Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa
File:                     0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa (raw, json)
Hash identifier:          fjNFVhJokhZMO5DgumeBuJnLQ5ch5JqRna1D4q5o7Pg=
Subject key identifier:   97:61:A4:C2:CF:20:62:EC:75:D2:21:6B:A0:EC:D6:41:50:48:37:7E
Certificate issuer:       /CN=273599ef-5b0b-4798-9f47-811d4c120cb0
Certificate serial:       010D0C9F4328584B44B1C4473BC211B1226FE880
Authority key identifier: AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     399861
IP address blocks:        23.130.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:c4:47:3b:c2:11:b1:22:6f:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273599ef-5b0b-4798-9f47-811d4c120cb0
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=43ecfb2a-94ca-475b-9aa8-e7f3c5a8e6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:e4:48:21:ad:13:0a:22:43:67:fe:d6:3b:
                    35:b5:50:15:02:47:2f:60:c7:90:ad:b6:63:1b:ad:
                    73:e7:46:00:1a:5c:01:2e:a6:e1:cb:05:88:dd:93:
                    56:f8:4e:22:26:2e:e3:80:91:db:77:49:30:a5:c4:
                    e5:cc:6d:64:1f:5f:af:79:38:ad:1c:16:87:15:42:
                    c4:7e:14:27:c1:f1:2e:67:86:72:a1:c3:89:73:ef:
                    3e:0c:9c:7f:b2:ce:79:b1:ca:41:28:87:e5:c5:9e:
                    30:2f:20:fc:8d:ec:df:e7:25:a7:3e:20:43:e2:18:
                    94:02:6b:ee:66:e9:68:bc:ff:d6:c3:f8:28:a7:da:
                    41:5d:a9:da:93:a1:bf:fe:c3:71:c8:12:fd:19:83:
                    23:f7:a7:2a:d1:21:d2:9d:29:78:46:5d:59:6b:a2:
                    c8:9a:9b:8a:2d:38:b8:93:b2:dc:4a:2f:16:24:64:
                    48:a6:3b:5f:ca:b6:15:b4:58:aa:65:41:8a:d8:1a:
                    f1:3d:f7:06:06:87:d7:d2:46:ae:30:82:04:fe:50:
                    6a:d9:5e:1b:7f:16:85:05:44:27:f1:23:c7:ef:1a:
                    59:2f:d8:f6:68:3b:ee:4a:49:3f:2b:92:64:d3:25:
                    ca:92:5d:86:be:21:41:b6:f9:e9:41:33:d5:b2:2c:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:61:A4:C2:CF:20:62:EC:75:D2:21:6B:A0:EC:D6:41:50:48:37:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:08:20:ff:3e:06:cd:f7:f2:0f:f2:53:56:7c:a2:38:00:1c:
         88:ce:a5:b2:bd:8d:fa:1a:e5:6f:47:9c:85:f6:09:77:4e:5f:
         f6:45:0a:eb:5d:82:68:bc:e7:b9:9c:5c:ef:f3:13:b3:19:dd:
         ca:29:8a:42:02:aa:5a:28:35:23:c8:7b:e1:66:31:47:29:0f:
         d1:6f:13:2a:31:26:70:67:7f:de:a1:e5:23:7b:62:a0:68:6b:
         8e:78:e7:f6:68:9a:86:dd:e6:d9:72:38:d6:62:d8:82:fd:24:
         ee:36:77:07:b2:9b:43:f8:ce:6e:cb:65:b2:60:a6:ac:e1:d2:
         42:20:8b:35:e4:a3:a7:ed:27:41:91:44:79:18:fb:c8:b9:33:
         a2:ea:05:41:9d:ee:1e:7a:a6:60:4b:4c:54:db:db:5d:4c:a9:
         fb:7b:f4:9d:16:42:7f:de:92:12:3a:a8:ae:99:bf:01:38:8f:
         04:b4:11:8b:5c:a6:81:3c:a4:dc:b9:65:25:7d:99:db:65:77:
         77:55:59:1c:22:2a:e8:bf:fa:2d:1f:ca:7a:a1:5e:2c:7f:ed:
         73:50:75:1f:bf:7f:17:ea:40:87:04:9d:90:fb:13:44:d5:72:
         da:08:01:6f:8a:6c:b5:2c:f7:1c:47:ca:48:61:9d:2b:04:cf:
         fb:ad:27:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:20 2025 by rpki-client