Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9066dc46-7348-3101-a592-031cc20274ca.roa
File:                     9066dc46-7348-3101-a592-031cc20274ca.roa (raw, json)
Hash identifier:          3u72I2+78IRJkuzCVH6AqKcbm3EMCpdoIRQm5RN17I8=
Subject key identifier:   6E:6F:92:22:E0:9E:1F:89:91:3F:5D:1A:82:EA:3D:D5:5D:5D:55:BA
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F4328584B5C6C79E40B4A47CE606E0140
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9066dc46-7348-3101-a592-031cc20274ca.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     134773
IP address blocks:        23.247.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:79:e4:0b:4a:47:ce:60:6e:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=cb930cda-c123-485b-ad9d-1dee9d8bb735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:53:e7:e8:ee:f0:17:b9:55:b1:69:4f:df:
                    bf:da:5f:e9:12:b9:f5:42:c3:e5:ab:69:98:c4:5d:
                    6d:51:0b:bd:29:69:14:e0:4a:40:ee:dd:42:90:35:
                    65:1d:d4:09:23:1f:6a:a8:79:f9:92:d0:0b:fc:9e:
                    0e:bd:0c:20:2b:09:47:6e:0b:81:ce:b1:d0:b9:ae:
                    6c:0f:87:82:32:e7:be:13:9b:3d:80:7c:e7:ba:2c:
                    7a:12:36:f2:05:9a:e7:55:a4:80:b1:a0:31:d4:4c:
                    9f:1b:94:e3:4f:da:45:92:23:42:1b:b2:2a:2e:97:
                    9e:17:2a:c4:d8:05:13:72:92:e3:c5:cd:20:2e:e2:
                    e7:df:6a:16:34:0c:1c:82:a1:56:eb:8e:ca:10:8b:
                    43:46:89:6e:35:52:bd:fb:97:b9:f4:bd:ec:65:de:
                    39:b0:db:33:f9:59:05:2a:11:7c:69:69:3d:9c:7b:
                    c3:08:08:42:25:51:ae:90:f0:af:16:85:3f:ed:ef:
                    bb:fe:98:ee:86:87:d5:d4:d0:a5:82:01:0e:6d:2e:
                    a8:49:41:9b:18:09:88:cd:66:b4:cf:f9:9e:28:3b:
                    09:75:e7:66:a6:33:3d:df:5c:15:8d:c2:07:cd:54:
                    17:4f:38:5a:cb:57:8c:70:ac:12:13:f4:16:fe:b4:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6F:92:22:E0:9E:1F:89:91:3F:5D:1A:82:EA:3D:D5:5D:5D:55:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9066dc46-7348-3101-a592-031cc20274ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:87:70:6c:29:f9:36:a2:ee:88:e3:de:09:10:9e:bd:6b:1f:
         ae:67:0a:65:fc:96:44:eb:43:6a:65:40:b8:aa:d2:9a:3d:28:
         ca:1f:d5:0a:03:4c:9d:c6:0a:51:4a:2a:78:56:2d:92:02:17:
         dc:e4:26:69:ed:55:d4:9d:5d:33:76:b6:52:e1:90:19:23:ca:
         40:3f:25:b9:cb:69:90:06:c8:22:ef:41:f7:43:d5:4f:53:ed:
         4a:41:0a:52:7e:b3:0f:97:ad:0a:92:7b:b7:41:12:2d:35:07:
         67:0a:83:61:20:47:86:67:7c:08:64:2a:fd:67:61:ef:9f:94:
         54:33:d8:14:cc:c9:49:c0:e8:1f:36:d0:21:f8:11:74:8b:58:
         cd:1f:81:cd:30:a9:39:76:5f:06:3a:64:8f:04:1d:42:ca:30:
         55:c6:81:ae:dd:4d:9d:d8:f7:a8:ae:8a:38:56:5e:c1:00:57:
         5c:03:7c:d2:2d:53:46:26:d4:ea:d1:09:c3:9d:7b:8d:13:ac:
         5c:fe:2e:9f:fb:31:7c:50:43:af:66:34:a9:4b:49:d3:6b:43:
         ba:a3:1a:4b:16:3a:66:09:77:e5:2f:f3:d6:45:97:73:57:ad:
         89:9d:c1:0f:e8:5b:8d:0b:a0:3b:8f:1d:43:70:14:8f:1a:bf:
         34:29:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:41:41 2025 by rpki-client