Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/9d6d80d6-1a7a-3b35-808c-d57536146fe3.roa
File:                     9d6d80d6-1a7a-3b35-808c-d57536146fe3.roa (raw, json)
Hash identifier:          GrjohdvaXwDUqDPcdCXaEDmPKfQxHp4TBg7hvF9YNc8=
Subject key identifier:   A1:DB:5A:8D:F4:E7:39:09:5D:8B:3C:AC:5C:25:67:8B:17:D1:FB:D2
Certificate issuer:       /CN=956c8740-f351-4625-a3ff-54fb1e6a5b97
Certificate serial:       010D0C9F4328584B047BF6454772FAF443244980
Authority key identifier: BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/9d6d80d6-1a7a-3b35-808c-d57536146fe3.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     25957
IP address blocks:        23.136.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7b:f6:45:47:72:fa:f4:43:24:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=956c8740-f351-4625-a3ff-54fb1e6a5b97
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=87ee5027-9df9-4add-8b6e-e636a38077c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:4b:7a:23:3c:1a:60:68:4f:18:06:e2:c0:
                    a0:1b:76:bc:17:12:b0:8c:81:8a:e2:dc:c3:2b:99:
                    eb:50:83:ee:2c:0b:3b:34:c3:02:41:c5:28:1e:9d:
                    65:ba:9a:fb:e5:a2:24:ef:56:02:b7:a7:ad:ad:66:
                    73:d5:18:b9:be:a4:87:cd:2a:90:f9:30:63:4b:55:
                    c4:77:c3:07:8f:df:0f:4d:5a:c7:95:00:3f:8c:a6:
                    8c:d0:67:a0:d5:a8:46:76:3a:b7:a9:75:7b:05:b8:
                    6f:2d:0c:1a:52:9a:d8:9d:2a:14:cf:06:a2:25:14:
                    30:3d:90:be:8a:c0:c0:91:fe:2d:c4:af:ac:12:e4:
                    a3:22:88:0a:e9:60:0a:2c:17:4c:e1:37:0e:ac:51:
                    f0:70:52:cc:22:92:c8:ee:f6:72:07:00:7c:ef:d4:
                    ed:4a:e7:44:17:98:03:8c:48:b3:f6:27:db:00:b1:
                    cf:0e:15:a6:03:25:b8:fb:44:e0:6e:57:de:69:ca:
                    d8:2a:fb:60:29:44:93:cb:cc:29:bd:09:9a:6c:88:
                    7f:7f:eb:2c:2b:81:56:f2:13:79:56:74:88:b8:33:
                    8f:c3:26:81:b9:54:dd:fc:36:dd:f1:0f:e6:3e:dd:
                    f8:4f:a1:64:e1:43:ff:a0:98:c0:05:3f:48:ea:a2:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:5A:8D:F4:E7:39:09:5D:8B:3C:AC:5C:25:67:8B:17:D1:FB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/9d6d80d6-1a7a-3b35-808c-d57536146fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:77:96:c3:a2:77:72:d7:a2:0e:65:8e:d1:5d:30:53:aa:4b:
         00:0c:b7:f6:06:7e:53:67:d7:a2:53:a8:bf:7c:aa:b6:e8:cf:
         fd:23:e7:de:4c:ef:e4:64:29:64:e5:c1:e3:80:9f:4e:c3:16:
         bf:0f:5c:c3:f9:8d:fc:17:b5:40:f5:1a:ec:a0:37:b5:c1:17:
         33:d1:a4:78:d9:b5:24:3d:cd:02:5d:24:76:d0:cc:3b:b5:0b:
         66:b8:81:3f:f0:a1:a8:f7:a4:75:72:ab:e7:e0:12:f1:f5:c0:
         31:f8:60:7d:7d:ad:da:90:80:4e:75:17:41:1a:64:9c:20:12:
         eb:a0:15:4e:46:76:c3:c8:c4:14:56:96:a8:71:2e:06:fa:89:
         2b:0d:68:68:ef:5e:9a:eb:ee:94:1a:9d:5d:31:1d:40:c5:6c:
         3c:f9:a4:14:f2:d6:57:6c:39:ff:9d:ff:65:1a:45:76:da:b0:
         a1:62:c0:12:df:d2:7e:e7:30:ed:33:49:60:d0:7b:dc:9b:4e:
         49:63:5a:76:b9:93:bb:15:15:91:4b:ae:7c:74:b9:26:e6:11:
         a8:b3:24:52:8c:d6:5a:d5:8c:44:e4:23:ee:d3:96:42:f9:f8:
         95:62:46:02:71:73:7f:56:ba:97:61:e9:f1:5c:1b:1a:10:fc:
         c1:41:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:36 2025 by rpki-client