Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f4256371-a6cf-346e-97ca-4f746ffe6050.roa
File:                     f4256371-a6cf-346e-97ca-4f746ffe6050.roa (raw, json)
Hash identifier:          YGpSj2/fNMdWQBDga+Vp3znkeS5RMw4VCmvhlEOWL6g=
Subject key identifier:   0F:0E:96:61:CA:F0:22:88:83:1F:54:7B:B1:FA:04:A9:24:B8:BF:4F
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584B6BC74735020E3DFA97E52A18
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f4256371-a6cf-346e-97ca-4f746ffe6050.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     400087
IP address blocks:        23.190.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:47:35:02:0e:3d:fa:97:e5:2a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=f75dee1d-fcf7-4e7a-8be1-5c3448ae46d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:6f:0d:c7:d2:fb:3d:4c:9d:a5:39:5a:49:
                    6a:c3:7b:1b:5b:fb:91:05:13:c2:d9:b1:74:9f:67:
                    ca:cc:cf:1f:2d:b4:fa:28:50:4d:ec:2a:e2:4e:14:
                    9a:6b:33:19:17:fb:07:d2:9c:13:fa:45:7c:7a:a8:
                    f7:23:60:a1:c9:78:3a:62:ea:14:e0:ea:3d:41:7a:
                    c6:9f:1b:ee:10:13:d5:98:81:40:55:bc:9f:0b:84:
                    b7:cf:de:a8:94:e2:23:ec:a7:d7:0d:f1:3c:79:cd:
                    4a:c7:70:4e:38:8e:cf:22:66:99:1e:5f:45:23:4e:
                    9f:d7:da:e5:df:e2:4d:38:76:48:64:4c:9d:b3:2f:
                    3c:51:da:86:c3:f2:16:32:c1:d3:b6:63:91:2c:50:
                    6c:ed:6f:67:9d:17:8d:0f:9f:8f:1a:12:95:65:bf:
                    64:d6:ad:ed:b9:c4:75:e4:2d:e4:c0:29:5f:7e:1e:
                    e2:15:ec:05:e4:2f:e9:75:a8:75:96:2c:2e:ca:14:
                    fd:3c:c5:a0:ea:5d:73:9f:59:4b:a0:aa:d9:98:b8:
                    d8:3b:7b:20:36:58:ce:c5:c0:f0:bb:c3:fe:ad:08:
                    4e:e0:f6:4a:f1:fc:8d:11:77:cf:f4:43:ac:13:dc:
                    1f:fc:40:cd:03:d9:c8:30:d8:31:ef:a5:c5:65:4d:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0E:96:61:CA:F0:22:88:83:1F:54:7B:B1:FA:04:A9:24:B8:BF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f4256371-a6cf-346e-97ca-4f746ffe6050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:cc:1e:58:45:1b:40:6b:3a:2d:93:c8:dc:52:54:40:e8:fe:
         09:58:c6:87:46:ac:71:19:ba:a4:d7:94:ee:c4:c6:e8:60:ba:
         18:f6:c1:d3:ed:83:e8:3d:6f:8c:36:e2:35:b4:39:d1:7a:92:
         8d:90:9b:a8:af:6a:22:04:4e:45:f4:ae:88:f6:89:72:22:1a:
         a1:3a:d8:2c:de:76:2f:d1:7e:66:0e:7a:72:57:f8:27:68:8f:
         df:e8:4c:45:b1:1f:a5:67:37:72:4c:fa:53:9e:f1:33:d4:e0:
         ea:ac:4f:f5:c5:8c:f7:ed:b7:2f:cb:4f:5f:4f:ba:e8:97:89:
         aa:88:7d:29:be:6d:d3:0c:94:84:10:24:57:e3:f0:64:c6:92:
         4e:26:b6:0b:cf:bd:96:96:55:23:3f:7a:82:ba:c8:39:52:a4:
         c7:87:a3:36:ac:3b:05:3f:25:26:b5:b3:c7:83:27:fa:53:9c:
         c1:a3:97:57:60:9c:82:8b:0f:97:33:56:47:3e:d8:b0:4a:59:
         cb:b1:f9:40:7a:0b:f0:df:e4:89:d9:16:6f:44:d8:45:6d:4b:
         9a:41:63:90:f3:a3:eb:ae:af:36:7d:e7:0b:74:2a:98:bf:90:
         dd:2e:5b:8f:20:61:08:a4:42:69:ea:f0:26:b9:d3:b7:d0:83:
         cd:9a:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:26 2025 by rpki-client