Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6d197319-127b-3a9d-abe3-b7cf3737431f.roa
File:                     6d197319-127b-3a9d-abe3-b7cf3737431f.roa (raw, json)
Hash identifier:          phXrx4BkOpL5V+7MZOZuWxuLGnEOFGVNWys/jKw1oRo=
Subject key identifier:   92:3F:93:AC:5C:6C:1B:1E:86:D8:ED:FC:CB:D2:CC:38:53:EA:5A:3E
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584B0746D567CDBACDD1D47D3C00
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6d197319-127b-3a9d-abe3-b7cf3737431f.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     31898
IP address blocks:        143.223.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:d5:67:cd:ba:cd:d1:d4:7d:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=48648f28-613e-4f06-8e7e-13effba9c55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:ec:73:43:2d:64:e3:fa:3c:13:3c:64:45:
                    89:45:dc:13:72:9a:a6:85:ba:ef:ae:e5:81:1e:40:
                    99:94:d0:e3:6e:6d:25:e8:92:bd:88:11:4a:ec:d7:
                    3c:d1:e4:0c:f0:34:01:95:76:b5:44:62:38:3f:27:
                    aa:1a:73:1a:81:e4:91:ca:ae:6e:be:46:ac:a1:a1:
                    cf:be:b8:09:44:67:b7:a4:61:16:50:77:ed:48:78:
                    a0:31:67:ee:08:bb:69:0d:2c:1e:2c:ee:7b:40:47:
                    99:dc:65:96:e4:ee:50:32:93:18:f2:8f:2c:74:6f:
                    a3:9b:95:21:83:bf:1b:2c:d4:82:7a:1b:d9:fa:df:
                    77:f4:23:6e:9c:6e:c4:ad:ed:0c:b2:e0:4c:3b:9a:
                    b6:d5:bb:05:1c:3e:ee:13:26:e8:3a:17:a9:0d:af:
                    ca:fb:ed:50:8f:f0:b3:70:49:a9:3f:27:af:32:8c:
                    50:f6:a8:87:70:18:51:a8:ec:e1:51:8e:19:58:76:
                    40:e8:ab:77:d8:0b:6c:2b:8a:0f:82:e1:ca:a7:e8:
                    ac:1f:ab:0d:d7:b5:a9:a4:d5:66:36:5c:7f:9d:2c:
                    13:8d:61:a1:30:07:ab:f0:b8:66:e8:b3:07:39:0b:
                    a3:83:ca:35:70:9c:0e:4f:c5:a8:52:93:24:9a:02:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3F:93:AC:5C:6C:1B:1E:86:D8:ED:FC:CB:D2:CC:38:53:EA:5A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6d197319-127b-3a9d-abe3-b7cf3737431f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f7:8e:1f:f8:29:15:1e:74:4b:ec:c3:42:8e:0f:d3:f6:28:
         eb:b2:ee:08:fc:1f:e9:44:4e:05:94:79:5c:32:bd:ec:86:c3:
         d0:98:93:08:00:6f:e5:3f:c1:a2:8d:64:2e:5a:1c:81:9f:1b:
         f2:e9:51:17:c7:c0:63:a8:a9:ff:c2:d2:63:76:74:70:a3:1e:
         ae:7b:db:41:49:eb:5b:a0:23:69:10:df:5c:24:55:de:02:a3:
         d4:98:41:80:0e:aa:23:68:c3:83:b8:1d:e8:3f:3a:3a:8f:75:
         bd:60:2b:03:f1:a8:04:ff:27:ad:98:a1:ca:52:4e:cd:4e:0b:
         22:cf:5e:a2:cd:89:5f:75:ba:70:cf:dd:a4:e2:5a:40:82:a3:
         99:70:74:21:51:28:40:ff:d5:1a:c1:ff:4b:4e:f4:a8:bd:b8:
         33:b6:45:51:02:f1:c2:ad:4e:1c:f1:e5:47:ed:ce:35:1d:b2:
         dd:db:36:ae:33:5a:4b:7a:16:78:19:c0:db:da:aa:e5:04:c5:
         43:22:d6:d7:9b:53:55:9c:d5:63:b7:c6:49:b4:d4:93:de:66:
         f4:02:05:b3:05:25:ef:91:c4:55:b1:27:d1:a8:5d:5f:cd:30:
         87:f3:e3:9c:31:e2:1b:65:6a:55:2e:da:ce:c2:20:0e:76:1c:
         38:03:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:15 2025 by rpki-client