Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/5bc57fea-308c-3f45-85da-265343f0ba6d.roa
File:                     5bc57fea-308c-3f45-85da-265343f0ba6d.roa (raw, json)
Hash identifier:          mL6Qzm01OiLLH32DKGzCNYS6cCGaXAqGaShGz6NYwRE=
Subject key identifier:   BD:BC:39:12:80:E0:B8:17:CE:01:A5:12:DE:45:AF:CD:C7:DF:47:D4
Certificate issuer:       /CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
Certificate serial:       010D0C9F4328584B6A6201257806ACC4CA7FABC0
Authority key identifier: 64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/5bc57fea-308c-3f45-85da-265343f0ba6d.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     209242
IP address blocks:        23.179.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:01:25:78:06:ac:c4:ca:7f:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=ed3bf515-826c-439b-ad93-c34bdbe3638f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:3c:b1:09:73:0a:2d:33:4d:48:6a:bb:9b:
                    61:1d:1e:79:de:f4:5e:49:0d:6b:5c:7a:ff:54:94:
                    06:ce:10:99:8e:7d:1d:1c:ab:e1:49:85:d5:12:76:
                    c7:d5:6e:28:71:4e:db:a6:dd:40:44:cf:1d:17:ff:
                    34:ff:10:cb:f7:6f:da:0f:e0:f3:63:b6:63:fb:2a:
                    97:6f:70:21:3c:81:c2:94:d8:12:59:d3:0d:7f:41:
                    06:07:69:7e:9c:e6:48:48:1c:eb:3c:a5:aa:e8:a7:
                    c6:53:36:8e:1f:bd:d0:e6:c0:df:d2:d7:00:9e:cc:
                    7d:b5:58:fc:e6:83:93:9d:7d:9c:31:1a:90:79:0b:
                    f6:cb:78:fe:8b:b8:05:0c:98:f3:97:53:a1:f7:64:
                    1f:d1:05:f8:69:53:9b:5f:f4:0d:da:ff:ab:1e:d2:
                    8a:7a:60:2a:18:6a:52:1c:5d:58:a9:2e:94:39:97:
                    72:3f:7e:e4:14:bd:6b:49:9e:17:b9:6b:28:72:35:
                    b4:b4:e9:23:22:d6:e9:8f:26:d3:43:27:9d:e8:09:
                    96:36:f4:14:41:42:80:64:1e:51:46:9f:aa:b5:fa:
                    9b:b5:bb:11:1e:fb:23:cd:fb:dd:2d:22:f7:f5:64:
                    76:e2:31:fb:90:b9:a3:5a:5d:da:cd:c9:d8:0f:e8:
                    7d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BC:39:12:80:E0:B8:17:CE:01:A5:12:DE:45:AF:CD:C7:DF:47:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/5bc57fea-308c-3f45-85da-265343f0ba6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl

            X509v3 Authority Key Identifier:
                keyid:64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:f4:73:0a:a7:1c:1f:c7:ff:f5:e5:7b:ef:de:bc:25:9f:
         42:ca:10:89:f6:2a:9f:f9:24:a2:8f:bb:de:b9:88:94:a2:87:
         10:0d:c6:b3:5d:51:e2:c7:3c:f9:71:bb:13:cf:50:84:ee:f2:
         7b:4b:52:b6:3e:69:15:68:88:79:2a:04:4b:73:b1:22:56:3c:
         6c:d1:ec:3b:7c:ee:d6:14:d4:b2:d0:92:ea:3f:93:5d:14:7a:
         73:ea:ec:12:5e:cc:b5:7b:f1:1f:77:34:71:64:aa:03:63:63:
         6f:bc:1c:fe:0e:d6:17:ec:bb:d6:4b:b2:74:33:71:56:b0:8d:
         a2:87:3b:69:e0:25:cf:e6:0d:ce:dd:d4:67:b2:53:11:9c:1c:
         4b:55:25:96:3b:87:ae:af:bb:2c:8a:c1:01:a5:e6:2b:c3:6c:
         fe:6c:7b:ef:5a:6d:1a:81:a1:a4:be:fe:61:1d:f2:65:1a:50:
         b4:e6:7d:59:3d:78:ae:36:72:77:a3:32:48:30:58:16:48:9a:
         20:8d:a4:ad:29:d2:58:c1:a0:0b:7a:79:76:b3:24:e7:df:3c:
         f7:c0:62:0c:c1:aa:90:73:ff:4b:2f:18:62:c8:da:bf:6f:79:
         59:0c:a7:84:7d:65:64:63:ee:a3:0b:ee:60:d9:98:38:98:f4:
         a6:54:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:35:41 2025 by rpki-client