Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa
File:                     9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa (raw, json)
Hash identifier:          Rehcae2NvxXj24vhoqZsRNtiHmxO398hR9dvQQaDRe8=
Subject key identifier:   AA:78:A4:EF:40:57:6A:FB:09:D6:DB:B0:4C:78:11:32:37:40:EA:26
Certificate issuer:       /CN=b1341766-e680-439c-a8dc-fb35f8f84ed2
Certificate serial:       010D0C9F4328584BB88D226F8629B0473B22CC00
Authority key identifier: 58:32:47:89:EB:BC:F9:31:B7:07:4D:E0:55:B4:EC:B4:DF:3D:08:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     53680
IP address blocks:        23.176.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:22:6f:86:29:b0:47:3b:22:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1341766-e680-439c-a8dc-fb35f8f84ed2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=a62d0914-38eb-4143-9b15-4f39b99e7b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:6a:51:41:f1:d7:0f:01:bb:0c:56:a8:2c:
                    bc:19:eb:49:59:2d:30:64:0f:ac:0e:5d:0a:c8:e7:
                    8f:99:3e:84:7b:45:88:c8:af:88:0f:4c:b3:0b:cf:
                    2c:f4:f0:b9:bc:00:d6:06:2c:d4:da:f5:3e:37:ab:
                    39:0e:b1:10:bb:53:64:22:00:3c:bf:83:63:36:cb:
                    3e:be:c7:6e:ad:c5:5d:f9:65:03:9c:65:65:9c:73:
                    db:94:77:50:56:10:44:6b:e9:dc:65:fc:1a:c7:93:
                    48:28:16:35:44:86:a7:6b:07:b9:64:13:01:29:bd:
                    9e:e0:56:18:02:55:03:d9:17:5e:a9:6e:22:7d:d2:
                    0c:b0:00:f3:61:75:77:60:54:aa:21:4c:50:9a:19:
                    82:39:17:18:06:93:db:e1:d7:86:09:52:68:58:80:
                    48:e3:90:5d:71:6a:0d:e5:f8:04:74:35:6c:8a:35:
                    3b:8d:cb:ae:05:c3:1d:d0:9f:2b:aa:92:a7:83:14:
                    23:f9:28:18:14:74:f5:7e:0c:05:1e:46:f7:d7:fe:
                    8d:87:00:b6:60:56:76:28:2d:90:31:95:43:a6:ca:
                    b1:86:df:6a:ab:60:9a:eb:6f:e0:c0:24:23:c4:de:
                    bd:2b:40:0c:f5:16:ac:64:a0:5e:5b:9a:d0:d7:96:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:78:A4:EF:40:57:6A:FB:09:D6:DB:B0:4C:78:11:32:37:40:EA:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.crl

            X509v3 Authority Key Identifier:
                keyid:58:32:47:89:EB:BC:F9:31:B7:07:4D:E0:55:B4:EC:B4:DF:3D:08:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:48:f9:0c:82:68:4d:73:33:a7:38:99:8f:25:af:c9:d6:56:
         9a:1a:26:62:8f:2f:18:7a:4e:45:38:a1:1e:bf:af:53:3a:fc:
         1f:a0:1e:ae:b3:ce:5b:11:33:e9:b3:5c:6d:dd:ec:09:f8:e1:
         1f:18:09:74:36:75:b9:a6:0e:93:f1:6b:59:54:e9:0a:72:00:
         3b:fa:5c:45:b7:55:ed:a3:55:cc:fb:f8:3b:6c:20:c2:ee:58:
         43:be:45:ae:df:c0:80:1b:88:26:1b:ff:b0:1d:a3:d5:12:a6:
         6c:06:b3:b1:2d:ee:63:e1:07:e6:95:b1:e5:f0:72:1f:37:cc:
         4e:ce:ca:3b:ba:87:bb:f8:2a:9e:09:aa:7a:69:ce:0a:8d:e9:
         e6:a0:84:bc:34:02:50:5c:b6:d5:5c:42:76:46:ae:0d:30:c7:
         2e:c3:9e:24:ec:ef:a5:eb:fa:b7:d6:7b:b2:95:45:35:a9:4e:
         a6:bc:ba:43:88:42:46:47:2a:c9:5b:9a:0c:ba:83:04:5d:82:
         9b:01:74:cd:92:ed:ed:69:20:91:e1:46:95:74:15:c1:f2:dc:
         89:54:87:2c:21:35:b0:b2:36:b3:98:00:3a:09:91:97:15:8b:
         f1:0c:37:ca:a1:77:45:29:28:b1:4e:c2:65:cb:3c:d3:46:c9:
         c7:04:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:07:08 2025 by rpki-client