Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f5a37e10-4b3b-3cd4-bc50-665036e83a37.roa
File:                     f5a37e10-4b3b-3cd4-bc50-665036e83a37.roa (raw, json)
Hash identifier:          sq6huUPGIMMKao9MGOmG4SmkkG9Jnt8xZwV+6t71fjc=
Subject key identifier:   FE:93:75:D9:81:77:F2:4F:72:CD:EA:71:7A:9C:E2:76:FE:5B:D9:2B
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584A8B0B767D43B83E62355B44E0
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f5a37e10-4b3b-3cd4-bc50-665036e83a37.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     396422
IP address blocks:        23.190.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:76:7d:43:b8:3e:62:35:5b:44:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=ed0c57a5-a26c-4009-a4e3-ade6e7258d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:60:79:17:85:30:f6:b4:1a:63:cb:62:b8:75:
                    97:d1:91:12:0f:1e:e3:ae:83:2c:2d:f5:79:81:b2:
                    3c:48:a2:8d:cf:e8:59:37:f5:89:bd:71:d2:e8:17:
                    02:e1:05:37:a8:bf:9a:86:1b:66:8e:59:e3:6f:5f:
                    82:9f:99:52:0b:e6:3b:44:ed:06:fd:37:2b:27:0e:
                    0f:95:1d:73:37:67:1b:98:ac:31:43:e6:67:1a:32:
                    e2:51:b1:d2:26:68:b0:5f:d3:24:0a:97:ff:f2:56:
                    06:54:d7:36:94:4a:03:48:33:15:c9:20:83:2b:08:
                    c4:75:81:b1:b8:3e:f8:29:cd:80:27:1f:ed:64:28:
                    d5:69:7f:2d:dc:0a:a6:b1:28:4d:55:c0:eb:4c:71:
                    e4:73:02:7d:2a:b3:98:a0:69:df:ba:e4:97:98:f7:
                    42:f5:e8:f6:f8:31:d1:55:17:9c:df:6a:cd:21:57:
                    c8:24:80:20:6b:85:3f:8f:75:6c:2c:f4:1b:c4:16:
                    2e:05:cc:5c:b2:bb:a1:66:e9:b7:5e:d7:4f:39:59:
                    2f:d0:22:00:64:e8:10:37:ed:ae:fd:d0:8e:df:2d:
                    62:52:1f:10:57:b6:fa:5c:dd:8e:85:b6:05:34:c7:
                    53:d0:c5:27:34:cb:b0:4b:b8:52:88:11:f6:bd:39:
                    13:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:93:75:D9:81:77:F2:4F:72:CD:EA:71:7A:9C:E2:76:FE:5B:D9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f5a37e10-4b3b-3cd4-bc50-665036e83a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:21:e4:a7:c6:8d:0f:d5:02:2d:18:ee:8e:51:2c:fc:35:ef:
         17:93:c2:f8:6c:7c:8b:d3:d2:66:38:d7:52:fe:1c:f0:a2:c4:
         c2:80:a5:c2:86:95:53:62:a2:02:dc:64:de:de:81:5e:56:a3:
         4f:fb:45:c5:23:14:38:fc:eb:99:54:bd:d5:25:fc:4f:e5:55:
         6c:d0:29:e7:96:af:71:2a:d5:ec:9c:8f:d8:8c:aa:c7:e8:23:
         59:ed:7f:1a:a4:aa:22:41:b8:87:8c:6a:ac:5d:2e:7e:04:c0:
         04:cb:81:17:7b:e3:e4:2e:a1:39:26:3e:b4:56:1d:08:58:eb:
         71:09:7d:e4:4c:c8:c0:b2:ac:4f:dd:a4:21:b7:89:0f:08:cf:
         db:0d:65:fc:2a:4a:0a:a6:90:8a:2e:47:f6:d8:46:23:6e:71:
         45:5b:29:82:9d:0b:ab:9a:87:28:c9:ce:6a:74:ea:4f:35:14:
         7e:58:6e:59:50:2e:fb:13:24:f6:1e:5c:8b:49:98:ab:21:b0:
         1a:c5:e1:18:71:46:18:1b:15:fa:b4:1a:9b:91:6a:9e:d8:6d:
         39:b4:e2:2d:23:1f:2e:58:7f:47:15:8a:89:eb:0e:ae:98:3b:
         c0:e7:ab:a3:04:25:a7:5a:9c:86:ad:40:88:38:70:44:ce:07:
         6c:4c:54:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:00 2025 by rpki-client