Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/c6776ee3-e554-3336-a6c5-cfe1f7a80dd7.roa
File:                     c6776ee3-e554-3336-a6c5-cfe1f7a80dd7.roa (raw, json)
Hash identifier:          Mg+6pgyDmgIV2JeDcWmyIutauhluxFjbnHckdQTzGJA=
Subject key identifier:   68:53:45:39:62:36:C9:2E:4B:61:7D:5F:13:BB:6D:40:A5:BD:FF:E6
Certificate issuer:       /CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
Certificate serial:       010D0C9F4328584B2A2C5CAB442117C667B7A880
Authority key identifier: 88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/c6776ee3-e554-3336-a6c5-cfe1f7a80dd7.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20473
IP address blocks:        23.184.232.0/24 maxlen: 24
                          2602:f8c5:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:5c:ab:44:21:17:c6:67:b7:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=2bf511c7-edf5-4c2e-9b0f-35015ad1ae61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:d6:37:d3:0e:85:30:f5:ab:7e:3f:50:ca:
                    cb:44:f4:f4:86:1c:fa:2a:7f:c3:35:cb:59:a1:99:
                    7f:4d:e0:10:42:17:fd:27:4b:38:10:64:4b:cf:66:
                    65:22:a0:e4:f6:a4:58:7a:41:65:1f:03:ca:26:30:
                    2a:71:78:4c:ce:9e:2e:e1:3c:8b:15:84:2d:ae:4d:
                    dc:af:26:ac:dc:a0:d0:96:f8:19:7e:d7:35:4a:e2:
                    98:d0:df:c9:a7:97:0a:14:63:0f:dc:16:01:59:2a:
                    3e:4a:6a:4f:1e:8e:80:bd:72:37:4d:98:89:c0:bb:
                    41:43:b4:1e:48:29:9b:e1:42:0f:22:80:11:af:0f:
                    6a:5e:07:57:d5:04:e5:00:13:5e:e2:32:0e:88:de:
                    e8:64:28:2c:9c:dc:d5:e4:98:68:06:fb:73:b5:ba:
                    e8:28:0f:68:c2:c0:db:89:1a:61:d6:d6:4c:fe:3b:
                    6c:1d:14:a4:5c:15:7b:d0:5e:4e:d0:62:89:7a:98:
                    ef:c7:f2:91:aa:33:45:68:eb:c9:b0:0b:d5:8f:9d:
                    77:fc:a9:27:32:a7:1b:b9:18:62:17:2e:39:91:2a:
                    b6:c8:13:3d:2f:f9:3d:a8:18:a7:a1:38:96:5a:a0:
                    af:3c:f3:37:64:b2:0f:e3:33:35:82:ef:4f:08:20:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:53:45:39:62:36:C9:2E:4B:61:7D:5F:13:BB:6D:40:A5:BD:FF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/c6776ee3-e554-3336-a6c5-cfe1f7a80dd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl

            X509v3 Authority Key Identifier:
                keyid:88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.232.0/24
                IPv6:
                  2602:f8c5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ea:da:85:2f:f8:ce:ab:2c:6d:a9:76:eb:bf:12:63:bf:e1:
         c1:84:3b:76:ad:2e:2f:a8:f5:95:2c:cc:7a:bc:c8:80:6f:3d:
         e3:1d:27:23:9b:da:40:2f:89:54:75:1a:7e:d0:b7:a1:32:bf:
         b8:f9:8e:80:04:f5:9d:96:3c:05:d4:a5:b3:e0:08:ee:c5:90:
         5d:f4:a5:3c:e5:79:cd:97:11:05:4b:c1:89:e1:6b:ac:96:ad:
         11:e7:a6:9c:65:d5:2f:66:02:59:6a:73:a5:79:f9:ff:0c:01:
         e7:d0:56:2e:28:9c:5c:15:53:bf:52:b0:65:41:59:17:62:d6:
         f5:6a:a1:03:96:73:6a:7d:80:2e:53:bb:d8:9e:15:ff:26:52:
         d0:12:62:84:ca:bf:7d:9c:64:df:fc:be:e4:8c:b0:c8:58:f6:
         2d:5f:cb:04:94:57:52:e8:d7:e0:3c:be:8a:27:21:ac:88:89:
         51:17:ac:83:ac:3a:f9:3a:af:7f:d3:ce:29:4a:1d:9a:59:6a:
         28:b9:cb:e7:5c:f6:d3:b2:d7:b8:29:3b:cb:e4:dc:46:72:25:
         2f:45:3c:91:4e:f3:60:5d:ca:0b:bc:0f:da:ee:f5:8d:1a:e2:
         06:b3:82:fc:eb:f4:bb:62:7a:de:22:2c:18:fd:4a:b0:7e:34:
         ef:ce:97:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:08:52 2025 by rpki-client