Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa
File:                     c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa (raw, json)
Hash identifier:          p4BwiW7lNbk5tiNqqKuK3f54Z/Mi7rrPspbv2lrPpcQ=
Subject key identifier:   35:4F:26:00:FE:0D:0B:C1:7C:D4:0D:42:D3:C6:96:7A:C7:FC:24:70
Certificate issuer:       /CN=6d944863-bb4b-4403-99d8-bdd9488dc28b
Certificate serial:       010D0C9F4328584B1806E106A0AC9FAEDE1DDC00
Authority key identifier: D8:C6:D8:E7:FB:B9:CD:70:02:7B:7B:3E:6A:DA:A5:DA:3E:65:8C:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     8796
IP address blocks:        23.165.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/6d944863-bb4b-4403-99d8-bdd9488dc28b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/6d944863-bb4b-4403-99d8-bdd9488dc28b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e1:06:a0:ac:9f:ae:de:1d:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d944863-bb4b-4403-99d8-bdd9488dc28b
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=264defb7-8e93-4379-be21-b2e6a817843e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4c:76:62:19:ac:ea:c8:86:d2:05:b3:43:04:
                    20:df:96:20:ad:0c:57:04:a9:65:c3:76:9b:a1:ca:
                    6d:2c:13:fe:05:15:be:bd:78:87:5f:05:84:74:9d:
                    69:95:a8:20:eb:c6:9a:15:81:5b:c8:5a:29:fd:20:
                    b2:c4:a6:35:6c:ea:7a:81:69:41:f2:71:76:71:fb:
                    73:5d:85:a1:d6:9b:1f:5c:3c:41:19:8e:1e:07:6f:
                    ee:63:2f:34:1d:58:00:75:ab:3a:a8:58:8d:a8:57:
                    37:da:06:67:d1:45:de:33:dc:29:b1:ac:a8:e2:33:
                    03:43:23:fa:19:41:f5:14:78:ea:d2:94:45:1e:3a:
                    fd:0e:c2:1a:71:05:fa:a8:da:88:67:bd:c4:49:8b:
                    e1:bf:0a:69:43:01:e7:7f:88:8d:9d:ac:b7:48:b3:
                    78:e6:29:06:60:6a:3e:e1:56:9a:26:3a:26:9f:97:
                    09:12:bb:92:7a:db:51:db:d5:f5:1a:e9:f1:f3:4d:
                    7f:50:e6:49:9d:40:99:a7:25:52:38:f6:6e:00:29:
                    2c:fe:d8:8b:9b:27:33:7b:12:5a:65:ab:67:c7:9f:
                    2c:fa:83:8f:aa:b3:eb:d5:90:57:c4:01:55:63:09:
                    14:e2:f1:2a:13:53:c9:39:b9:45:b6:83:4d:7d:48:
                    25:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4F:26:00:FE:0D:0B:C1:7C:D4:0D:42:D3:C6:96:7A:C7:FC:24:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/6d944863-bb4b-4403-99d8-bdd9488dc28b.crl

            X509v3 Authority Key Identifier:
                keyid:D8:C6:D8:E7:FB:B9:CD:70:02:7B:7B:3E:6A:DA:A5:DA:3E:65:8C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:0b:8f:65:1f:80:6b:21:2f:ff:92:99:d3:97:23:79:86:
         b8:ed:e0:40:b5:79:08:f3:47:cc:b1:9c:d3:44:c1:b9:4b:d1:
         56:32:ea:52:2c:9f:4d:f2:1c:2a:f8:03:d0:dd:71:54:df:76:
         f1:d1:61:fa:6c:d5:50:2e:b4:d4:ef:91:23:00:fc:1f:9c:69:
         69:00:65:b5:db:2c:a3:aa:62:50:ed:e0:fb:07:ed:a8:8e:1c:
         a5:8b:be:41:06:b1:ea:15:19:70:74:18:cc:64:52:87:92:d5:
         ec:bb:cd:1e:6e:02:02:6a:b3:cf:1d:1e:c8:45:04:dc:8c:26:
         bf:79:02:32:3d:40:31:b7:43:e7:c0:8a:30:75:ee:7c:5d:5a:
         6d:99:48:4d:ed:19:da:9e:7e:f7:c1:25:ab:b4:05:89:d7:3b:
         bd:cf:88:49:bb:7c:3d:25:87:92:47:2c:b8:a3:47:ab:07:cd:
         35:c8:bc:fe:df:ea:97:59:50:7e:c0:c4:f6:9f:c2:ce:64:a3:
         04:8f:34:50:07:c0:80:8f:36:85:4f:79:e9:2a:ff:25:01:24:
         85:14:ef:0b:ef:84:ab:9d:96:52:56:09:bc:21:c2:7d:fd:0b:
         d5:15:2e:e5:b5:be:c1:a7:2c:80:ed:9f:ea:d7:f9:cf:e3:1d:
         66:ca:3d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:57:10 2025 by rpki-client