Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/03c5f6b9-43d4-3675-b1f7-711c78cf6b5b.roa
File:                     03c5f6b9-43d4-3675-b1f7-711c78cf6b5b.roa (raw, json)
Hash identifier:          P8B7bCEOBsx9aVKWdMcPY5BCdV/OTZrpjEZ0KKwTcN8=
Subject key identifier:   2F:02:2A:5B:A0:C2:9D:86:34:78:C9:40:24:90:5F:33:9E:E5:CF:FA
Certificate issuer:       /CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
Certificate serial:       010D0C9F4328584BAED61E7A814DE628AC7A6700
Authority key identifier: 05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/03c5f6b9-43d4-3675-b1f7-711c78cf6b5b.roa
Signing time:             Wed 29 Oct 2025 13:29:47 +0000
ROA not before:           Wed 29 Oct 2025 13:29:47 +0000
ROA not after:            Tue 27 Jan 2026 14:29:47 +0000
asID:                     46606
IP address blocks:        23.91.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:d6:1e:7a:81:4d:e6:28:ac:7a:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
        Validity
            Not Before: Oct 29 13:29:47 2025 GMT
            Not After : Jan 27 14:29:47 2026 GMT
        Subject: CN=f4e1e3d7-bd4c-4eb1-96a9-5bbce2a322c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:57:60:fa:8d:d9:dd:f1:aa:c5:86:44:33:
                    0d:28:2f:ce:30:87:ae:4a:79:4a:5a:9e:51:cb:65:
                    54:37:50:80:69:fc:9f:a8:a3:03:58:45:c5:3d:6a:
                    0c:da:f8:2a:e6:0d:ed:11:4f:78:7d:90:80:b8:d8:
                    10:41:b0:34:43:3b:ba:78:4d:c4:d5:4f:aa:2f:be:
                    91:03:3a:76:4c:2c:f5:71:98:ec:2c:7d:ff:c5:26:
                    ac:e8:4e:df:bb:ba:a3:73:df:d9:ec:89:45:b5:76:
                    df:ab:2c:4a:39:55:9d:74:b5:0d:c1:43:d6:af:36:
                    f4:e9:3a:dc:7d:bf:42:ce:0c:9b:56:23:5b:69:a6:
                    7d:6f:68:bc:c1:13:26:46:93:82:de:f5:9c:e2:35:
                    57:f1:75:cb:72:a1:33:bd:16:60:f3:32:87:83:7d:
                    33:2a:41:af:80:59:b9:af:8e:f1:e7:52:30:9f:26:
                    81:4a:1e:b3:ff:3c:e8:1e:1c:8e:a5:cd:24:4b:b2:
                    cc:a9:e8:56:19:df:3f:2d:51:3b:8a:71:1c:d4:06:
                    6e:5f:b2:a5:b6:60:fb:96:74:67:09:74:af:de:96:
                    67:46:07:61:b1:09:98:1c:48:dc:04:e1:d1:f4:00:
                    9f:13:60:32:82:09:e7:3f:9a:20:c1:d7:ee:74:e8:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:2A:5B:A0:C2:9D:86:34:78:C9:40:24:90:5F:33:9E:E5:CF:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/03c5f6b9-43d4-3675-b1f7-711c78cf6b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl

            X509v3 Authority Key Identifier:
                keyid:05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1b:84:53:ff:76:b7:5b:54:10:5f:db:89:d9:b4:d4:3d:d6:
         f8:72:d7:b1:90:58:0d:90:90:56:ed:90:b8:aa:09:d0:d2:8c:
         df:5a:4e:22:31:19:ea:e1:94:31:ce:3c:c1:57:2a:2b:5b:b5:
         c5:5a:dc:d2:88:1a:7c:01:97:8f:f9:dd:4a:45:da:4f:83:43:
         5b:68:a7:25:a3:77:b8:05:7a:5a:7d:6b:d6:e4:8b:f4:79:8c:
         88:96:b3:b5:be:d9:2b:4f:1e:56:46:28:f6:db:64:cd:d1:b2:
         c1:6c:ef:85:23:fe:04:ed:48:85:c2:bb:48:89:ce:a0:22:76:
         1a:8a:07:fb:b9:87:49:43:8c:cd:a8:89:88:bd:a8:2f:fa:80:
         65:59:be:88:ec:be:6d:0d:85:26:b0:a3:db:74:42:c0:86:6d:
         56:f8:85:6a:e0:ae:f6:0d:03:f3:9b:60:f0:fc:e0:ba:c0:5d:
         8f:01:0f:37:8d:56:77:d1:d2:56:8b:1f:a5:d1:95:a4:09:6a:
         f6:23:c9:68:d9:ad:7d:56:87:85:ec:53:9d:d1:43:23:b3:03:
         f4:32:58:e7:ef:0e:b0:0c:f9:87:c0:7a:19:d2:49:f4:51:83:
         d9:7a:aa:0c:c6:a1:60:b2:4b:1b:43:2e:6b:c7:4f:0f:c6:d7:
         8b:94:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:13 2025 by rpki-client