Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa
File:                     a5083115-9d64-38b2-a390-44d44072b1bf.roa (raw, json)
Hash identifier:          pGQDojVkfST4UZ/rXsbtuvSezfc8KJsMaNsLGPpkBlo=
Subject key identifier:   FF:CD:6D:D1:F3:C0:F2:6B:73:58:CF:4D:04:C5:DC:E7:DD:BE:02:3F
Certificate issuer:       /CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
Certificate serial:       010D0C9F4328584B0FA6B9AFDC2396E943968940
Authority key identifier: D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     399861
IP address blocks:        23.191.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:b9:af:dc:23:96:e9:43:96:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=e661a6fa-837e-4b36-819f-da89c72bfdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:3f:ca:bf:af:51:2a:ea:e0:f7:99:10:70:
                    2a:86:18:b9:40:32:d9:9c:b0:43:89:d5:a9:37:dc:
                    56:fa:d6:68:06:2a:c6:bc:61:cc:0a:1f:2b:74:d5:
                    6c:dc:66:97:34:e3:3f:f6:6d:1f:52:8d:bb:15:9a:
                    2f:6a:eb:3d:ca:a6:e3:c0:30:23:67:29:7e:3c:16:
                    ac:43:90:8e:b0:bb:98:5a:c3:f0:16:ad:46:ee:5a:
                    f5:0a:01:c4:85:73:0f:9c:8f:91:15:f7:6d:f4:f7:
                    6f:7b:bc:4c:53:6b:52:03:f3:d9:9d:38:f8:79:fc:
                    85:6c:8d:6d:a2:fe:09:e5:15:26:c7:24:61:b5:58:
                    d7:73:d7:98:9f:59:0e:06:5e:66:70:b1:26:16:fa:
                    39:50:cc:9a:09:ce:9f:77:a5:1a:e2:b7:56:e1:9e:
                    48:fd:ad:aa:a2:18:4d:2d:59:d8:1d:a7:38:1d:ac:
                    76:fb:84:b9:27:2c:6f:06:fd:e3:85:b1:d6:75:7b:
                    af:5b:3b:0e:44:0b:e3:99:bb:11:7c:00:3e:c8:68:
                    8d:7a:cb:aa:fc:97:d8:30:ba:f8:91:6c:c0:a8:07:
                    c4:34:c5:f7:27:75:a8:94:5b:64:0c:2d:36:3b:2e:
                    a2:eb:a7:c6:20:32:1c:4b:e1:1a:1a:6c:57:0d:6f:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CD:6D:D1:F3:C0:F2:6B:73:58:CF:4D:04:C5:DC:E7:DD:BE:02:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:01:01:9c:d1:e2:28:1b:79:36:3b:78:79:9f:b1:dd:5c:
         33:5a:05:73:80:1a:85:f9:ed:f0:70:d0:08:bf:b3:c6:ef:2b:
         1b:44:c0:ef:0b:ee:a6:f6:ef:05:f3:d8:31:48:16:4a:89:c4:
         c4:bb:13:73:e4:27:31:56:40:47:60:83:da:dc:db:53:e6:51:
         d7:4b:1e:79:de:9b:28:e4:4d:69:d0:c8:78:1b:d8:14:f1:c4:
         fa:ea:e9:d6:27:67:7a:81:e6:c9:77:c4:dd:73:f9:17:a0:00:
         68:07:19:72:48:5d:82:e8:93:53:4d:a5:d7:58:0d:9c:18:c5:
         cd:d2:8e:21:0c:6b:c8:62:09:05:14:ff:78:6f:5f:c3:ee:82:
         f4:e5:89:8f:ee:74:08:80:88:99:e5:67:c8:7d:8e:cf:bd:d2:
         bc:43:93:c2:96:e2:f8:a7:67:d8:46:4c:a0:47:34:a8:c0:66:
         67:a6:df:bc:d3:f3:48:a0:76:9c:a4:81:01:7e:e4:ed:72:89:
         1e:93:65:96:2f:dd:de:c1:4f:19:e0:2f:66:e1:69:aa:f3:c3:
         50:28:4a:33:fa:3e:da:0a:02:22:42:f5:b3:10:5d:22:9a:bc:
         28:60:a2:06:15:ef:ce:f9:f2:88:45:8d:78:f4:0b:e5:5f:3a:
         7d:aa:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 04:38:03 2025 by rpki-client