Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa
File:                     2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa (raw, json)
Hash identifier:          w9EBli+cDQx3bCLKh5HdgtRsud3Gxlmrl3HWQk2y0Ig=
Subject key identifier:   E2:16:C6:D5:7D:F5:7B:31:45:A6:8E:4C:15:25:B4:11:6F:B7:8A:A3
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584BBC7880043A74D47E6C655700
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa
Signing time:             Mon 27 Oct 2025 13:29:43 +0000
ROA not before:           Mon 27 Oct 2025 13:29:43 +0000
ROA not after:            Sun 25 Jan 2026 14:29:43 +0000
asID:                     138643
IP address blocks:        23.226.57.0/24 maxlen: 32
                          23.248.217.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bc:78:80:04:3a:74:d4:7e:6c:65:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Oct 27 13:29:43 2025 GMT
            Not After : Jan 25 14:29:43 2026 GMT
        Subject: CN=f921894e-ef6a-41e9-ad51-9a334b8cbb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:c7:ec:2b:1e:68:9c:7f:52:0c:03:66:23:
                    42:87:85:8b:9f:af:24:d6:b9:1f:1e:b4:46:a8:4b:
                    42:4e:d1:b6:ad:4f:bb:52:da:ac:a2:c0:fd:71:46:
                    1b:69:73:d6:de:d6:04:2d:4f:17:74:17:70:ed:d6:
                    2b:78:72:02:59:79:8c:91:91:53:c0:e8:6d:9e:17:
                    a5:ee:2e:46:0b:6f:90:f2:ef:3d:3b:48:8a:6e:76:
                    e7:eb:18:5b:d9:57:ce:74:32:16:6c:29:83:ac:96:
                    1a:7d:f0:a9:52:4a:ea:11:c2:cf:57:62:05:09:ab:
                    1a:06:6d:7a:da:4f:55:69:aa:d4:42:99:61:d7:cf:
                    ee:77:4f:63:5a:b2:9e:00:84:33:38:1a:75:c2:e9:
                    85:b3:88:24:5c:ab:db:3c:b9:1a:17:00:c4:99:fd:
                    2f:2c:dc:1f:07:a6:33:84:05:f0:2e:af:f3:95:b7:
                    0a:d6:a5:53:b3:eb:9f:71:d0:af:13:71:b6:cb:aa:
                    62:ba:7e:92:74:41:47:3e:97:b6:1f:bb:46:80:13:
                    14:7c:86:de:f5:64:74:2d:a5:83:bb:c3:7b:84:29:
                    b9:e3:f0:c8:65:0c:86:b5:a4:5c:fc:18:a3:23:36:
                    20:83:30:00:75:07:62:a1:a9:8a:b4:e9:ea:f0:e8:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:16:C6:D5:7D:F5:7B:31:45:A6:8E:4C:15:25:B4:11:6F:B7:8A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.57.0/24
                  23.248.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:97:f3:ff:1b:75:55:82:0b:70:a3:bb:31:07:d7:0b:13:05:
         82:a9:f2:4a:9c:d6:d9:1b:8f:cd:70:60:3b:99:50:03:6b:fc:
         d5:3a:96:f8:ad:00:53:a5:c7:41:51:42:7d:7b:8f:b2:7e:27:
         86:f9:0c:fe:1a:24:b8:f9:d9:35:5a:d6:9a:d2:bd:87:4e:e4:
         93:c9:e0:07:16:9a:b1:b1:53:9e:da:aa:b2:d6:f7:37:67:3c:
         c6:a1:4d:af:51:13:52:29:81:9c:ff:22:b3:b1:45:9f:bb:ce:
         7a:fa:6f:da:63:d8:06:f0:36:13:6d:55:fa:e4:77:ec:fc:d7:
         78:66:9a:7b:90:7f:20:71:a7:24:c9:57:a7:12:3b:79:0c:71:
         b2:d6:61:35:75:f7:c7:15:b4:5e:f2:db:f8:60:c0:70:1f:e6:
         40:ec:50:2b:ad:b5:c1:10:b8:4a:9c:c2:ff:ca:df:a8:8c:5f:
         85:ab:99:ee:74:56:e1:a0:89:6e:d0:17:53:cb:8b:75:a7:23:
         bd:50:c4:16:7f:86:11:c4:07:49:95:29:f7:3b:c2:55:00:f5:
         5c:e9:45:9e:0b:5a:dc:b4:f6:3b:42:2f:d5:bb:15:a5:ab:f9:
         60:38:3f:d1:b4:31:d6:3c:3d:a0:67:c1:09:da:9d:73:82:97:
         33:4c:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:46:16 2025 by rpki-client