Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/909c57ca-1673-3501-8057-61ea309b4109.roa
File:                     909c57ca-1673-3501-8057-61ea309b4109.roa (raw, json)
Hash identifier:          xxk7oEfhmsL11saXxQ27Hz5jyK94XGd0HIbxQn1wNrU=
Subject key identifier:   3F:28:0E:7E:85:39:35:23:61:70:D3:B9:BD:0B:9C:9D:09:44:04:7A
Certificate issuer:       /CN=9539fe98-d93c-4eef-8521-e7da1838ec1e
Certificate serial:       010D0C9F4328584BBCBE084F64491EDFBDB09180
Authority key identifier: 30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/909c57ca-1673-3501-8057-61ea309b4109.roa
Signing time:             Mon 03 Nov 2025 13:02:34 +0000
ROA not before:           Mon 03 Nov 2025 13:02:34 +0000
ROA not after:            Sun 01 Feb 2026 13:02:34 +0000
asID:                     8095
IP address blocks:        23.178.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bc:be:08:4f:64:49:1e:df:bd:b0:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9539fe98-d93c-4eef-8521-e7da1838ec1e
        Validity
            Not Before: Nov  3 13:02:34 2025 GMT
            Not After : Feb  1 13:02:34 2026 GMT
        Subject: CN=8155fa0b-a963-483e-b191-f8fe2a543f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:4f:1a:7a:75:57:56:9b:d8:3f:95:2b:c9:
                    a2:0f:97:b7:85:57:cf:2e:17:2c:7c:87:17:96:a1:
                    25:c0:40:98:8a:b1:e4:b9:2a:23:8e:80:d4:d7:d1:
                    5f:5c:16:6c:62:a3:95:ab:1b:75:49:e3:27:f8:ae:
                    ac:d8:38:15:2f:da:df:68:8d:5b:f0:d9:34:a0:13:
                    d7:26:60:f5:8c:e8:ab:83:3d:13:df:18:6a:e7:e6:
                    41:b2:59:4c:58:a7:46:66:69:3d:01:89:e0:97:2f:
                    ee:c2:d6:99:98:9e:b2:16:85:c4:1a:00:f2:3f:04:
                    82:56:79:5e:4c:87:38:44:dd:20:ea:01:41:bb:5a:
                    5a:03:f8:bd:93:70:3a:c5:64:6c:f2:ab:96:92:68:
                    35:e0:65:7b:a8:eb:29:35:21:45:31:af:b7:70:21:
                    6e:e9:24:8f:72:6f:08:dc:4e:d2:c0:a7:77:98:d8:
                    c2:2b:fc:13:c3:84:e2:00:1d:2c:4d:b9:57:41:ce:
                    42:50:3f:7c:89:5f:ed:33:2d:36:9c:ad:5d:16:03:
                    fc:ea:b5:78:47:eb:65:73:61:b1:b3:b9:9e:08:cd:
                    94:98:02:46:4f:de:5d:38:f4:37:93:3a:91:7a:27:
                    0b:ae:7a:a4:c2:ff:e5:fc:04:34:c7:81:2f:8d:45:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:28:0E:7E:85:39:35:23:61:70:D3:B9:BD:0B:9C:9D:09:44:04:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/909c57ca-1673-3501-8057-61ea309b4109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.crl

            X509v3 Authority Key Identifier:
                keyid:30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5b:72:0c:00:76:21:b6:c2:55:a4:14:c4:3e:10:98:c5:3e:
         94:f6:81:a8:88:5c:db:35:ef:fb:ec:39:10:22:ef:ea:84:ff:
         43:2e:ac:03:1d:8d:f6:73:65:64:15:b6:f3:08:54:cb:6d:ab:
         20:bf:ec:f3:71:fb:e2:96:70:b7:41:4b:4c:33:16:bd:37:fe:
         4c:a4:5d:fd:ca:86:77:f5:62:d4:f4:de:a5:8b:79:39:94:fe:
         4b:04:91:6a:3c:89:ab:06:48:5c:b4:32:29:39:aa:bd:3d:37:
         e5:51:90:73:a4:85:04:47:0a:c7:32:96:4b:19:2c:78:35:11:
         a8:8c:61:b7:83:d9:a0:ad:7c:cc:b0:c4:53:4b:72:d2:be:5e:
         c0:75:fa:04:01:23:a2:c6:78:80:c3:b7:f7:b8:4a:8c:41:0f:
         db:99:70:a9:d4:6d:40:93:32:48:20:f8:d2:c8:6f:84:ee:29:
         96:c8:d1:8e:fd:65:6a:6c:ce:90:ab:92:6e:bd:9f:8d:c0:13:
         b7:0b:97:c0:f1:2b:a2:b5:b6:52:c3:79:31:ff:67:18:fd:92:
         c5:0f:95:fb:34:13:dc:43:57:f4:f8:02:68:e3:74:ba:fd:ed:
         80:ab:5f:5c:ba:c3:b4:ac:36:d3:bd:11:69:e3:60:f8:6b:9d:
         d6:75:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 03:44:45 2025 by rpki-client