26:08:4e:ec:2e:0d:cc:8a:92:
                    08:1a:0b:0c:76:34:d9:96:4c:08:1c:93:e5:bb:a1:
                    93:c7:c5:e1:af:0b:a1:f0:16:fe:61:4e:f4:ab:2d:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8D:72:75:0D:8A:5D:AA:F3:FE:94:5D:61:85:09:D2:05:7B:90:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/335be716-cf01-3825-bfab-8258026b8d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:d3:cb:92:8f:07:6f:b6:55:f0:5c:21:6a:d5:53:82:f4:
         10:5d:3e:c8:d0:60:c9:84:29:bf:6c:a8:cb:23:37:97:26:03:
         a2:1e:c9:05:ca:d3:7e:ac:d7:d2:78:f9:fa:fc:66:18:72:5e:
         01:21:dc:a3:fc:cc:a4:30:50:89:74:65:d0:1b:95:fb:86:8c:
         bd:f7:10:ad:d8:c1:75:f6:cc:77:a0:ab:66:57:3a:2a:c1:b8:
         ec:cd:91:34:85:f1:10:b3:bb:57:68:00:d7:91:45:6c:8f:f8:
         eb:3e:6d:01:b1:57:c8:86:71:38:6d:64:df:d3:8f:85:1a:c8:
         e8:af:94:4b:1f:66:9b:6a:48:8d:3d:77:68:1d:32:ca:60:f6:
         a6:4f:b1:8d:5f:89:c7:d0:c1:37:67:5a:ea:cf:4b:79:f9:e5:
         3a:4c:2d:68:4c:0e:d6:a1:87:13:75:3b:4f:20:e5:41:45:db:
         5f:ce:92:fc:c9:ab:fa:7b:17:b8:2c:6c:d2:df:f6:ec:e8:b8:
         f3:52:e7:44:bc:cb:f9:f8:9e:77:c3:e6:2f:12:90:c6:7b:2c:
         91:74:bd:19:4e:84:30:c2:39:8e:80:54:59:d5:53:1e:81:b7:
         62:9c:6f:a7:e0:33:3b:70:e7:bf:44:2a:24:06:d4:23:cf:0a:
         77:0b:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:40:09 2025 by rpki-client