Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f70a1ef-a6e4-36f1-a83d-2bb798f825ef.roa
File:                     8f70a1ef-a6e4-36f1-a83d-2bb798f825ef.roa (raw, json)
Hash identifier:          Y7vdu55ocKocB9NekKdZpOnd+xmiRSib46LaUzXpScc=
Subject key identifier:   59:5E:DC:94:E7:81:31:5A:33:A9:AD:68:4A:DA:1C:5E:61:6D:E8:1F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584AA6F627AC1D79C651CCCA5500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f70a1ef-a6e4-36f1-a83d-2bb798f825ef.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     19157
IP address blocks:        23.86.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:27:ac:1d:79:c6:51:cc:ca:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=7389df53-fbaf-431d-b85a-f26dba1d790e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:43:48:c8:f9:c2:a0:fc:d7:5d:f3:a5:3e:83:
                    55:0a:3d:33:b1:73:f8:f3:48:24:20:e7:16:07:9d:
                    e3:df:cc:30:5d:de:77:06:b3:8d:b1:ec:3b:2d:7c:
                    a1:37:a5:26:a5:bd:43:58:c6:a6:11:a2:6c:3f:09:
                    99:a8:a4:3f:c8:6e:c7:0d:28:bc:8b:5d:43:c9:d8:
                    da:d1:fe:14:de:34:a7:d3:a1:7e:8e:97:98:33:3d:
                    9f:26:9c:a6:d4:91:b1:f1:bd:86:e1:42:c7:ca:39:
                    c2:14:9c:93:1e:50:66:a2:74:c7:8f:a6:7f:d5:db:
                    73:c0:dd:3a:bc:2a:78:cd:c1:4e:9b:ff:af:4b:ec:
                    c3:bc:d3:b2:89:36:ed:be:07:99:64:63:41:1e:9e:
                    c5:87:43:47:69:35:7c:0c:b8:c2:e8:93:12:d5:29:
                    f1:1e:b4:fa:c5:11:39:97:77:24:1e:24:7d:8d:fa:
                    a8:61:6c:84:85:cf:1a:ac:8d:50:1c:21:3a:16:f3:
                    e9:ec:b1:aa:40:95:38:62:c9:df:f1:45:86:70:2f:
                    eb:5c:20:41:95:8b:81:72:41:84:70:bc:bf:12:2f:
                    09:51:db:4e:fc:b5:6b:9e:45:5a:24:70:c2:d9:c7:
                    2a:31:d3:00:c1:4a:ad:c7:d3:f1:7d:99:9a:6a:7b:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5E:DC:94:E7:81:31:5A:33:A9:AD:68:4A:DA:1C:5E:61:6D:E8:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f70a1ef-a6e4-36f1-a83d-2bb798f825ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3b:4e:c5:43:f1:33:93:8d:f2:4a:c7:0e:d6:0c:59:20:49:
         ad:5b:90:de:4b:72:6c:18:d8:25:be:74:24:6f:10:2f:a4:6c:
         5f:39:8d:e3:4f:b9:73:3e:d8:ef:81:85:f0:2f:22:34:88:6f:
         47:d2:69:a1:5b:ab:e7:87:61:c3:89:ea:06:b3:2d:b2:df:9f:
         ca:ea:7e:72:3b:70:41:89:08:6a:69:b8:ac:a1:d5:6f:55:40:
         75:7d:bb:7c:1d:5b:86:f3:83:45:c4:35:c2:4e:1b:a2:53:3c:
         54:c1:86:1c:ce:aa:f3:77:42:4a:e3:4d:1b:58:e3:99:ad:cb:
         a3:38:0a:17:f1:96:45:ce:24:a3:8f:7a:64:93:f0:9a:41:b8:
         cb:31:51:7b:8f:59:23:8a:84:34:98:e5:7c:7f:e2:14:6f:ff:
         81:63:d6:06:2d:9b:98:46:62:ab:18:d3:2b:cf:de:40:e4:b4:
         e6:d5:91:5f:2b:4b:ac:66:92:93:54:97:9d:5d:06:ce:ae:8e:
         2a:d0:fd:a0:e9:da:98:0e:c2:5d:67:b7:59:80:65:c0:79:8e:
         21:21:cc:b4:c9:5b:a7:0c:f9:60:67:71:34:f1:e2:8e:94:33:
         4a:47:88:c5:90:35:62:48:02:77:38:58:13:5e:d4:f4:9a:30:
         e1:90:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:14:10 2025 by rpki-client