Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/aed2d506-b3b2-367f-bef9-d5095b4880de.roa
File:                     aed2d506-b3b2-367f-bef9-d5095b4880de.roa (raw, json)
Hash identifier:          5Ru6KK38Mk6R7gRap9z8WtaDTzQFQM4C+ZjDHJdyhqg=
Subject key identifier:   51:30:BD:FD:D8:64:83:38:5A:4B:9B:10:BB:A4:37:39:38:55:7C:9E
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584B047C0378316161703B72DCC0
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/aed2d506-b3b2-367f-bef9-d5095b4880de.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     36103
IP address blocks:        23.88.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:03:78:31:61:61:70:3b:72:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=07d5de0c-b9ab-45d4-ba7f-a0a84c60f070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:16:ca:b1:fb:ec:9d:2e:de:bf:e8:31:2e:
                    b3:6e:ce:b7:ee:51:bc:b1:63:7a:a2:04:a1:a8:a3:
                    75:f0:47:d5:7c:08:ae:7a:cf:e8:ed:c8:61:3a:c4:
                    c8:a2:53:dc:41:cf:50:d8:85:b3:88:cc:39:19:cb:
                    0b:66:88:6b:d6:d9:96:a9:e0:f1:3e:95:d8:c6:c1:
                    93:5a:fd:36:25:46:78:1c:0c:6d:90:c2:6f:eb:12:
                    d9:03:a6:42:32:f0:c0:08:1a:95:19:29:0c:ac:e1:
                    6a:1b:28:fa:d0:ed:2a:0b:3c:bd:7e:5c:34:26:b8:
                    70:ea:78:4d:be:1f:05:c0:b4:14:72:8a:37:6c:e0:
                    17:13:a3:11:8b:b0:57:f7:63:20:15:95:53:da:68:
                    64:4c:a1:a1:a5:e4:0f:12:c9:48:f3:a4:a8:7a:ac:
                    26:f3:8f:06:75:2d:2d:80:95:62:12:7f:f2:02:7e:
                    88:94:d2:0d:ee:6a:13:2c:72:48:98:a3:d0:ea:75:
                    ec:ae:8f:f1:dd:95:5a:01:74:f3:de:01:af:2e:01:
                    33:66:e1:1a:13:95:1d:49:5c:10:10:db:ff:bb:7a:
                    7a:10:b6:96:20:9b:1b:2a:27:e9:04:b1:ac:94:bc:
                    21:99:5f:24:64:1d:6f:43:be:b1:28:b3:17:4d:1b:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:30:BD:FD:D8:64:83:38:5A:4B:9B:10:BB:A4:37:39:38:55:7C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/aed2d506-b3b2-367f-bef9-d5095b4880de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c6:de:46:c5:d8:73:d5:51:16:10:37:4d:d8:35:c7:b3:8a:
         a7:eb:17:13:44:fd:ba:17:91:5c:6a:9e:85:a2:d2:b5:47:8c:
         80:65:26:82:8b:b1:c2:cc:78:4e:03:d9:14:d1:9b:29:6e:d7:
         45:6d:e2:57:3b:05:16:e1:0b:aa:0e:94:c1:8c:0e:b8:ed:fb:
         e6:ea:a6:c9:17:d7:ee:53:a3:44:5f:b3:9e:58:76:89:b4:88:
         63:d9:46:9e:d5:ae:e2:fc:e9:be:a3:05:96:6d:09:06:69:ee:
         2e:6b:26:e3:44:23:23:af:ae:be:1f:5b:8f:e3:5d:ff:55:79:
         6d:80:b2:e0:0a:f4:5f:57:1b:c3:3f:53:ea:9a:04:e2:f5:97:
         2f:36:2e:f0:37:60:8c:80:f6:00:27:09:0a:b7:3a:38:b9:bc:
         bd:27:99:3d:05:1e:bb:fb:c8:d8:e7:00:d5:e2:16:46:f2:1b:
         8b:b8:6c:c4:20:4c:7b:81:8c:54:bf:f4:2d:9d:a5:d4:5e:eb:
         0f:9a:ab:42:75:85:94:db:ed:6a:76:b5:99:ac:4b:27:68:35:
         41:b5:3f:1a:65:4a:d8:06:af:93:c5:d5:9c:42:9e:40:7c:f1:
         7c:bf:20:69:d7:e3:61:28:81:57:20:60:d7:00:37:4c:38:b5:
         85:61:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:27:55 2025 by rpki-client