Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/34c260ec-a79c-314d-b0b5-91a125d5fea8.roa
File:                     34c260ec-a79c-314d-b0b5-91a125d5fea8.roa (raw, json)
Hash identifier:          xFlFObUHUaQjz5NBqNmogzXn5IbL8WKuYIZ1Y6JIM7c=
Subject key identifier:   54:02:EF:E1:D8:E6:AA:EA:BA:B9:CD:6D:9E:84:80:46:6F:20:F6:FC
Certificate issuer:       /CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3
Certificate serial:       010D0C9F4328584BAEC7CA7CAC9559CCC3326F20
Authority key identifier: 73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/34c260ec-a79c-314d-b0b5-91a125d5fea8.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     23096
IP address blocks:        23.235.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:ca:7c:ac:95:59:cc:c3:32:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=f8d52dcb-2da6-4a4f-a5c1-260d8695e5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:3f:ae:e9:00:34:2e:21:04:c0:b9:95:e2:
                    40:28:c5:bd:ff:df:5c:26:96:bb:4b:db:7a:fe:5c:
                    f6:6e:53:ad:65:56:df:38:08:e9:63:0a:fc:41:c5:
                    8a:b1:c2:4b:58:0e:1d:62:ae:59:7b:56:b9:8e:9d:
                    70:25:9d:10:68:1d:4c:c2:e2:0c:88:59:d7:91:81:
                    5c:fe:29:ef:54:28:9b:b3:13:3c:54:a0:a5:35:d7:
                    c5:ed:70:7a:1d:50:7e:f8:94:20:6e:5a:b5:fc:48:
                    eb:fe:40:35:95:ae:01:23:bb:78:e0:bf:7d:10:ed:
                    83:a5:0d:e5:cf:30:b7:e0:18:46:5e:3f:b6:90:4f:
                    be:ad:57:07:38:95:81:5d:19:10:da:de:0e:21:bb:
                    59:54:67:87:d6:8f:97:5c:7d:25:ba:44:fe:d4:28:
                    ef:b2:2c:60:ce:64:eb:e7:62:ed:30:e2:c7:72:8f:
                    dd:18:f6:e8:ce:50:2e:9d:52:75:36:72:1a:87:ce:
                    71:02:f8:db:ae:1e:c1:03:9c:89:98:79:62:40:89:
                    82:d9:24:a8:7c:a7:15:22:8c:da:54:c6:59:28:d6:
                    4f:52:5b:89:49:7e:d2:ce:8c:3a:30:2f:a0:07:d7:
                    cd:f2:30:73:d3:da:9f:ce:01:9e:e8:6e:10:b6:2d:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:02:EF:E1:D8:E6:AA:EA:BA:B9:CD:6D:9E:84:80:46:6F:20:F6:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/34c260ec-a79c-314d-b0b5-91a125d5fea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl

            X509v3 Authority Key Identifier:
                keyid:73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7b:f8:3f:0f:56:be:00:ab:f9:92:d5:d8:2d:dc:02:5a:4e:
         84:de:47:bf:24:c2:79:a4:a2:e8:bc:d6:89:f9:17:6d:be:44:
         4c:79:61:d6:0e:8b:15:7e:fe:0d:dc:8a:1c:6e:1e:f6:7f:e1:
         8d:24:ee:21:68:f4:dd:a9:fe:0f:43:bb:7e:e5:9d:f5:a7:80:
         01:80:35:8b:98:41:14:f8:33:fd:b6:76:a8:d8:e8:2b:10:8d:
         09:94:51:2f:56:9b:2a:b0:4a:49:6a:4e:69:58:04:94:06:f1:
         1f:4b:6f:00:ec:c9:26:7c:bd:f4:5e:86:e0:70:b9:21:71:54:
         7d:27:af:8d:50:da:25:c4:50:46:51:24:93:68:8b:94:63:87:
         23:a6:6e:1a:45:02:a7:59:36:ac:8a:06:8f:98:de:d8:6c:ed:
         a7:4e:f1:07:68:7e:94:9e:ee:0d:89:57:9b:96:13:3e:3d:60:
         cb:b3:53:96:ab:3c:6a:ef:51:8c:f0:48:3a:fa:4d:f9:d6:1d:
         d0:65:f6:8f:b7:33:8d:9f:47:87:88:c3:10:f2:52:c5:3f:3a:
         26:44:8a:e7:fc:ea:7a:31:33:dc:8f:ac:95:0f:be:d0:a2:53:
         07:54:1a:7a:1e:8d:8c:75:cf:77:75:c7:46:82:d1:31:aa:56:
         20:df:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:29 2025 by rpki-client