Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/938d5892-6a64-3f55-9ce7-0180f67571e7.roa
File:                     938d5892-6a64-3f55-9ce7-0180f67571e7.roa (raw, json)
Hash identifier:          nEFS4VzpCAAErKe0SwzzEmJuR7swR60KU6mgnKVE+BU=
Subject key identifier:   DF:6A:63:02:21:F4:6B:86:B7:C8:84:1F:14:50:E0:F1:80:09:5C:E8
Certificate issuer:       /CN=2eee75b4-9a8a-44e7-9358-b5ada51ddc74
Certificate serial:       010D0C9F4328584B031695B8986CAEE39CDEB500
Authority key identifier: 05:FF:93:67:74:72:1D:14:4F:93:FE:03:A9:57:A4:81:50:21:25:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/938d5892-6a64-3f55-9ce7-0180f67571e7.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     398157
IP address blocks:        23.151.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:95:b8:98:6c:ae:e3:9c:de:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eee75b4-9a8a-44e7-9358-b5ada51ddc74
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=4d04db2e-85c0-4219-9089-ecb2d135d104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:44:ed:86:80:9d:08:11:18:de:33:b6:a7:3d:
                    75:e3:c6:f5:35:71:70:c9:ee:bf:a9:02:71:5d:41:
                    be:4e:3b:a6:ce:c1:93:66:de:5b:35:cd:16:5d:51:
                    c9:c4:3a:77:96:85:48:57:ec:9c:b0:62:23:38:ac:
                    c1:1a:cd:43:c7:09:75:31:44:c6:72:bc:f2:a3:95:
                    2f:cb:35:3b:4f:dd:e8:91:3b:a4:41:8d:af:2e:53:
                    0f:d5:bc:46:11:2e:4c:c5:e6:44:bb:97:c5:3e:cc:
                    28:8b:c9:0e:f2:52:0e:49:b0:5b:e4:0d:2f:60:09:
                    c1:b3:25:7f:3e:02:4d:c0:92:b2:79:25:4d:aa:47:
                    22:8a:ec:f9:c6:d2:fc:15:e9:98:5d:ee:6d:9a:93:
                    29:e4:4b:11:79:17:d0:aa:39:55:2c:d4:ed:29:ea:
                    f7:d1:ed:32:b3:ab:a0:6c:a3:b1:39:03:1a:b6:bc:
                    a7:94:5f:d3:19:15:14:f7:8a:cb:88:c9:c5:c0:aa:
                    d4:45:80:96:86:24:e4:1d:e7:7a:8b:ea:e9:07:6f:
                    b5:03:7c:77:00:27:17:25:5f:3a:30:0a:f2:9d:cc:
                    af:18:38:74:db:01:99:a1:6e:36:34:66:2a:7a:42:
                    16:9b:a4:7f:8c:e2:b0:3f:0f:7f:02:0f:bf:1e:3c:
                    df:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6A:63:02:21:F4:6B:86:B7:C8:84:1F:14:50:E0:F1:80:09:5C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/938d5892-6a64-3f55-9ce7-0180f67571e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.crl

            X509v3 Authority Key Identifier:
                keyid:05:FF:93:67:74:72:1D:14:4F:93:FE:03:A9:57:A4:81:50:21:25:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:ac:fb:d6:fd:4e:cd:dd:b9:8b:39:78:81:62:43:c9:37:
         49:32:1e:68:bb:e4:b8:5f:19:53:57:6e:1b:c4:9d:6a:8e:7b:
         5e:0f:8f:4e:db:09:f6:12:5e:83:e2:c8:c5:91:35:ce:ab:5a:
         54:2a:fa:fd:35:a2:ad:6c:75:cd:4e:7a:13:4c:42:25:a4:ef:
         65:54:f5:2c:6a:7b:ec:50:ad:4c:78:6f:0d:e4:44:33:66:43:
         3b:50:e0:85:85:b5:4f:e6:26:c8:51:5a:35:50:dc:cd:4e:e0:
         44:6c:f4:1f:a1:ee:67:ab:58:c0:9b:8b:12:55:d5:ce:cf:cb:
         8d:af:36:aa:f6:a5:2e:02:ce:d5:35:4b:2d:16:62:0d:38:31:
         ba:be:92:d3:b0:44:bb:68:d0:22:35:a3:f4:0b:f5:81:4e:be:
         b8:4f:36:69:ec:85:f4:cf:26:e7:0f:29:29:ff:6b:aa:87:c2:
         97:3d:e2:5a:18:e9:15:d3:28:ce:a5:e4:eb:8d:3b:ab:ab:de:
         e8:6a:d2:25:90:0f:91:8c:96:56:62:7d:ed:bd:9b:7e:b8:80:
         04:91:33:59:45:b1:d4:1d:ab:d2:fc:4b:b2:ff:3c:dc:3a:e3:
         3d:54:a9:44:f8:d4:86:03:1a:b4:15:0e:8d:27:ec:02:a0:7a:
         6c:38:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:26:59 2025 by rpki-client