Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a97c544-9fcf-3017-9e8e-82bd63b3356e.roa
File:                     1a97c544-9fcf-3017-9e8e-82bd63b3356e.roa (raw, json)
Hash identifier:          IogD/X2w5a1ZSDbF2a3I7xR1bJXBXV1JwJsCLd9cjGA=
Subject key identifier:   8C:F8:7B:61:5F:CC:C4:17:B6:AA:64:CD:BB:78:0B:AA:FC:7B:7F:AE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE083792F1CF1BD1EEA360
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a97c544-9fcf-3017-9e8e-82bd63b3356e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        198.45.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:08:37:92:f1:cf:1b:d1:ee:a3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=212757aa-c858-46d3-8343-b0245e87f5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:13:61:8a:a9:a8:23:6c:46:8e:58:5f:59:
                    20:6f:a2:53:b9:ea:68:44:1a:5d:6f:12:63:2f:7c:
                    bd:36:ad:83:46:92:dd:77:26:71:fe:ee:28:36:71:
                    cb:49:74:cb:fc:9c:ac:fd:2b:0c:c5:24:9d:a1:0d:
                    e4:5a:c9:8a:c4:69:1e:80:75:ca:ae:3f:c0:2e:bc:
                    0f:00:33:dd:d6:ec:cf:3c:4d:eb:10:f1:54:6e:3b:
                    db:43:1d:b1:4f:ff:30:81:35:27:ce:77:43:6f:2e:
                    27:6b:41:f0:1c:20:37:7b:26:f3:b1:43:84:ff:9f:
                    ab:91:89:be:0a:61:2a:37:97:8f:5b:78:17:d1:c5:
                    b2:af:9a:b7:bc:6f:a8:d0:3d:57:19:bb:08:32:57:
                    cc:84:ed:8e:65:37:59:38:13:25:4c:fa:c0:1a:77:
                    c4:41:03:fe:c7:71:51:75:01:1c:4b:d9:22:93:8a:
                    35:09:47:ea:cf:82:f3:31:a2:96:63:f6:38:9e:57:
                    29:57:af:53:04:4b:9f:7b:c6:13:6c:b4:75:a2:cb:
                    89:ee:40:15:a4:80:50:a8:45:c5:b0:df:bd:7b:39:
                    c7:05:04:70:8b:94:03:ca:a8:75:59:4f:b1:37:c9:
                    16:04:6e:61:9f:85:a7:6a:84:90:97:94:92:b2:d9:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F8:7B:61:5F:CC:C4:17:B6:AA:64:CD:BB:78:0B:AA:FC:7B:7F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a97c544-9fcf-3017-9e8e-82bd63b3356e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ae:2d:71:55:9e:5a:5c:6e:34:0a:9c:68:79:40:34:32:99:
         5f:fd:9b:9a:5f:59:a3:16:16:5d:7a:5a:d6:75:1d:12:4d:4a:
         11:cd:aa:a0:6f:6f:74:15:0a:f0:db:b7:54:a4:31:43:87:d6:
         9b:b5:43:6f:46:cf:8d:19:ea:29:74:f8:60:07:4a:87:12:dc:
         5b:86:23:5b:35:99:4a:30:b3:f1:3f:d8:94:61:01:7b:1a:ee:
         50:d9:a2:6d:a9:07:1b:eb:24:11:ee:38:31:1c:07:e1:54:f7:
         c2:59:f6:65:16:e2:2a:4e:4b:b7:a1:6c:39:b7:49:f9:a3:9a:
         4a:7b:5a:30:84:77:a5:e0:10:6a:63:31:16:f9:0a:06:c0:9e:
         28:5e:78:bc:20:df:c0:cd:27:73:03:8c:0f:f5:af:bf:8c:fd:
         a1:a0:e9:0b:13:7d:2f:eb:34:9a:17:95:d6:d1:93:57:25:58:
         b4:fd:d4:f6:8e:ef:73:d4:92:6c:1d:bf:ec:87:15:26:f2:bb:
         c8:ee:ce:10:19:f0:fb:68:7d:7d:9a:64:77:e8:a4:28:dd:33:
         04:eb:11:3b:f7:ac:08:5a:fe:34:bd:1b:ee:9d:11:1c:d6:a7:
         7f:92:c0:6b:b5:a3:27:c4:5c:9d:d5:06:b9:ca:4f:59:c8:e8:
         fb:2a:bc:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgg3kvHPG9Huo2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MjEyNzU3YWEtYzg1OC00NmQzLTgzNDMtYjAyNDVlODdmNWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGQTYYqpqCNsRo5YX1kgb6JTuepoRBpdbxJj
L3y9Nq2DRpLddyZx/u4oNnHLSXTL/Jys/SsMxSSdoQ3kWsmKxGkegHXKrj/ALrwP
ADPd1uzPPE3rEPFUbjvbQx2xT/8wgTUnzndDby4na0HwHCA3eybzsUOE/5+rkYm+
CmEqN5ePW3gX0cWyr5q3vG+o0D1XGbsIMlfMhO2OZTdZOBMlTPrAGnfEQQP+x3FR
dQEcS9kik4o1CUfqz4LzMaKWY/Y4nlcpV69TBEufe8YTbLR1osuJ7kAVpIBQqEXF
sN+9eznHBQRwi5QDyqh1WU+xN8kWBG5hn4WnaoSQl5SSstkncwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIz4e2FfzMQXtqpkzbt4C6r8e3+uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWE5N2M1NDQtOWZjZi0z
MDE3LTllOGUtODJiZDYzYjMzNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi38MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJiuLXFVnlpcbjQKnGh5QDQymV/9m5pfWaMWFl16WtZ1HRJNShHNqqBv
b3QVCvDbt1SkMUOH1pu1Q29Gz40Z6il0+GAHSocS3FuGI1s1mUows/E/2JRhAXsa
7lDZom2pBxvrJBHuODEcB+FU98JZ9mUW4ipOS7ehbDm3Sfmjmkp7WjCEd6XgEGpj
MRb5CgbAniheeLwg38DNJ3MDjA/1r7+M/aGg6QsTfS/rNJoXldbRk1clWLT91PaO
73PUkmwdv+yHFSbyu8juzhAZ8PtofX2aZHfopCjdMwTrETv3rAha/jS9G+6dERzW
p3+SwGu1oyfEXJ3VBrnKT1nI6PsqvG4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:08 2025 by rpki-client