Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa
File:                     3a603485-8119-3bb4-9449-4eb447f559ba.roa (raw, json)
Hash identifier:          P0nG46PwmB4iWpEv3M2lvdHZweBtyUp6cL3bUKcFfJ0=
Subject key identifier:   05:F9:DE:46:B2:E7:14:77:E1:71:33:9D:BA:8C:08:EA:45:44:16:AC
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584B970CF52D246228A75F993A00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     59253
IP address blocks:        23.19.197.0/24 maxlen: 24
                          2607:f5b5:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f5:2d:24:62:28:a7:5f:99:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=7b8235c4-e527-4563-9204-468ee9f4635b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6d:ea:a5:9f:ad:91:7a:0b:e7:97:01:43:23:
                    a3:79:20:aa:fc:f9:32:f3:30:7d:bb:04:5d:77:d9:
                    34:ec:99:19:57:07:af:4e:8b:fe:c9:50:90:e9:c6:
                    d2:6d:b6:ac:9d:64:79:15:2e:bd:d9:ff:1f:e6:ca:
                    71:4d:28:12:d3:01:8a:39:fa:7e:a8:57:66:e2:30:
                    a2:eb:8d:ab:51:3d:24:cd:a5:06:0d:ea:c4:88:b1:
                    ad:49:9b:38:fd:6f:17:a9:55:58:b6:47:c7:d2:a1:
                    85:72:42:88:c9:39:6b:9c:85:d1:20:31:51:9f:0f:
                    08:19:91:c3:ef:80:68:e3:25:a4:c6:f2:ba:6e:e3:
                    80:57:40:e6:bc:63:1b:94:78:94:77:3b:1d:48:18:
                    ff:a9:7d:1a:c7:f2:2c:e2:b2:be:3f:df:34:d8:8e:
                    b0:d1:a3:38:8d:24:85:bc:1e:5e:ce:b6:cc:e9:25:
                    94:1a:27:84:6d:cc:aa:21:a9:19:df:87:ed:cb:8c:
                    60:37:2a:75:ec:02:f8:25:7c:ae:60:e7:90:76:81:
                    6e:32:4b:0e:3c:09:98:8e:a3:3c:51:2b:3a:92:5f:
                    76:12:35:91:e9:3b:98:73:c3:74:29:6e:70:a0:32:
                    ad:5d:83:37:80:7e:4c:90:a3:ad:71:65:4d:24:a4:
                    12:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F9:DE:46:B2:E7:14:77:E1:71:33:9D:BA:8C:08:EA:45:44:16:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.197.0/24
                IPv6:
                  2607:f5b5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2b:82:de:e5:97:3d:39:2b:50:4f:d8:c8:da:94:b0:b5:4e:
         69:4c:6c:6b:eb:ff:6e:d1:0a:e9:10:71:d2:c9:5a:77:5c:09:
         40:7a:19:0b:14:3b:a3:a9:dc:23:86:f3:be:d4:38:71:04:40:
         6f:8b:39:ed:60:01:a1:da:22:0f:73:bd:a7:b9:79:f2:47:b3:
         7e:ce:00:2c:e5:a5:9d:7e:73:50:0d:58:6b:eb:b5:f2:46:de:
         c6:96:40:5c:57:f3:fe:4c:c2:33:90:ab:00:e2:06:ad:e8:9a:
         1e:4b:bb:61:85:19:3a:94:b7:7b:96:a4:84:7d:2f:b2:05:6e:
         78:64:0c:d5:3e:d9:b8:ea:44:fd:7d:b0:40:39:b6:67:28:66:
         83:9a:a3:d6:00:7f:37:70:b1:48:a1:03:68:9f:78:bb:1b:87:
         01:99:cc:fd:84:d9:6c:c8:40:69:0b:61:86:dd:c7:af:04:d2:
         05:e2:7b:05:18:18:0b:a4:05:1e:cc:ed:87:ec:93:54:5b:0a:
         f3:dd:15:19:73:92:73:81:55:ad:25:d5:04:45:c2:a8:73:43:
         10:f8:b7:a3:1c:67:4a:b7:72:84:97:d2:3c:57:81:16:7f:e7:
         3e:90:4e:f1:04:45:ff:14:b5:d4:db:42:6c:d1:02:be:79:7b:
         03:60:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:32:14 2025 by rpki-client