Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/bc11f7d0-02b0-38d3-b9ed-0bc35107ae1f.roa
File:                     bc11f7d0-02b0-38d3-b9ed-0bc35107ae1f.roa (raw, json)
Hash identifier:          VwYTV4BdV4Jy2csy3N+zepA3oXvurMxob5t2XgNBk7g=
Subject key identifier:   F3:51:E1:A9:B9:EA:C4:B5:37:A1:A2:29:E2:0F:2A:45:6E:FE:3E:D3
Certificate issuer:       /CN=13880c00-8cd5-4204-95fb-7c54c6eab2d9
Certificate serial:       010D0C9F4328584BAD624F891CA3FBBFEAF49400
Authority key identifier: FD:81:75:48:C6:60:C7:EE:C5:71:1D:D2:E0:52:4F:13:F0:CA:50:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/bc11f7d0-02b0-38d3-b9ed-0bc35107ae1f.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     18783
IP address blocks:        23.130.172.0/24 maxlen: 24
                          142.248.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/13880c00-8cd5-4204-95fb-7c54c6eab2d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/13880c00-8cd5-4204-95fb-7c54c6eab2d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:4f:89:1c:a3:fb:bf:ea:f4:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13880c00-8cd5-4204-95fb-7c54c6eab2d9
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=9bcbdaab-d4c0-4fef-aec7-b75998c5ab4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:98:cc:54:8c:8f:ba:8b:2c:70:89:f0:d9:c9:
                    ba:17:b1:71:95:95:18:a9:58:3e:44:d5:a8:12:2e:
                    a7:16:c5:a6:7d:6e:52:25:6e:36:58:af:db:c0:6a:
                    72:ae:a9:96:8a:22:a1:df:ae:68:92:b9:dd:b0:ea:
                    ef:27:2d:c4:4c:e8:86:b6:44:42:de:e2:99:79:b3:
                    3f:6e:c4:7c:5a:9b:95:bd:ee:f0:bc:d2:62:5a:8b:
                    f1:55:39:5a:ad:1b:b0:e4:c2:6d:28:da:b6:22:6d:
                    69:9f:27:c0:c2:52:d8:15:07:22:51:59:d1:be:7e:
                    ed:44:c1:82:fd:c9:9a:b6:8a:99:96:d4:58:ba:3b:
                    70:bc:96:3e:d5:55:0f:36:21:61:b7:01:d8:4d:84:
                    87:7e:84:ec:58:a9:fe:2b:8a:04:43:b5:61:5b:b2:
                    c2:95:1c:a7:26:56:cf:1a:e0:83:53:f1:bb:18:9a:
                    04:65:3b:b0:a2:ad:3f:ed:1a:72:85:5a:3d:64:61:
                    ef:c2:85:bc:55:a7:d6:fe:63:f6:6f:c0:85:ec:5b:
                    aa:22:bc:18:13:3e:d9:1c:61:81:4e:9e:ce:a7:27:
                    d8:6f:a0:6f:69:de:3a:56:37:5a:f5:9a:40:af:2a:
                    35:da:40:96:07:5f:1f:e7:ed:a2:40:09:6b:83:de:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:51:E1:A9:B9:EA:C4:B5:37:A1:A2:29:E2:0F:2A:45:6E:FE:3E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/bc11f7d0-02b0-38d3-b9ed-0bc35107ae1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/13880c00-8cd5-4204-95fb-7c54c6eab2d9.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:75:48:C6:60:C7:EE:C5:71:1D:D2:E0:52:4F:13:F0:CA:50:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.172.0/24
                  142.248.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:2b:48:57:13:34:c5:76:ae:c7:0d:0f:86:18:2c:9d:87:3a:
         26:df:f1:fa:49:1f:63:83:d9:10:76:41:73:60:d7:16:2e:21:
         99:6e:83:76:81:a4:f1:bc:c9:95:e8:cf:7b:29:cd:c4:58:0b:
         08:d4:af:e0:79:0b:6c:5f:5c:21:b9:ca:7b:66:30:9f:35:f9:
         0f:0f:ec:b3:0d:90:55:bf:0d:13:16:03:0a:3d:b5:c9:de:8c:
         92:ea:54:2e:c9:88:09:f0:ea:41:27:b9:80:1c:1b:12:d5:17:
         fb:f9:f0:a9:83:7c:13:5f:d7:73:1f:c9:8c:21:e7:44:27:b4:
         9b:98:ab:5f:32:60:0d:4f:4b:6f:d9:67:39:5b:b7:a1:d0:49:
         65:38:a8:12:9e:eb:df:51:14:5a:62:51:97:4c:2c:68:79:32:
         76:61:b9:c6:17:88:5b:84:1c:e7:3e:22:93:c6:47:ab:86:89:
         d7:62:a9:a6:60:4d:99:64:10:1d:55:97:81:e6:41:14:f0:5a:
         88:6a:5d:56:73:91:a6:a1:1a:ad:65:67:f7:50:08:0e:37:0f:
         22:d1:4d:c8:92:6e:69:56:35:6c:fa:95:19:80:ce:66:13:93:
         b0:8f:3d:05:91:83:c5:11:82:61:00:05:47:d1:45:36:c4:90:
         6e:28:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:30:49 2025 by rpki-client