Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa
File:                     4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa (raw, json)
Hash identifier:          cMoum1P+IhofQ6wuF7Naziu2RzfiII/JM6C5HA9XN7o=
Subject key identifier:   9E:B3:1A:81:37:AA:5E:6E:B0:EF:45:9F:E6:02:4E:96:23:03:93:2A
Certificate issuer:       /CN=b511cf32-0933-4308-8981-9c296fc06987
Certificate serial:       010D0C9F4328584B1806D4E5746408F3E5733C60
Authority key identifier: B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     32995
IP address blocks:        23.137.160.0/24 maxlen: 24
                          2620:4d:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d4:e5:74:64:08:f3:e5:73:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b511cf32-0933-4308-8981-9c296fc06987
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=bb8cfdc1-2930-4b13-bf05-65d5b680737a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:98:6f:79:6a:05:d5:c3:6c:54:6e:31:d9:cb:
                    db:d0:8a:62:82:f3:87:cf:ae:f4:9a:08:e0:fb:08:
                    a4:3f:0c:06:89:fe:0e:99:da:57:cd:fe:7b:71:9c:
                    26:c2:88:a2:4d:84:03:7c:dd:94:a8:70:8d:87:c0:
                    6e:5e:2d:29:51:23:92:03:06:6a:21:e3:64:75:1c:
                    5f:ea:88:7a:a0:35:18:52:79:c9:7c:27:27:34:91:
                    8d:c4:b3:bb:dc:c8:d2:48:a4:69:fe:a4:f9:7d:c7:
                    29:ad:1d:3e:74:9f:6c:37:c0:37:c7:26:ec:e3:50:
                    05:97:9d:63:96:60:3c:6b:0d:66:06:78:72:1e:d5:
                    6f:68:d2:b3:4a:86:a3:53:06:b5:8a:7c:15:3d:e4:
                    61:4d:b0:99:5c:3b:67:cc:57:ed:c5:93:84:65:ee:
                    c3:5e:5d:20:19:78:ff:70:25:6b:0f:9a:a7:97:73:
                    5e:cf:cb:4b:9e:c3:6f:81:ba:54:d4:f4:8e:e9:05:
                    38:5b:90:4f:b4:ae:4a:ea:a2:73:65:eb:b9:b6:d5:
                    74:09:14:f2:70:42:0e:61:77:ff:59:19:4c:b0:d2:
                    31:ea:7f:42:7b:2d:a1:a4:21:3a:7a:00:5a:da:25:
                    46:60:1e:3d:16:93:1f:a2:05:c1:a5:98:92:dd:97:
                    f9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B3:1A:81:37:AA:5E:6E:B0:EF:45:9F:E6:02:4E:96:23:03:93:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.crl

            X509v3 Authority Key Identifier:
                keyid:B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.160.0/24
                IPv6:
                  2620:4d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:3b:32:5a:c3:65:06:56:02:ad:72:f4:58:60:97:40:e2:
         40:21:25:62:6d:a1:40:6d:0c:2c:75:57:7e:5e:51:56:7a:a1:
         be:3b:c2:99:fe:ae:9f:bb:d6:19:ba:4b:14:e5:b1:bf:8e:7f:
         53:66:d0:22:39:0d:89:66:49:89:de:dc:89:a3:c2:e9:49:be:
         23:4d:ef:cb:87:95:59:f3:8f:07:02:c7:3b:b2:92:3b:80:4f:
         bb:ba:4d:b2:16:e4:f1:f2:8f:ea:3f:7d:0c:74:b1:fb:6a:30:
         b5:25:99:87:8c:9d:ba:75:e2:0a:13:46:3b:5d:e6:e3:ae:70:
         11:45:fe:cd:d9:ec:07:16:1d:9e:b0:13:2d:de:e9:3d:f9:97:
         92:07:7e:3d:49:37:e2:54:f2:a5:e0:83:3e:da:cb:29:da:09:
         4f:1e:a3:e0:72:40:d1:26:0d:61:f7:92:92:b7:31:e4:6c:1a:
         bb:e9:d6:42:7f:b4:d1:52:0f:79:bc:f7:f2:d0:60:78:f9:3e:
         2b:f0:89:47:31:03:48:a2:39:ed:db:00:37:ec:f2:3d:c6:d5:
         f8:9e:1b:02:e5:45:b3:f4:ce:75:5b:d0:0f:2e:51:7f:76:24:
         fa:73:16:98:fa:05:46:83:4d:50:f9:f2:c8:68:3c:83:84:70:
         5b:8a:da:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:57:04 2025 by rpki-client