Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/deee81d6-11da-3c28-bb95-d345b9d843bd.roa
File:                     deee81d6-11da-3c28-bb95-d345b9d843bd.roa (raw, json)
Hash identifier:          TG8ruS65Yt+3fA2Ys+sSo5Baemf4uew4Pyx1sstI/LI=
Subject key identifier:   75:18:33:7A:B0:65:7E:7F:D4:4C:53:A4:30:78:CC:A8:E3:AD:2A:42
Certificate issuer:       /CN=55b99675-96ed-4747-a93e-2c02e6c365da
Certificate serial:       010D0C9F4328584BA667A666129A200A24FA0E80
Authority key identifier: 87:6D:C8:57:26:48:90:8E:07:74:3C:AB:3A:95:1A:6F:F0:CF:73:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/deee81d6-11da-3c28-bb95-d345b9d843bd.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     46980
IP address blocks:        23.163.16.0/24 maxlen: 24
                          2602:fd20::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/55b99675-96ed-4747-a93e-2c02e6c365da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/55b99675-96ed-4747-a93e-2c02e6c365da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:a6:66:12:9a:20:0a:24:fa:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b99675-96ed-4747-a93e-2c02e6c365da
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=3cc8279c-aca2-4d8d-9537-cbfddf7b1c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:d5:48:62:04:fb:cc:cd:89:99:66:92:23:
                    40:5b:88:d4:df:d2:be:ab:f3:54:6d:6d:e2:44:1c:
                    c7:c6:d3:50:b2:77:8b:55:76:5d:77:f3:db:a5:b8:
                    2d:93:29:a3:aa:1d:1f:14:08:1f:56:15:a2:8c:36:
                    6d:ca:4b:da:1c:50:0a:20:44:ed:91:9c:c8:0d:4f:
                    2c:ec:b5:e4:a9:8d:33:8a:c8:8b:57:96:7f:b0:70:
                    c8:9d:32:b1:a1:d6:66:c5:58:da:62:33:fc:56:9b:
                    20:42:fd:e8:2a:e7:6f:65:40:f3:06:f9:84:ce:1e:
                    ef:4b:9b:d4:26:5a:ac:a4:d7:a1:f9:d1:25:18:5b:
                    aa:b6:1c:a5:7c:ab:78:f3:5a:aa:f8:48:0f:6c:fd:
                    c9:d3:0c:50:34:85:3e:b4:8b:a6:d9:79:39:d6:0f:
                    89:2f:4b:86:de:0f:44:ed:4a:76:63:f6:b7:c7:80:
                    63:9c:14:40:b0:e8:4d:7f:c8:2e:a7:e5:b9:84:74:
                    7d:a1:3a:47:6f:1a:d5:43:09:a7:4b:ee:e4:58:4c:
                    03:75:f1:a6:41:d9:a2:d7:fa:02:4d:be:69:dd:5f:
                    a3:86:31:f3:de:49:99:27:e5:21:91:77:47:fa:c2:
                    3c:78:f6:aa:04:e7:47:c3:37:69:9a:74:a5:e4:b3:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:18:33:7A:B0:65:7E:7F:D4:4C:53:A4:30:78:CC:A8:E3:AD:2A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/deee81d6-11da-3c28-bb95-d345b9d843bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/55b99675-96ed-4747-a93e-2c02e6c365da.crl

            X509v3 Authority Key Identifier:
                keyid:87:6D:C8:57:26:48:90:8E:07:74:3C:AB:3A:95:1A:6F:F0:CF:73:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.16.0/24
                IPv6:
                  2602:fd20::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:30:7f:09:44:3e:57:df:7d:0e:d1:01:3f:c2:bb:d2:4f:5d:
         0f:1a:e6:88:f4:a9:d0:0f:52:c7:73:4c:89:6b:f4:ce:c4:42:
         cc:00:52:27:2b:c0:08:b7:20:b5:86:65:19:b2:fc:d6:69:0e:
         8b:e0:96:ea:1e:5c:b0:bb:fc:0e:2a:7c:b7:c1:e7:0a:f3:d0:
         d7:e2:d6:e5:d9:6c:fb:9a:10:f9:ac:89:73:5e:eb:b9:67:47:
         58:4e:96:b5:e0:51:c9:82:d6:b9:d9:75:42:f8:6f:d5:55:af:
         ef:74:cf:4d:cd:21:cb:17:a6:2d:6f:89:ac:e3:d4:d2:7b:71:
         1b:25:14:c7:52:36:5c:b7:25:69:1a:df:f8:cf:c7:55:52:27:
         b3:6e:7e:96:8f:d2:9f:78:31:3e:17:08:a8:57:f9:62:e5:81:
         36:9a:d9:c8:de:42:17:d1:de:31:08:37:cb:bc:4e:0a:38:22:
         39:10:af:8f:7f:86:7c:cb:3d:e3:55:5e:f0:d2:d1:3c:d2:ee:
         93:10:b3:24:fa:26:e4:5c:20:7c:46:8d:b8:55:9e:a9:86:c0:
         3d:db:bb:2c:3d:a5:26:e6:62:b3:25:0f:f5:b9:ae:aa:85:ad:
         e9:50:ef:4c:6f:af:15:5e:de:16:d6:30:4f:2d:30:63:86:40:
         db:a0:b7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:01:58 2025 by rpki-client