Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31e049ba-f95b-3531-a3f8-a35e77eee6b6.roa
File:                     31e049ba-f95b-3531-a3f8-a35e77eee6b6.roa (raw, json)
Hash identifier:          uUBZDrozupILc4HRt/B4qrlQpRmchyNH+3RKwXosXv4=
Subject key identifier:   A6:AA:CD:0B:83:7A:2C:2A:A8:6C:00:8D:86:DF:A0:F0:BA:DE:D4:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BB45D37DB59B6FD2CA0DA9480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31e049ba-f95b-3531-a3f8-a35e77eee6b6.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     16625
IP address blocks:        23.64.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:37:db:59:b6:fd:2c:a0:da:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=098ec37a-c505-4a81-a4ec-77c64be9bf18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:41:d7:ae:70:66:1b:7d:3f:9e:b0:41:cf:69:
                    4f:7f:c2:d8:d6:3b:d4:f3:83:df:af:e0:2b:cd:60:
                    3e:39:bd:d3:aa:68:9c:e8:71:8a:06:c5:b2:53:eb:
                    db:e0:55:15:07:00:3a:ed:ff:12:83:62:27:f4:8b:
                    5a:6a:f3:a8:e2:d8:45:fa:90:d3:db:07:ff:19:eb:
                    66:93:83:f3:1f:87:65:31:28:02:23:f5:ff:db:fe:
                    60:a4:96:6f:98:28:f1:71:ea:bc:fe:fa:d8:48:bb:
                    81:b6:4c:b0:65:15:1d:ba:21:33:23:a3:67:2f:9d:
                    1e:f2:94:75:19:78:77:72:d8:ba:5d:fc:8a:a5:9c:
                    77:c0:88:ee:91:a4:21:dd:d1:7d:c1:c1:5c:67:3b:
                    a2:d4:18:45:a9:3f:bb:46:0d:a2:d5:1f:e0:86:7e:
                    65:d2:02:89:78:7e:80:7d:32:e1:97:64:75:40:a7:
                    61:ed:b4:23:f6:00:85:2a:3a:64:63:93:70:0b:2a:
                    19:19:9b:45:6d:7c:96:7c:07:7c:65:29:a4:ef:57:
                    f0:9d:9d:e9:29:b7:d2:aa:7f:78:c0:a4:e6:d6:6a:
                    f9:a7:bb:c9:dd:60:48:22:15:25:29:ac:bf:56:3b:
                    49:e7:5f:6e:d2:56:c8:e1:2a:95:9f:45:2c:60:dd:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AA:CD:0B:83:7A:2C:2A:A8:6C:00:8D:86:DF:A0:F0:BA:DE:D4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31e049ba-f95b-3531-a3f8-a35e77eee6b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.64.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:14:b2:c2:a3:1f:2d:90:71:a9:be:96:c2:80:5b:23:f2:
         b2:51:ca:e6:29:4f:33:bf:87:f8:ab:bf:64:59:e7:e3:e6:5d:
         ba:e9:24:5e:fd:21:14:2e:9b:44:97:7a:b8:35:77:7d:d3:3c:
         50:80:89:fe:f9:84:80:70:d2:9a:5a:f1:ae:84:9d:1d:fd:a4:
         9c:03:e0:65:49:ba:45:63:af:ee:60:24:bc:e4:97:ec:79:15:
         06:2f:bb:18:c8:71:f5:03:f0:95:84:bc:e5:28:9c:f6:3a:90:
         ad:71:31:65:eb:c0:30:99:0e:7c:c5:b9:10:b8:52:75:95:db:
         05:56:8d:e0:62:63:b1:ff:18:90:0f:c9:e5:83:15:9f:d2:f1:
         cd:5f:e9:f0:93:73:74:29:de:f2:cd:3b:e8:92:00:04:25:b4:
         b6:bf:37:37:c2:85:f8:2f:78:a8:ce:64:b8:a2:e5:a6:6f:82:
         55:ee:f4:b0:75:09:e3:00:7a:f0:61:18:c9:9b:2b:5b:0e:20:
         58:e4:3d:d5:02:f0:9d:e8:f8:17:f3:1d:25:2f:78:dc:7a:c2:
         61:c5:d1:1d:a1:1f:8b:cb:2e:f2:4f:ea:8f:a0:c5:ac:c6:f2:
         bf:3d:2f:dc:4a:8c:4d:31:60:47:26:e7:ca:e5:3a:01:0c:2f:
         eb:23:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:02 2025 by rpki-client