Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa
File:                     c629930b-0b54-3c4b-99e5-12e0b43928ec.roa (raw, json)
Hash identifier:          xH8U++qOKx77QNeXSh/iddT5p6kfFTWuVCEQxC9DFNU=
Subject key identifier:   58:59:C8:CC:84:2A:15:0B:06:75:CF:BD:0F:67:AD:C4:3A:A8:B8:F9
Certificate issuer:       /CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d
Certificate serial:       010D0C9F4328584BB88D0E6FE639ECDBD4718000
Authority key identifier: C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        23.191.48.0/24 maxlen: 24
                          2620:9d:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:0e:6f:e6:39:ec:db:d4:71:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=20a7e516-f876-4aa5-8d59-57a3f9d8a769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:9f:b9:b5:ef:6c:6a:28:3d:eb:26:9f:d7:
                    ca:b9:dd:ae:70:97:81:9b:76:a0:57:24:c4:67:bb:
                    ee:35:ce:c6:3e:4b:b0:52:d7:8b:1d:1c:70:bf:b6:
                    4f:05:a8:04:d5:b5:19:da:9e:fd:2c:a1:bf:8d:91:
                    36:08:f2:30:b4:3c:90:15:86:d0:71:e9:3b:81:5e:
                    07:93:90:3f:b0:39:dc:55:3a:15:c5:89:80:e8:f3:
                    da:06:6e:00:2b:4a:71:84:4e:22:b4:be:a1:af:95:
                    a1:47:93:e8:c7:8b:b1:2d:81:26:1e:7d:bb:67:b2:
                    63:52:ce:c0:21:4f:8a:41:96:69:bd:20:ae:f3:52:
                    74:03:ae:3c:66:bc:8e:4d:52:2c:0b:1b:f2:d8:c1:
                    16:bc:09:66:c0:d9:d2:dd:cd:9e:f8:62:ea:d1:5f:
                    08:ba:de:13:78:66:fa:d3:7b:ef:d6:c7:51:4a:14:
                    3e:f3:c6:e3:db:3c:8f:6a:3f:87:0b:4f:5c:0a:db:
                    23:e7:90:e4:83:b3:b4:af:b8:fb:36:b7:e5:24:a4:
                    5a:45:74:75:e7:76:2f:4d:c4:41:7d:f7:95:d6:17:
                    5d:8e:b3:02:3b:90:4e:71:14:b2:66:da:2c:26:6b:
                    45:c3:c6:a6:47:33:b1:3d:ce:cc:20:1f:c1:6d:bd:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:59:C8:CC:84:2A:15:0B:06:75:CF:BD:0F:67:AD:C4:3A:A8:B8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.crl

            X509v3 Authority Key Identifier:
                keyid:C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.48.0/24
                IPv6:
                  2620:9d:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:44:0a:e3:a5:b7:48:93:cb:88:f3:96:fc:e0:44:f8:e7:df:
         3d:3e:9a:c1:ec:c4:98:f4:ed:1a:82:70:fc:be:96:03:9d:c6:
         1a:8c:53:d7:54:f4:be:aa:76:6a:ba:e1:34:5f:b2:36:f6:34:
         a4:91:d2:84:e9:a4:66:93:4d:3a:5e:6b:26:bb:ca:7d:65:04:
         4b:38:97:5f:d6:66:d8:38:bb:cd:b5:4f:ca:7d:72:57:3c:c7:
         97:93:e0:8f:b8:df:94:4e:50:a2:76:e4:1b:a7:8d:71:bc:cd:
         87:c9:48:ac:ed:52:e1:6e:28:09:aa:29:89:77:77:6b:f4:f1:
         00:01:37:76:49:fd:a5:d6:7b:14:4f:f7:f2:a1:d8:ad:7c:36:
         56:dd:8d:52:b6:cf:40:e4:9a:1e:01:37:90:61:28:9a:da:d9:
         53:dd:1a:57:8c:7e:21:4e:ed:84:2d:07:ec:19:13:e2:7e:16:
         c3:d9:71:5a:a8:60:b2:ce:bc:68:47:4e:04:eb:1d:78:c7:64:
         d6:2f:5e:1b:32:0c:5c:7b:45:f3:5b:12:67:fb:4a:75:9e:cc:
         ad:2b:40:c5:cf:27:4b:91:d1:77:4f:af:1f:a3:e3:48:a1:ef:
         68:5c:6a:7a:a3:42:0b:12:fa:ec:a5:70:e2:2c:e1:98:95:75:
         f8:b3:cc:29
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEu4jQ5v5jns29RxgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNmOWU0ZmEtOGEyMS00OTgxLWI4YzgtNmM3ZWFmNzkx
ODZkMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
MjBhN2U1MTYtZjg3Ni00YWE1LThkNTktNTdhM2Y5ZDhhNzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl6fubXvbGooPesmn9fKud2ucJeBm3agVyTE
Z7vuNc7GPkuwUteLHRxwv7ZPBagE1bUZ2p79LKG/jZE2CPIwtDyQFYbQcek7gV4H
k5A/sDncVToVxYmA6PPaBm4AK0pxhE4itL6hr5WhR5Pox4uxLYEmHn27Z7JjUs7A
IU+KQZZpvSCu81J0A648ZryOTVIsCxvy2MEWvAlmwNnS3c2e+GLq0V8Iut4TeGb6
03vv1sdRShQ+88bj2zyPaj+HC09cCtsj55Dkg7O0r7j7NrflJKRaRXR153YvTcRB
ffeV1hddjrMCO5BOcRSyZtosJmtFw8amRzOxPc7MIB/Bbb3AfwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFFhZyMyEKhULBnXPvQ9nrcQ6qLj5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81M2Y5
ZTRmYS04YTIxLTQ5ODEtYjhjOC02YzdlYWY3OTE4NmQvYzYyOTkzMGItMGI1NC0z
YzRiLTk5ZTUtMTJlMGI0MzkyOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTNmOWU0ZmEtOGEyMS00OTgxLWI4
YzgtNmM3ZWFmNzkxODZkLzUzZjllNGZhLThhMjEtNDk4MS1iOGM4LTZjN2VhZjc5
MTg2ZC5jcmwwHwYDVR0jBBgwFoAUx8iLrM7Olv1z+9Odc8OqwULdTAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81M2Y5ZTRmYS04YTIxLTQ5ODEtYjhjOC02Yzdl
YWY3OTE4NmQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF78wMA8E
AgACMAkDBwAmIACdYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATUQK46W3SJPLiPOW/OBE+OffPT6awezE
mPTtGoJw/L6WA53GGoxT11T0vqp2arrhNF+yNvY0pJHShOmkZpNNOl5rJrvKfWUE
SziXX9Zm2Di7zbVPyn1yVzzHl5Pgj7jflE5QonbkG6eNcbzNh8lIrO1S4W4oCaop
iXd3a/TxAAE3dkn9pdZ7FE/38qHYrXw2Vt2NUrbPQOSaHgE3kGEomtrZU90aV4x+
IU7thC0H7BkT4n4Ww9lxWqhgss68aEdOBOsdeMdk1i9eGzIMXHtF81sSZ/tKdZ7M
rStAxc8nS5HRd0+vH6PjSKHvaFxqeqNCCxL67KVw4izhmJV1+LPMKQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:02:26 2025 by rpki-client