Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/776c6b42-1b83-3469-abb9-1f2983fac076.roa
File:                     776c6b42-1b83-3469-abb9-1f2983fac076.roa (raw, json)
Hash identifier:          l2nPMxhY14Z8kWjRH1HWn0D50E9xCbaqtdCFy7OqegI=
Subject key identifier:   F7:40:E3:FF:50:5E:07:8D:A5:15:A7:5B:DB:6F:7B:92:45:C9:54:18
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584B2CF6DFCD22D22624A0C30500
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/776c6b42-1b83-3469-abb9-1f2983fac076.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     36103
IP address blocks:        23.88.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:df:cd:22:d2:26:24:a0:c3:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=fcce539f-2dc1-4116-b7f3-5e42a771218d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8c:a9:f3:9b:d9:8e:6f:7a:20:9c:63:d9:c6:
                    a1:e1:6d:e6:5b:73:d9:8c:bf:82:51:24:7a:5b:2c:
                    9b:f1:0a:d0:bc:49:69:61:1c:58:e1:23:d4:aa:a6:
                    61:9b:8a:e6:0e:06:9e:1f:bb:2f:72:b6:8e:d5:7c:
                    1b:08:e5:6d:11:9b:26:e0:80:af:2c:5f:30:c5:c6:
                    11:ea:3f:1e:22:26:70:f2:05:7f:c5:dd:95:bf:53:
                    9c:ff:ef:b0:3e:71:1b:1f:ee:86:e1:0f:86:62:fa:
                    e2:e5:c9:c7:ee:cb:9f:b3:10:a9:81:f3:57:0b:86:
                    49:8f:5b:c6:15:6a:9d:fe:c1:d7:8a:ea:55:49:c3:
                    14:7a:0b:29:99:1b:2f:d1:e6:44:da:39:0e:5d:d8:
                    a1:07:dd:25:63:59:84:78:50:8d:c9:1a:86:e2:eb:
                    96:da:44:cf:00:4d:fe:70:e5:e4:6c:f7:be:51:fb:
                    7e:0e:d8:46:9f:7f:b5:8e:1c:39:5e:47:0a:8c:f3:
                    fc:04:cb:9b:a2:49:03:60:2f:a7:44:58:40:96:41:
                    14:08:16:d8:19:82:35:96:b2:92:0c:3f:af:49:1a:
                    2a:0d:f6:35:72:5d:d0:8d:82:14:7a:4b:c7:4c:17:
                    00:a5:01:ed:50:59:09:da:05:f6:4b:a5:57:e2:2b:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:40:E3:FF:50:5E:07:8D:A5:15:A7:5B:DB:6F:7B:92:45:C9:54:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/776c6b42-1b83-3469-abb9-1f2983fac076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:9a:39:03:eb:f1:f4:b6:98:35:8c:b4:4e:b3:0c:75:11:
         6c:7c:e5:ea:04:25:d8:6d:fe:b3:4e:8c:75:42:15:30:33:45:
         35:28:33:a4:3f:68:9c:18:6c:d6:00:c6:4b:84:1f:eb:bb:52:
         84:48:8e:e3:9f:1e:c8:c6:df:8b:cb:d4:1c:43:3d:27:d5:48:
         89:fc:2d:06:bc:f1:88:0d:5d:24:2e:ef:63:0e:d1:e6:16:86:
         c4:ba:ed:77:2b:7a:77:4f:27:6d:ce:74:02:ad:cd:28:5a:ea:
         12:75:4f:88:4f:83:c5:0e:2d:ce:18:16:fa:70:f2:8a:52:3e:
         9b:fd:cb:54:20:a1:e5:64:5a:21:fe:e0:50:55:32:0c:8a:5c:
         a3:5d:42:02:ce:14:fb:88:14:5b:9f:39:0c:8b:cb:fb:22:6b:
         58:e5:c3:01:33:02:a8:5e:f9:04:f8:09:46:4f:64:82:cb:40:
         43:c6:ce:b4:cc:60:5b:b1:05:49:55:6d:60:d7:3a:4d:66:c5:
         ee:7d:f9:df:54:fa:f4:69:28:71:27:e8:2e:09:b9:73:0b:f2:
         fe:39:4d:1f:87:87:24:51:40:95:3e:a2:aa:1d:cb:b2:4c:7d:
         ee:98:a0:29:27:7c:a2:94:af:ea:6b:52:b7:ce:6a:69:6e:0b:
         f3:19:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:27:53 2025 by rpki-client