Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa
File:                     612ea9aa-fef5-3461-89b7-4f93773ef913.roa (raw, json)
Hash identifier:          JAH51mv49MvSLe71tnUhnP/nS3A6nDI00QlJl+vP8iA=
Subject key identifier:   80:AA:01:18:3F:46:85:46:FB:55:4A:18:3B:34:E0:46:41:F5:73:1F
Certificate issuer:       /CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
Certificate serial:       010D0C9F4328584B1F017D03BFC12C60608A2540
Authority key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     10103
IP address blocks:        23.187.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:7d:03:bf:c1:2c:60:60:8a:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=c333fe74-06a2-4ddc-a423-1a435eb1fd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:a0:60:bf:39:d7:ff:9c:d3:a3:4d:b1:23:
                    5d:59:c7:81:1d:a4:77:a5:a2:d0:3f:86:02:7c:4f:
                    7a:1e:8c:82:2b:dd:de:9c:40:48:ce:73:1b:c9:34:
                    0f:cb:22:e2:4d:c9:d9:23:de:d1:b8:06:a9:76:95:
                    cf:65:97:83:18:7d:ec:da:36:1b:13:6a:4c:dc:16:
                    4f:ea:6d:5e:2e:af:c4:71:14:d6:24:35:ec:b3:bd:
                    50:fa:40:57:86:90:57:8f:84:ae:87:c5:ce:c5:7b:
                    4f:2c:0a:18:3c:13:6a:30:d3:7b:85:70:27:08:e7:
                    de:85:b5:7c:71:68:3c:d7:f7:af:ed:ed:7b:68:21:
                    34:2e:ab:03:df:68:3e:d6:db:14:6d:b0:97:18:4b:
                    e0:83:32:dd:62:dd:20:24:7e:b4:5f:a5:26:0d:42:
                    6a:50:c4:26:f6:84:72:ee:51:db:92:20:00:02:25:
                    af:fc:96:66:07:34:b7:89:11:b8:be:b5:40:eb:8b:
                    64:a3:64:53:44:f5:95:9a:a3:c9:22:10:14:67:2c:
                    56:72:88:6b:8f:2c:af:1a:b2:75:07:65:32:0a:17:
                    f2:e9:3d:b9:dc:5a:c7:2a:c8:23:8f:98:ef:42:1c:
                    53:2a:2a:a7:01:c7:ba:d6:55:f7:11:bc:e3:1a:5d:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AA:01:18:3F:46:85:46:FB:55:4A:18:3B:34:E0:46:41:F5:73:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:80:d5:f3:40:e4:9a:11:ef:bd:5f:7b:d1:8b:bb:3d:26:dc:
         ed:85:63:3e:c5:fa:29:bf:38:fa:aa:d3:86:3a:85:f1:f3:28:
         37:65:fd:7b:c8:d4:8f:b0:dc:35:7b:56:c9:45:bc:98:29:d2:
         19:a1:06:21:2a:6c:3d:b8:4e:c7:12:13:29:30:2f:4d:c5:83:
         f9:83:c3:cb:35:51:ed:f3:1b:1c:ad:39:f1:22:74:87:28:91:
         bc:b9:7e:3a:57:4e:09:27:d8:55:3a:76:8c:f4:7f:93:27:16:
         53:d5:9f:76:90:09:7c:e5:31:a2:9d:ff:d9:4b:85:30:a5:56:
         c8:83:74:7b:35:28:85:db:fa:64:07:bd:46:ff:85:41:73:c2:
         1b:3e:b7:37:72:6f:f4:b6:11:d5:cf:aa:48:3d:a1:91:3c:77:
         7b:ca:1d:ac:bd:cf:1b:2e:ac:f4:04:c8:e2:3f:ca:08:c7:ca:
         2d:9a:d2:58:f5:51:49:77:14:86:dc:2d:87:6a:5f:fc:fb:f5:
         14:36:8c:bb:db:17:75:51:46:a3:3c:49:97:52:67:3e:c4:0d:
         3b:a8:52:26:99:b6:13:bd:68:8a:c8:b5:27:a7:6e:f9:b0:32:
         ec:19:7d:b7:f4:3f:1d:7d:84:03:9a:61:9f:49:6c:23:51:f4:
         35:1a:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 06:21:51 2025 by rpki-client