Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/8e8755ab-a7ed-3f3a-9280-bdec671e9fc1.roa
File:                     8e8755ab-a7ed-3f3a-9280-bdec671e9fc1.roa (raw, json)
Hash identifier:          6GfTzFl9xPvXE1a3J2AT1Dfdwba8AQDI04gD+MQQaUQ=
Subject key identifier:   C3:D0:76:07:93:7E:DE:08:E8:82:E6:6F:85:F5:38:4B:47:65:61:37
Certificate issuer:       /CN=0113f3a9-36b0-4afd-81ec-5d581325b016
Certificate serial:       010D0C9F4328584B715D104A17B1A6870825D000
Authority key identifier: 26:F2:8C:9D:C1:B0:BE:69:2B:6C:B0:EE:7E:F5:4E:0D:57:9A:5D:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/8e8755ab-a7ed-3f3a-9280-bdec671e9fc1.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     17378
IP address blocks:        23.169.232.0/24 maxlen: 24
                          2620:c3:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/0113f3a9-36b0-4afd-81ec-5d581325b016.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/0113f3a9-36b0-4afd-81ec-5d581325b016.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:10:4a:17:b1:a6:87:08:25:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0113f3a9-36b0-4afd-81ec-5d581325b016
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=2a264ec7-7082-419c-80e8-88bddfcd0ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:5b:c1:c1:39:28:5e:b8:70:9a:9d:5c:12:
                    fa:33:4f:07:d6:1f:11:2d:6c:4c:85:b6:d4:0d:6c:
                    d4:a1:8b:c4:07:72:35:82:99:0e:13:17:59:3d:97:
                    b9:dc:d4:08:94:d9:ae:a4:d1:bb:4f:fa:25:a3:20:
                    4f:e2:50:ec:80:40:d8:17:73:ea:22:27:cf:1d:dc:
                    df:23:d2:78:a0:72:0c:c9:26:c2:45:53:e0:c8:43:
                    c0:98:6d:73:21:fe:3a:82:4b:6c:50:c6:77:3d:12:
                    48:62:0d:96:44:fc:47:19:0e:01:69:82:c0:7a:46:
                    8b:e2:e9:83:fa:16:0c:c8:36:0d:88:1b:a1:cb:39:
                    8d:e1:b7:66:f6:8e:ed:b1:20:0a:71:53:50:92:d5:
                    4d:ef:d7:3a:3d:51:bc:ee:81:e7:1c:2a:1a:cc:0a:
                    7d:51:0e:48:0f:19:3e:8d:3c:9d:6f:72:0f:a9:37:
                    8f:73:1f:87:7a:36:22:5f:87:b5:b4:b5:d9:16:d9:
                    7a:dc:42:af:d4:f1:a0:98:9a:b7:4c:90:d9:b6:5a:
                    1b:2e:47:c4:52:c3:1d:98:4b:e5:77:bb:59:12:7f:
                    9c:50:53:ac:13:a4:53:c3:14:bc:91:a3:c0:2f:eb:
                    38:c3:44:88:e8:af:16:8f:a5:ed:f2:54:2f:dd:40:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D0:76:07:93:7E:DE:08:E8:82:E6:6F:85:F5:38:4B:47:65:61:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/8e8755ab-a7ed-3f3a-9280-bdec671e9fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/0113f3a9-36b0-4afd-81ec-5d581325b016.crl

            X509v3 Authority Key Identifier:
                keyid:26:F2:8C:9D:C1:B0:BE:69:2B:6C:B0:EE:7E:F5:4E:0D:57:9A:5D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.232.0/24
                IPv6:
                  2620:c3:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:72:f6:bd:be:9e:25:00:11:f0:da:c7:54:59:20:37:6b:ee:
         5b:c2:b7:6c:81:cc:4c:9d:03:e4:28:93:45:8c:33:51:f9:a1:
         ab:c1:d7:89:6e:84:ec:09:27:d8:44:71:66:3e:98:8f:f7:5d:
         8b:fa:b2:42:dc:60:fc:38:1e:98:07:47:98:bd:ac:61:5d:e4:
         3b:8e:42:a4:8e:e4:79:11:6a:ac:31:14:5c:f6:fe:fe:8e:84:
         9a:f9:0b:e7:5c:12:9d:cb:0f:6e:2c:a2:47:f9:0c:61:62:a0:
         7c:18:6e:b2:84:ee:58:6d:d1:79:98:77:f3:22:84:a9:0b:d8:
         12:ce:be:4f:0b:78:83:bd:ae:44:a7:9c:38:85:65:8a:0f:3c:
         28:73:02:b0:9a:c0:18:bc:bc:f1:e5:c7:b2:27:15:a3:fa:51:
         cd:49:d2:e4:25:ee:f8:5f:ed:25:e4:ac:da:73:f6:54:b0:1c:
         b8:62:cc:d3:d8:50:46:4f:57:f9:be:61:cd:2c:81:fd:e8:fc:
         f9:57:b2:ef:af:06:f5:1c:e5:51:08:65:b7:3a:41:d5:20:84:
         ef:79:2f:04:c4:b9:6b:77:43:8e:17:ec:a1:7e:d1:95:cf:4e:
         94:9a:47:09:c7:5f:33:71:09:83:d3:51:b8:5c:65:99:c5:63:
         52:d8:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:38:46 2025 by rpki-client