Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/1115af12-e674-31e5-aa88-1355ab385692.roa
File:                     1115af12-e674-31e5-aa88-1355ab385692.roa (raw, json)
Hash identifier:          jmrGvgE1138+rFBiiK8J1g5++Ymo1YI7Rbvo2XzTFJs=
Subject key identifier:   7B:C9:D6:23:17:23:0F:3E:19:6C:A8:EB:CC:34:41:8D:56:B0:18:64
Certificate issuer:       /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial:       010D0C9F4328584B99D37EE750128779A3E22F00
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/1115af12-e674-31e5-aa88-1355ab385692.roa
Signing time:             Wed 22 Oct 2025 00:52:31 +0000
ROA not before:           Wed 22 Oct 2025 00:52:31 +0000
ROA not after:            Tue 20 Jan 2026 01:52:31 +0000
asID:                     401443
IP address blocks:        23.175.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d3:7e:e7:50:12:87:79:a3:e2:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
        Validity
            Not Before: Oct 22 00:52:31 2025 GMT
            Not After : Jan 20 01:52:31 2026 GMT
        Subject: CN=a59c6907-f3ba-4fae-ae65-b0a804046769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:60:5f:39:e6:46:c2:07:7e:4d:92:61:99:aa:
                    f3:65:d3:01:0d:ec:a8:99:1a:f9:28:14:39:6b:5a:
                    f5:67:97:0a:9d:5b:96:0e:a0:68:cd:57:94:f1:33:
                    46:ec:63:e2:b6:20:c7:a0:97:f6:f1:ec:cb:a9:4e:
                    18:8b:75:84:7a:78:50:6e:a6:3e:6f:88:39:c3:c5:
                    94:f8:44:8a:63:c3:28:dc:90:22:d1:65:09:4e:8a:
                    2c:03:9f:2f:b9:f5:53:72:79:2c:d5:0e:0d:1a:43:
                    a4:41:35:1b:6c:04:c8:12:1d:42:da:92:19:d6:69:
                    ab:40:ea:6b:09:29:79:4e:6c:df:77:12:a8:a8:29:
                    32:b2:d8:0d:39:a3:dd:f1:28:61:12:8b:1a:61:eb:
                    51:0a:1d:2f:20:0b:20:3d:12:32:9e:36:c9:4f:57:
                    e5:6b:42:9e:c0:3d:45:2d:ac:21:7e:52:99:b0:3f:
                    d9:0f:3f:f3:3c:f3:d2:f9:d5:ee:bb:9a:33:ee:4d:
                    6c:57:e3:f2:ba:51:2c:cb:58:4a:e2:03:28:1f:ce:
                    a9:8a:b3:1e:43:6e:20:83:f6:c3:de:a6:0a:1a:89:
                    e0:29:28:68:17:f3:04:5e:53:98:39:4e:ac:c7:ce:
                    5f:da:be:a3:9a:3a:97:f7:d9:8f:89:3c:73:f9:22:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C9:D6:23:17:23:0F:3E:19:6C:A8:EB:CC:34:41:8D:56:B0:18:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/1115af12-e674-31e5-aa88-1355ab385692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl

            X509v3 Authority Key Identifier:
                keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:66:41:c2:d5:39:d7:b4:a3:fe:53:b7:1f:00:f8:5a:67:b8:
         47:9c:22:39:c3:88:bf:5a:3a:df:36:d5:c9:8a:ec:8e:9e:69:
         81:66:96:66:ca:c2:06:4b:60:c2:a3:60:9c:82:e5:3f:8a:cc:
         0c:fa:a1:54:09:d3:42:9b:03:86:99:27:dd:89:ef:b6:e9:ae:
         88:10:7b:99:26:9e:28:de:6e:36:c2:49:a9:f4:9a:c7:e7:03:
         eb:b7:e4:5f:48:1e:42:1b:70:20:f3:b0:9a:26:b5:f7:bf:50:
         b1:5e:dd:33:f2:1f:a4:eb:ba:13:e8:11:b1:ba:fa:9a:f4:a8:
         9b:db:90:07:e4:d9:a2:8c:61:ea:37:cd:09:91:11:9d:c3:b4:
         41:04:26:67:70:5f:b1:71:f5:e2:d1:07:43:50:5f:a8:3b:f9:
         5d:0a:53:35:16:9a:19:16:c8:55:fd:bd:6b:c4:fe:d9:f5:72:
         02:69:2b:67:dd:5c:bc:3c:71:27:61:f9:7a:78:94:a2:e5:7d:
         b6:c5:65:70:32:57:00:2c:dd:e5:aa:13:bf:a2:74:fb:a2:03:
         6b:bd:0c:a7:95:03:7d:8d:b3:d6:ad:f5:1f:a3:a4:93:53:37:
         f9:44:53:db:ba:f4:ee:be:b6:ba:d7:29:5a:ed:e8:07:15:3f:
         1f:0c:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 00:19:51 2025 by rpki-client