Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b92dcee-483e-4526-8735-edaca6b76ac4/c651d87b-963a-372d-acf3-8e7e3e6df652.roa
File:                     c651d87b-963a-372d-acf3-8e7e3e6df652.roa (raw, json)
Hash identifier:          y9bbtH+dDE7Nfii2mTVG6SmZXW9mO199KXiE87r37ms=
Subject key identifier:   8A:AB:E7:89:52:3E:91:97:38:28:78:A5:71:E5:10:F9:3C:B1:53:50
Certificate issuer:       /CN=0b92dcee-483e-4526-8735-edaca6b76ac4
Certificate serial:       010D0C9F4328584B6A62038A1687F64056C02F80
Authority key identifier: 4D:8B:CD:F9:76:DF:27:0C:4A:F3:A2:47:59:58:A3:77:45:27:1E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b92dcee-483e-4526-8735-edaca6b76ac4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b92dcee-483e-4526-8735-edaca6b76ac4/c651d87b-963a-372d-acf3-8e7e3e6df652.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     401490
IP address blocks:        23.130.68.0/24 maxlen: 24
                          2602:f79c::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b92dcee-483e-4526-8735-edaca6b76ac4/0b92dcee-483e-4526-8735-edaca6b76ac4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b92dcee-483e-4526-8735-edaca6b76ac4/0b92dcee-483e-4526-8735-edaca6b76ac4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b92dcee-483e-4526-8735-edaca6b76ac4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:03:8a:16:87:f6:40:56:c0:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b92dcee-483e-4526-8735-edaca6b76ac4
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=8fd3eae5-ca0f-4065-b01e-7b38db034fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:91:08:31:a2:1b:f5:9c:10:e9:f3:94:b1:
                    fa:a0:be:e1:33:3f:1c:dc:b7:bd:ec:b3:a0:33:ac:
                    74:9c:c4:72:7e:e4:b4:bf:8e:94:94:c1:b2:98:99:
                    f7:a0:63:8f:9a:78:09:37:3c:3a:5f:cd:75:36:de:
                    46:7d:b2:a0:56:cc:6c:2b:d8:78:8b:09:f6:be:67:
                    36:4b:84:b2:84:a1:ea:9c:c2:5f:71:3d:8d:7d:7c:
                    27:75:17:5d:3e:38:25:bd:76:6a:33:38:57:78:84:
                    05:70:61:29:92:53:d4:82:72:78:a2:a6:f3:3e:e6:
                    94:3d:54:f7:1b:ce:22:86:65:e6:ca:86:c5:cf:81:
                    52:b1:1d:39:50:fe:72:5f:6e:dd:07:8e:81:5f:9e:
                    60:a3:27:77:ae:ee:96:d5:0f:49:5a:06:43:8b:bc:
                    82:40:d2:e2:61:73:2e:c1:0c:c1:8b:2d:d5:ed:c4:
                    5d:2f:84:f4:c9:bf:6d:c3:6e:fa:5e:e4:8b:f9:cc:
                    44:d3:80:b4:ea:60:9d:62:e8:07:de:eb:54:67:ea:
                    68:64:00:a6:b6:c8:4a:b3:a7:6a:7c:ee:b3:b0:6e:
                    d1:06:51:08:ff:08:f4:de:ba:34:ec:c1:62:a0:d3:
                    ce:33:84:a3:c6:c8:33:da:55:18:a0:32:e0:78:db:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AB:E7:89:52:3E:91:97:38:28:78:A5:71:E5:10:F9:3C:B1:53:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b92dcee-483e-4526-8735-edaca6b76ac4/c651d87b-963a-372d-acf3-8e7e3e6df652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b92dcee-483e-4526-8735-edaca6b76ac4/0b92dcee-483e-4526-8735-edaca6b76ac4.crl

            X509v3 Authority Key Identifier:
                keyid:4D:8B:CD:F9:76:DF:27:0C:4A:F3:A2:47:59:58:A3:77:45:27:1E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b92dcee-483e-4526-8735-edaca6b76ac4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.68.0/24
                IPv6:
                  2602:f79c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f2:0b:ca:49:24:cf:a5:af:6a:e5:73:0a:62:d3:09:b8:2c:
         07:79:26:ab:46:c9:cb:7c:a1:3b:24:f2:a1:eb:d1:ef:86:ff:
         cf:fb:9d:78:8c:90:33:b9:de:8b:d5:51:69:9b:03:81:c5:83:
         b3:05:a2:c2:64:f7:ec:2a:32:da:6c:eb:d8:6b:49:d9:97:52:
         55:ab:14:11:d0:56:23:d5:4c:56:05:a1:e6:08:cc:eb:56:57:
         b2:86:75:91:d4:de:a7:54:36:39:39:15:84:09:2d:39:da:73:
         d8:22:a5:85:83:b4:56:cf:e2:ef:7b:b8:69:ce:27:7f:f1:c7:
         b3:de:50:43:51:0b:ca:70:b3:df:57:33:d4:36:89:26:00:0f:
         a1:73:40:8f:2a:bd:17:3c:a4:0b:bc:93:0e:0c:4f:d0:ce:03:
         63:05:99:12:7e:4d:bb:f3:6f:75:c8:5d:bc:ce:bf:d9:08:b9:
         86:03:47:f9:8b:a7:0c:e1:98:98:f9:11:7b:4e:45:17:fa:0f:
         b4:13:4b:b3:0f:c9:3c:f3:21:c5:03:76:8c:f3:93:84:5b:31:
         13:05:bd:e5:6a:90:a7:f1:c1:23:14:8f:02:fc:3e:1d:de:38:
         7a:24:43:14:4e:33:f9:9a:d9:47:b9:d1:2e:78:f8:ce:0b:e4:
         85:2c:84:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:42 2025 by rpki-client