Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/832cfaf4-5d90-3073-8f3f-5764acbc529b.roa
File:                     832cfaf4-5d90-3073-8f3f-5764acbc529b.roa (raw, json)
Hash identifier:          p15FVXl+bBxAuuL5l89v6FHXTF6Y/MHb9m8kpr1vIpQ=
Subject key identifier:   25:E0:51:78:4E:01:C0:8A:00:7E:F0:5B:C4:50:71:33:70:97:F9:62
Certificate issuer:       /CN=791130fd-44cf-4486-92b3-7838b38e49ea
Certificate serial:       010D0C9F4328584AB38626BDD4713F268D87C380
Authority key identifier: F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/832cfaf4-5d90-3073-8f3f-5764acbc529b.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     401541
IP address blocks:        23.157.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:26:bd:d4:71:3f:26:8d:87:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=791130fd-44cf-4486-92b3-7838b38e49ea
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=0d20e49d-454d-4e88-8536-1b169ba655a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ee:28:08:d6:50:fe:9f:d0:aa:34:3a:ee:63:
                    a7:7e:42:5f:b5:4f:14:d8:b6:70:75:74:f7:fb:f7:
                    94:2b:6b:78:b7:8e:d4:b8:02:11:59:7e:62:cf:22:
                    e2:69:bf:be:ca:26:63:66:c5:d4:0a:32:34:63:c3:
                    d6:c6:22:d3:b2:6b:db:2a:75:6d:38:28:da:ce:68:
                    30:df:1e:4c:ac:cb:6f:37:33:53:52:cb:1e:16:69:
                    12:8e:d1:a4:64:15:20:02:48:a6:f5:2b:5b:df:44:
                    83:b7:b5:8e:be:d5:52:e9:88:a6:85:61:4a:61:9c:
                    a5:49:89:be:9d:cd:56:0d:30:8c:be:19:f9:3a:c3:
                    bb:35:64:b9:ae:bd:1f:84:7b:21:6d:41:b3:77:6e:
                    25:e0:38:03:5b:1b:6c:80:f7:cb:58:d4:c9:6c:71:
                    a7:50:f5:82:11:78:64:c7:36:61:34:f0:6b:be:f4:
                    76:dc:0a:46:d0:25:e1:bb:d3:42:c6:54:3d:50:a7:
                    a6:2a:cf:62:bd:22:5e:a2:f3:5b:ba:74:c8:70:8d:
                    6a:59:22:84:24:81:bd:1c:bb:21:2b:1e:87:ef:df:
                    9f:40:c7:56:75:07:d9:4c:c8:1c:b8:a1:28:1c:75:
                    2a:3e:30:66:9c:84:f5:28:cc:58:b8:8f:69:c6:61:
                    fb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:51:78:4E:01:C0:8A:00:7E:F0:5B:C4:50:71:33:70:97:F9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/832cfaf4-5d90-3073-8f3f-5764acbc529b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl

            X509v3 Authority Key Identifier:
                keyid:F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0e:e7:1b:fa:b4:e0:25:25:8c:69:51:a6:56:10:28:2d:b3:
         a1:6f:f3:5b:0d:a3:ec:dd:69:12:de:fa:0b:4f:ac:0c:c5:64:
         43:e4:c4:1e:bd:ea:26:46:bd:61:09:9a:6a:d0:2b:20:ba:e2:
         01:26:e7:f6:58:be:b6:76:e6:cd:af:98:02:90:51:57:63:cc:
         63:e8:76:98:5c:67:f6:a5:6e:37:72:34:af:61:f2:c8:9e:74:
         7b:c3:ac:a3:d3:3a:72:52:bc:f9:d3:7c:01:0f:de:74:0a:13:
         85:44:0e:92:ae:19:bf:86:30:aa:60:c5:92:63:d5:b6:80:62:
         0f:0a:77:95:69:1a:fd:84:a9:e3:9f:2c:3c:51:d3:12:12:41:
         b3:c4:38:e9:f3:05:cd:2d:ee:2a:39:3f:e6:97:6d:19:2e:b6:
         e9:fd:5a:e2:56:e2:56:5a:94:36:95:75:c3:7d:63:87:54:fd:
         b6:4a:64:d7:4c:d7:56:a4:05:24:11:43:f4:c9:e9:1d:5f:0f:
         8c:23:45:d2:e4:6e:7a:97:f1:58:42:11:64:e2:a3:49:7f:09:
         2e:b8:5c:e0:89:fe:ca:6f:44:81:85:27:ec:4c:3c:4b:ce:db:
         e1:fa:94:b7:b2:6c:75:e2:e5:81:ac:b8:58:1b:cd:3b:e1:91:
         34:f6:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:18 2025 by rpki-client