Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69fe93c8-31c9-3699-9fd5-0fc1dcfba7cd.roa
File:                     69fe93c8-31c9-3699-9fd5-0fc1dcfba7cd.roa (raw, json)
Hash identifier:          cmfPTvHcdSy1Jb9W5cfd9IFZGab7kSlRjIBOLvTT29Y=
Subject key identifier:   E6:3C:55:A6:90:A2:ED:11:E1:8C:A3:55:D7:B6:0C:54:38:9B:FA:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2E5C4DA85F9F9BF35AFAD380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69fe93c8-31c9-3699-9fd5-0fc1dcfba7cd.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     24309
IP address blocks:        23.62.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:4d:a8:5f:9f:9b:f3:5a:fa:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=90c0a958-5dab-467d-99ff-cd96192c12ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3c:3d:c4:5b:59:93:67:39:ff:3b:18:f4:8c:
                    df:73:bd:c5:dd:bf:b0:0a:b4:36:43:e0:7a:79:b9:
                    a5:96:a7:40:a8:4d:ef:32:36:a1:5c:48:3c:5a:97:
                    4b:46:a2:fd:0b:95:19:21:5b:6c:d9:56:d9:25:61:
                    35:01:31:0f:3c:4e:8f:a8:34:f5:0e:ac:99:ce:35:
                    03:3d:eb:d8:72:24:e4:f0:ee:97:17:db:54:c1:5e:
                    7c:cf:06:1d:18:41:76:44:13:b6:82:b8:1f:40:9f:
                    49:d2:32:b4:63:8f:fe:e7:7c:7c:13:4c:e6:64:c8:
                    e5:42:61:b6:19:9f:27:3f:1c:d3:16:e5:4d:b0:8e:
                    cc:64:42:30:dc:99:2d:5b:de:9d:81:f7:bf:1a:c6:
                    45:79:ec:da:72:ae:2a:ce:3f:a6:73:d7:14:7d:15:
                    21:b1:9b:d7:51:0d:34:d4:8a:a1:cc:11:c5:30:5c:
                    84:fa:74:9a:d9:3e:e5:f3:a5:76:56:6d:90:17:34:
                    dc:98:4f:53:f4:b8:a4:cc:53:46:69:d9:bd:31:32:
                    8c:71:f5:b1:37:fc:c1:8f:a0:bc:a4:28:2e:c8:83:
                    46:cb:d6:d8:ed:9d:94:52:fd:d9:59:95:57:34:c3:
                    71:0f:dc:ef:aa:98:7f:0e:6c:28:2c:13:c0:59:73:
                    ec:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:55:A6:90:A2:ED:11:E1:8C:A3:55:D7:B6:0C:54:38:9B:FA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69fe93c8-31c9-3699-9fd5-0fc1dcfba7cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:4f:30:68:aa:2d:13:b6:ae:98:5c:98:be:de:f0:ca:fb:
         3f:95:d7:26:87:99:43:63:f0:67:30:98:c2:dc:5e:86:48:e4:
         ea:b0:c7:99:6c:40:17:c5:46:df:ef:90:da:8f:37:c1:24:30:
         3b:d5:ac:0c:9a:b9:85:5d:8a:c6:51:e8:e6:fa:33:55:6d:ff:
         78:f5:77:d0:9b:62:19:f6:4e:44:51:8e:c3:c6:9d:8a:17:5b:
         70:c5:0c:c5:9b:76:c3:bc:6f:8a:7a:08:d1:8c:57:86:fb:78:
         39:d1:d1:fe:05:7e:b2:de:6f:88:40:27:a7:7c:25:be:eb:db:
         bc:59:31:7f:6d:6b:c2:3b:d4:82:bf:61:6c:1b:72:85:0e:81:
         e6:ab:9e:ba:ef:3e:e6:25:49:dc:8b:ed:02:11:f0:4f:01:9f:
         d0:ef:95:10:f3:27:01:13:a3:a3:8f:2e:78:13:bd:44:19:53:
         ff:78:97:cb:d8:4e:75:01:15:df:67:85:5d:57:fc:11:9c:eb:
         9a:dd:e9:53:60:47:7b:22:3e:d1:85:fe:56:c1:56:07:5c:1d:
         a0:f4:b8:1b:9a:e2:d0:35:d8:62:35:f8:64:0d:fc:bd:b6:da:
         98:07:65:cd:95:20:be:54:4c:7b:78:96:e1:ba:c7:ba:aa:e0:
         b4:e5:8c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 04:08:22 2025 by rpki-client