Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcfc224c-3699-36f5-bc70-e4a97042040f.roa
File:                     fcfc224c-3699-36f5-bc70-e4a97042040f.roa (raw, json)
Hash identifier:          UWY++TEkQZgTN2sIRoalRKXH8CcywHGlY0kLEz5rL5Q=
Subject key identifier:   09:2C:86:64:1A:52:93:81:DA:EF:FB:0B:74:36:38:5F:CF:72:9F:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA667CB14E6271B8CBE247700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcfc224c-3699-36f5-bc70-e4a97042040f.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     20940
IP address blocks:        23.200.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:cb:14:e6:27:1b:8c:be:24:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=afc3e14f-72db-417f-aef6-a91ec4f22181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:80:91:d1:a3:31:94:2d:98:9f:94:21:86:2a:
                    08:06:33:b3:72:5b:e9:01:35:83:65:ac:8f:6a:e0:
                    59:74:87:2c:50:62:e5:fc:b3:13:d2:fe:03:82:de:
                    98:ed:75:5f:17:aa:fe:41:43:f6:2e:ac:88:1c:c6:
                    a9:92:8a:b9:a7:23:23:80:9c:d3:f8:27:ed:3d:b4:
                    c7:24:71:d7:ba:3b:26:ce:8c:47:3a:bc:76:47:eb:
                    8f:41:4a:e8:4f:0b:2f:9f:8c:42:c5:54:4f:61:c7:
                    e0:f0:5e:61:c8:82:91:1f:e4:e5:98:d9:db:54:c5:
                    bf:73:8a:60:59:63:3a:79:9d:aa:b2:f9:3c:d1:b3:
                    ca:d5:8b:eb:d8:d6:ac:ac:1a:0e:44:38:95:c3:38:
                    fd:6e:87:50:c2:7b:6b:07:e2:18:7f:46:dd:4f:6c:
                    b5:07:d2:bf:a9:29:7a:ec:8b:97:1a:88:84:ba:f4:
                    d0:6e:9b:93:7b:7b:d7:1c:aa:d8:9a:6c:a3:8b:5a:
                    4a:6d:58:57:04:2c:9a:93:26:13:44:ae:22:27:b2:
                    6c:f9:0a:06:29:5e:a3:81:f7:cd:de:25:ca:6f:e7:
                    f7:20:7a:d8:61:36:b5:21:fe:3e:83:cd:c1:b5:2b:
                    82:80:94:f6:5c:46:83:93:30:85:10:52:dd:f8:35:
                    21:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2C:86:64:1A:52:93:81:DA:EF:FB:0B:74:36:38:5F:CF:72:9F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcfc224c-3699-36f5-bc70-e4a97042040f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:96:4e:ae:9c:26:dd:f8:4a:5e:9a:c3:af:e0:40:96:b7:e6:
         70:b4:ed:32:19:e5:d5:51:8d:19:bd:97:34:51:4b:e5:0c:62:
         12:20:ad:6b:5b:97:ae:9f:54:dd:7b:c6:18:da:ce:22:b4:a8:
         5a:7b:1e:f0:24:aa:f0:da:74:69:b4:59:ca:86:a4:7e:28:f2:
         fb:97:1a:42:61:82:87:01:e9:b7:7e:f1:9a:9b:d8:99:fb:58:
         ea:51:75:6b:98:a5:fd:a8:b1:19:d3:c5:02:8c:ba:c5:9f:95:
         6f:3e:45:16:de:f7:85:91:0c:a3:05:59:53:42:28:af:4b:6b:
         20:08:ca:5a:22:78:ed:92:d3:6b:33:29:66:11:59:a9:50:b0:
         af:47:42:c3:07:0a:92:14:fb:3e:77:17:fb:8f:4a:1e:68:44:
         aa:97:fb:c1:a6:b9:08:c1:5d:46:82:49:59:ea:13:ca:86:a9:
         38:04:07:53:35:26:46:35:ab:03:5e:82:05:bc:34:d8:9b:ed:
         fc:83:d8:32:e4:4a:c6:15:4e:a2:75:27:78:e1:4a:35:45:a8:
         fa:4c:d7:a1:25:28:f3:cf:91:3f:d9:07:74:1a:04:7d:62:c0:
         ec:0f:84:57:24:07:01:a2:cb:20:96:e3:a0:72:57:76:f1:27:
         30:c4:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:36:48 2025 by rpki-client