Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39684af-ec3a-368b-8d03-50bb9d13205b.roa
File:                     f39684af-ec3a-368b-8d03-50bb9d13205b.roa (raw, json)
Hash identifier:          soQVotJNyBBXpmO7xcOGBdWwQzB/+45tSwMRXi7wOt0=
Subject key identifier:   8F:68:53:4F:CD:7A:B9:CF:CE:A4:D2:05:4E:8C:9E:0F:61:D6:CC:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BBE4053DFE80AC5A7361BF740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39684af-ec3a-368b-8d03-50bb9d13205b.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     16625
IP address blocks:        23.34.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:53:df:e8:0a:c5:a7:36:1b:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=5d32269c-e014-4812-99d2-29e82fbf45a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:0a:70:7d:80:ca:7c:05:a7:9a:4e:93:dd:
                    68:e0:cd:b6:70:6a:80:51:f7:eb:c6:7b:57:f5:63:
                    cc:79:50:29:9c:54:e0:4f:63:4c:2f:96:f8:15:38:
                    4a:e3:37:25:81:df:00:34:5d:c8:29:8b:a4:34:b3:
                    dc:8f:15:2e:5a:75:d8:bb:4e:d5:4f:51:bd:eb:a8:
                    9c:d6:68:5d:21:fd:ce:8b:0b:d9:a5:4e:c1:69:9a:
                    ce:5e:d6:4f:50:6d:38:92:6c:cc:9c:0a:7d:33:b4:
                    f1:9b:9d:f0:e6:41:35:c1:2e:1a:67:b5:a0:7d:81:
                    cd:23:b0:fc:32:ab:79:98:94:1b:99:ba:d5:aa:e2:
                    ca:d7:d0:93:08:1d:bf:7f:7e:79:c9:a0:f6:a5:ad:
                    c1:e8:85:ac:d4:9b:1a:2a:ca:51:0a:b5:c8:39:dd:
                    86:c9:eb:ae:dc:57:7b:09:ad:cd:79:2d:59:4c:c3:
                    67:e6:09:fa:8c:5f:2a:1d:e1:67:25:5d:78:ba:05:
                    6b:17:2f:88:1f:57:1f:2d:64:c9:10:d9:09:9e:a8:
                    92:8d:8a:ed:c8:54:d4:5b:8f:5d:83:b8:1f:6d:d4:
                    32:11:d8:4b:fa:7d:92:bd:a6:b7:8d:d7:57:a4:40:
                    a8:b5:14:13:ca:6c:01:69:4c:76:8d:0a:da:7d:12:
                    44:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:68:53:4F:CD:7A:B9:CF:CE:A4:D2:05:4E:8C:9E:0F:61:D6:CC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39684af-ec3a-368b-8d03-50bb9d13205b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.34.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:ba:52:9f:91:97:bb:fd:d9:65:3d:20:db:4f:fd:14:f6:
         bf:44:f9:4f:4f:60:7c:5b:c3:ec:55:89:81:72:73:ed:b2:d5:
         75:eb:8a:0d:5d:77:57:06:3e:24:24:82:a1:6d:af:d4:7f:d1:
         6c:4e:66:39:15:ed:4c:3b:80:a3:2e:38:31:6b:5f:59:f3:a8:
         cb:ee:69:06:05:9f:c6:80:0f:8e:0f:7c:73:7a:f7:ee:98:d4:
         0e:bd:cf:47:79:25:57:e4:da:42:f6:44:a9:c7:0a:27:5e:ab:
         0a:13:27:b9:67:3c:c1:f1:df:31:f1:37:49:07:e1:89:62:46:
         7a:5e:da:ae:24:73:fb:37:64:a8:8e:7e:55:28:01:28:62:5b:
         bb:47:db:34:f0:b8:c7:6f:70:3f:3b:01:89:1f:95:04:64:8b:
         4e:80:52:b4:d9:4d:60:82:86:82:f8:66:a8:55:db:f3:2c:b1:
         29:51:1d:68:39:6b:f5:0a:1b:2e:1e:da:b2:d2:6f:5d:fb:84:
         67:d9:cf:f9:d3:80:13:13:9e:3c:33:54:e9:5b:3c:04:58:e4:
         70:b0:17:2e:f9:1e:fe:3c:13:58:6b:fa:18:b4:da:fb:20:c8:
         e3:94:d7:18:69:d5:2f:1b:1f:66:bd:bb:a9:0b:17:f8:6a:1b:
         e2:cf:ea:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:12:36 2025 by rpki-client