Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/98ac1ad7-32f8-34d7-8048-09340f8a5b09.roa
File:                     98ac1ad7-32f8-34d7-8048-09340f8a5b09.roa (raw, json)
Hash identifier:          K5EkntgnW8CY2NR9sQCKcavTQE0Tja7yxfSINTVKxiM=
Subject key identifier:   DD:90:6B:FA:F3:7B:CB:B9:23:F4:0B:1B:E8:E4:A5:9F:18:CE:55:B5
Certificate issuer:       /CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b
Certificate serial:       010D0C9F4328584A90A0C172CD6ED3BA7C207C00
Authority key identifier: 22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/98ac1ad7-32f8-34d7-8048-09340f8a5b09.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     11925
IP address blocks:        23.163.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c1:72:cd:6e:d3:ba:7c:20:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=f00aa531-4cd1-4974-aace-b4cdd6d0a019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:d4:ce:31:65:73:18:5e:4d:a9:35:60:94:
                    f5:13:d4:32:5f:a1:70:d6:52:e7:d5:bf:c3:1d:25:
                    19:a7:7f:87:e4:99:23:4b:12:ef:66:e1:49:f6:a0:
                    e6:58:a5:12:64:d5:37:49:8d:c9:4f:0a:51:76:ba:
                    e5:99:6f:96:70:82:f6:66:4c:07:96:41:f7:58:21:
                    e9:6b:b2:3e:70:9c:08:03:bb:e3:35:22:4c:62:c4:
                    1a:c9:44:85:e3:4e:e4:b3:84:e5:f4:63:1b:f0:ca:
                    0d:5a:bf:db:4b:af:f8:d4:a3:fe:1a:0d:b0:f5:81:
                    ab:b1:f9:1d:3d:f5:6e:87:35:f7:a0:ac:56:56:98:
                    5e:91:98:e3:a0:4b:29:b3:f4:8c:74:c1:2d:6d:fc:
                    28:eb:6b:92:04:48:ba:1c:4e:86:14:c0:13:b3:77:
                    28:ff:f0:a8:39:bc:e6:ad:f7:bb:a7:54:1d:92:21:
                    d3:4a:bc:58:f9:bc:0a:5f:a8:d5:cb:90:bf:31:af:
                    9d:73:c2:ab:f0:25:2d:a9:9f:89:1e:35:09:39:fa:
                    30:5a:13:a3:a4:5a:db:33:f9:64:3d:c0:95:3c:99:
                    87:0c:f2:24:e0:00:d0:39:4b:51:11:98:d1:2c:4e:
                    10:a0:68:48:0d:d6:ed:46:8e:d9:d7:72:e4:17:04:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:90:6B:FA:F3:7B:CB:B9:23:F4:0B:1B:E8:E4:A5:9F:18:CE:55:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/98ac1ad7-32f8-34d7-8048-09340f8a5b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.crl

            X509v3 Authority Key Identifier:
                keyid:22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:02:91:90:cf:15:14:4e:2e:7c:78:c9:30:40:93:c7:ff:
         df:13:6c:61:1d:fa:a7:ab:f2:84:b1:f1:4e:4d:e6:a6:e2:c5:
         4f:91:94:73:eb:97:93:ba:c4:e1:cc:49:ed:71:78:74:54:fe:
         e2:e3:4a:3a:46:58:70:12:cd:5b:5c:f6:98:2b:8b:c9:90:1a:
         71:68:ba:65:cc:85:87:02:42:d9:58:9a:5e:5a:41:ad:5a:2d:
         45:b0:4b:e4:6c:01:db:dc:ac:be:46:02:ef:ae:c4:82:59:c7:
         df:ec:b0:f2:cc:ce:d7:a3:29:4e:e2:97:5e:7a:da:31:9e:f0:
         4a:25:d4:c7:1d:83:66:1a:4e:2b:87:cf:b2:dc:0f:32:fa:58:
         1f:ed:ba:dd:f0:70:17:eb:ed:d5:dd:34:46:83:7e:42:a2:ea:
         79:09:67:f2:29:3a:14:01:f4:a1:fa:db:5a:13:6d:86:4b:5e:
         6a:9c:94:7e:5a:57:5b:52:2d:4b:41:e7:79:11:03:2c:66:6b:
         90:fc:95:43:71:8c:00:95:0b:a7:4f:50:2a:a9:74:83:00:44:
         75:ff:76:7b:cb:45:89:8d:6e:d5:39:af:2e:a7:4f:d9:90:c7:
         57:50:94:4e:40:5d:25:43:1d:6b:f1:c1:82:7d:ff:a5:fd:46:
         b9:c2:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:26:20 2025 by rpki-client