Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/069fb1b6-9863-39f2-9fdb-e5a64d305939.roa
File:                     069fb1b6-9863-39f2-9fdb-e5a64d305939.roa (raw, json)
Hash identifier:          JmWsCosrkG9XF9Kgt3Hc5HXcUUMdqvx0T2g302c0LoE=
Subject key identifier:   5E:23:69:17:03:8F:B3:87:19:A3:1D:8D:28:33:D3:16:36:22:1A:FD
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584B328C45B705FD67A1FAF0B040
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/069fb1b6-9863-39f2-9fdb-e5a64d305939.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     31898
IP address blocks:        143.223.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:45:b7:05:fd:67:a1:fa:f0:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=7d42a1b8-bb93-4862-a648-0d10857d5b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6a:6e:c0:39:09:32:56:56:20:07:dd:7b:41:
                    bc:3e:8e:0a:e9:e2:49:fe:bc:8b:41:16:7a:b4:5e:
                    47:a9:31:5e:0e:40:18:4e:83:5a:82:ac:2e:5f:83:
                    bf:fa:7e:16:d6:2d:08:01:8f:ef:70:8c:96:a3:d8:
                    3e:eb:e4:6d:15:8b:40:1f:de:b6:c5:ce:bf:a2:25:
                    7b:bf:db:4d:05:96:37:63:68:b7:95:5e:29:e9:a8:
                    73:d7:75:5d:14:0e:e0:5d:5c:7d:fa:4c:40:02:dd:
                    71:21:0b:6e:03:93:0f:6c:a6:19:ec:08:a3:7c:3b:
                    08:df:af:ea:3b:8f:cb:f6:1a:e7:80:fa:a0:6a:0f:
                    df:23:53:94:94:b8:66:2a:92:2d:f6:4c:13:32:88:
                    3c:e6:7e:17:c9:88:74:0a:68:5c:e5:37:37:1f:f8:
                    59:5c:fa:75:fb:1b:e9:fb:18:6c:0c:fb:d8:52:7d:
                    7f:ad:c4:ba:18:e3:a0:21:b5:05:63:d3:c1:c8:6b:
                    01:82:c8:d7:c1:d5:b4:23:30:ee:b3:22:65:1e:4a:
                    f0:55:2e:a9:0d:84:ce:fb:d0:25:41:95:ff:1a:c7:
                    9d:dc:ef:88:3f:62:b2:c0:86:03:d6:17:21:27:04:
                    ca:eb:9b:63:01:84:ef:16:ae:43:17:a0:cd:12:81:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:23:69:17:03:8F:B3:87:19:A3:1D:8D:28:33:D3:16:36:22:1A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/069fb1b6-9863-39f2-9fdb-e5a64d305939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:81:bf:bd:67:e3:69:a7:96:e8:e7:fb:0f:98:3f:51:70:ed:
         36:40:13:66:78:db:fb:14:33:f5:f8:8c:ef:66:f5:e5:91:92:
         71:32:52:4a:14:95:28:1a:8c:e7:a9:c0:e0:eb:8a:c5:d1:23:
         1a:89:1b:b1:bd:ef:8c:16:a9:8e:04:45:37:be:db:7c:87:03:
         7b:3c:35:50:ac:84:02:49:8c:e7:98:ec:39:e9:64:f6:c9:c0:
         78:29:4e:e6:b5:99:b7:76:a9:30:8d:39:2c:f9:12:fd:44:2d:
         72:22:d1:3b:8c:f4:5b:91:99:bd:1b:13:5d:08:b4:67:48:ba:
         26:51:3e:9b:d9:2e:86:32:2c:4e:4c:72:e6:0a:4d:55:32:6c:
         73:78:07:cb:74:b4:a2:28:84:55:d6:51:c3:40:7b:7f:50:ef:
         03:86:a5:af:a3:59:cd:a7:5d:0f:75:e8:e7:9d:1d:b2:47:98:
         58:49:9f:da:df:e5:24:86:9c:35:8d:5b:a6:b7:04:c7:91:a7:
         df:f3:62:7b:2a:c0:49:fb:69:39:e8:fa:49:05:8a:f7:b2:15:
         1f:13:ab:08:17:18:71:f0:90:e0:b0:41:b5:fb:c4:36:bd:72:
         a1:be:f3:ff:09:4f:99:8c:e9:9a:c7:d9:a3:75:ea:f6:e0:c2:
         8b:26:95:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:32 2025 by rpki-client