Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa
File:                     fda8929c-8853-3deb-9937-6ac2a4d97c46.roa (raw, json)
Hash identifier:          d0q1IQGIJJ+u0hVsVxzD3wWWqwn4IS0kJFiz9lrdINQ=
Subject key identifier:   DC:7E:4B:13:0D:7A:B2:47:46:E8:32:93:93:23:13:57:8A:DC:3B:08
Certificate issuer:       /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea
Certificate serial:       010D0C9F4328584B0CDC124B0F9D78F152C95500
Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     198487
IP address blocks:        23.156.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:12:4b:0f:9d:78:f1:52:c9:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=3878ea78-eda5-4ccd-af13-a72a50fb1c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:fe:66:10:8e:49:a1:10:64:6b:e1:83:27:
                    62:51:3a:fb:96:3d:50:30:f9:ac:14:f6:20:8d:35:
                    dd:3b:d7:92:83:1b:03:c1:1f:9b:09:15:7b:1c:a0:
                    a3:77:29:2d:4f:47:75:f1:5d:da:f1:21:ce:95:28:
                    b5:e3:c7:1d:d2:4b:bd:db:b6:86:74:a0:e1:bb:cf:
                    c3:2e:fb:3a:6d:a6:88:3d:2b:43:f4:eb:e2:35:7e:
                    64:89:00:47:3b:56:82:41:38:c2:d5:93:10:34:bc:
                    74:79:89:cd:2d:54:a4:0c:71:1c:10:d8:af:be:80:
                    af:66:39:92:28:bf:24:63:85:42:37:26:51:7d:45:
                    0e:cd:77:cf:9c:ce:ed:9a:a7:83:6a:ae:29:98:24:
                    3d:ec:b8:4e:bc:8e:18:dc:90:45:90:f7:92:f9:1c:
                    1b:9d:f5:a5:38:7c:80:d4:89:05:bd:c0:f1:74:77:
                    c6:8f:cf:49:fb:6a:94:12:4f:a1:d6:25:73:31:71:
                    80:04:95:f1:5f:97:9b:d9:5b:a3:a6:1f:c4:a4:01:
                    29:8e:30:84:5a:54:a1:8a:d1:11:c0:ac:45:68:08:
                    01:94:eb:7b:b7:3b:a1:90:ee:e4:98:04:70:e2:82:
                    5e:aa:96:de:57:24:8d:25:80:14:38:ca:fd:a3:46:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7E:4B:13:0D:7A:B2:47:46:E8:32:93:93:23:13:57:8A:DC:3B:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl

            X509v3 Authority Key Identifier:
                keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:61:e0:94:23:2f:50:2e:dc:af:8e:9e:ea:b4:57:75:59:
         c8:89:b1:cc:e8:21:c9:df:a0:79:40:d3:df:13:a4:a0:48:64:
         05:7b:1d:d1:68:da:05:c5:c1:d1:83:5b:b9:cb:cd:69:2d:d3:
         1b:c6:e8:7f:3e:81:4e:23:54:13:7b:8b:9a:c5:f7:21:0d:46:
         93:f9:d8:c5:63:8d:c9:87:af:53:4b:2f:bf:57:c4:9c:34:a7:
         b1:f6:dd:c4:98:81:5e:72:81:1f:68:51:7a:0b:e2:4a:3f:20:
         a9:c8:9c:1e:a8:aa:d0:cd:99:a5:73:f0:4e:01:54:50:67:02:
         cc:02:e3:c3:1c:85:0a:3d:09:65:07:cf:d9:8a:c7:86:71:be:
         e3:c2:4b:cb:7b:07:ed:7b:65:ee:a5:5d:1f:f0:5b:68:5b:04:
         2d:7f:a8:ff:28:96:a8:ad:25:ac:de:cf:06:30:21:e0:7a:78:
         df:43:ad:fb:b6:23:b0:9f:28:de:3c:5b:86:ec:b9:f2:6b:4f:
         71:bc:85:26:2c:0d:1d:38:75:c4:12:33:80:d7:2e:87:90:4d:
         c2:65:96:8a:db:d1:7a:b0:ef:3d:ec:99:56:03:f5:01:23:e9:
         e9:10:49:3d:ae:73:2d:d3:04:43:cc:37:b4:f3:9d:e7:92:93:
         9d:3d:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:46:04 2025 by rpki-client