Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/d3b5d6b2-0376-3f78-b633-29e4aa23e280.roa
File:                     d3b5d6b2-0376-3f78-b633-29e4aa23e280.roa (raw, json)
Hash identifier:          LDDkMqpHWqfpU8EzovmeA6LkuxE5EHjpqnjLgS1l0Bs=
Subject key identifier:   28:DE:56:2A:B7:13:4F:51:54:77:FF:42:8B:69:A7:F5:3B:6F:88:BD
Certificate issuer:       /CN=908b5814-2031-4b54-b9e1-bc5eaacf8745
Certificate serial:       010D0C9F4328584BBFA5BAC9A0BB782C76A64300
Authority key identifier: C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/d3b5d6b2-0376-3f78-b633-29e4aa23e280.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     401167
IP address blocks:        23.182.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:ba:c9:a0:bb:78:2c:76:a6:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908b5814-2031-4b54-b9e1-bc5eaacf8745
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=d9af5c53-f443-4768-be2b-8e2facbca9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:8e:f6:41:98:03:53:2a:c6:04:4b:0a:ad:
                    32:12:b8:19:24:a8:52:6d:69:65:e3:87:a3:ee:8d:
                    85:79:c4:b4:89:29:7c:8a:14:9a:53:ae:b8:7e:43:
                    1d:f0:34:d1:66:c2:f4:8b:65:40:d1:35:4d:29:37:
                    82:aa:df:36:fb:8c:fc:7f:a2:8e:21:16:1e:09:6c:
                    c9:25:74:49:6e:ac:ba:4d:77:69:27:31:d2:d4:90:
                    78:e7:fd:90:7b:bd:ea:19:36:ae:bf:2f:f3:26:f3:
                    17:ca:fa:24:2f:3d:ae:83:54:a8:c4:2d:fb:7a:39:
                    d1:1f:d6:c8:97:3d:4f:04:12:64:19:2e:81:d0:88:
                    37:30:f3:2a:ea:ab:b5:20:38:7d:84:71:0e:03:34:
                    82:fe:88:77:60:26:81:3d:66:b9:7b:93:da:9a:3a:
                    51:81:a9:eb:50:c9:9c:69:36:a0:9a:08:48:92:15:
                    b4:c8:b2:10:71:10:08:1b:5e:fe:42:06:3e:7f:d1:
                    90:f8:53:e3:a1:2f:83:05:da:6a:ba:76:91:2f:0f:
                    13:26:c4:5e:95:c0:62:d6:24:c9:d9:d6:bd:a2:97:
                    24:1a:53:56:ff:ac:b8:05:13:22:32:91:aa:68:74:
                    8a:71:62:3a:c9:d3:3a:d6:ca:9c:8c:49:a5:18:e5:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DE:56:2A:B7:13:4F:51:54:77:FF:42:8B:69:A7:F5:3B:6F:88:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/d3b5d6b2-0376-3f78-b633-29e4aa23e280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e8:39:22:0d:ba:4f:02:e9:8f:34:78:46:0a:fe:44:95:40:
         67:1f:c7:cc:be:40:f5:5b:81:00:c9:e7:a3:a9:d3:57:e6:07:
         85:9e:a9:38:12:11:a4:44:d6:a7:65:ab:b4:1b:85:3d:2d:11:
         13:bb:b4:62:0b:e9:cd:d8:e8:e5:59:53:0b:27:68:11:06:6e:
         b2:89:c9:51:44:4f:23:88:63:87:a5:31:55:e0:b8:03:a1:7e:
         40:95:bc:8c:b0:5f:04:bd:d1:1b:fd:59:c1:a8:d9:32:1c:31:
         08:2a:69:f7:66:80:d5:b7:9e:ec:07:97:46:6f:df:6d:39:ab:
         64:8f:41:aa:50:bf:c1:cc:4d:8a:f6:7f:ac:6c:9e:41:cc:cd:
         14:ec:4e:22:51:81:f6:41:ea:66:9c:3a:b7:2f:db:5a:a0:84:
         f2:bb:f0:c7:44:3d:36:dc:30:9f:34:d1:d3:7e:09:15:5f:f5:
         06:12:e4:05:61:35:98:02:bb:89:0b:9c:85:f9:01:47:a5:72:
         e3:a6:e8:c6:85:d4:7c:12:6b:59:52:15:dc:3b:10:06:01:19:
         45:ea:93:76:63:c9:4e:c8:68:6d:39:54:b6:87:c7:82:58:48:
         07:02:38:e0:59:67:17:1e:f5:e4:7c:a6:6f:cc:71:09:fe:bb:
         7b:49:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:10:14 2025 by rpki-client