Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d244ba7f-f314-37ec-89fd-51badbdfcb25.roa
File:                     d244ba7f-f314-37ec-89fd-51badbdfcb25.roa (raw, json)
Hash identifier:          5+AQ3Blacgixu9oXif+kRRzhLR72AcMGDM9DonO27/E=
Subject key identifier:   03:BF:A7:C1:6D:89:2A:54:BB:88:2A:08:A7:96:25:1C:B6:CF:A4:32
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B583C7B3DDB51186757BE2C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d244ba7f-f314-37ec-89fd-51badbdfcb25.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     33489
IP address blocks:        2001:558:150::/44 maxlen: 44
                          2001:558:190::/44 maxlen: 44
                          2001:558:2e0::/44 maxlen: 44
                          2001:558:4fec::/48 maxlen: 48
                          2001:558:5003::/48 maxlen: 48
                          2001:558:5008::/48 maxlen: 48
                          2001:558:5015::/48 maxlen: 48
                          2001:558:6041::/48 maxlen: 48
                          2001:558:6043::/48 maxlen: 48
                          2001:558:6044::/48 maxlen: 48
                          2001:558:fe1d::/48 maxlen: 48
                          2001:558:fe27::/48 maxlen: 48
                          2001:558:fe35::/48 maxlen: 48
                          2001:559:ac::/48 maxlen: 48
                          2001:559:df::/48 maxlen: 48
                          2001:559:164::/48 maxlen: 48
                          2001:559:178::/48 maxlen: 48
                          2001:559:1eb::/48 maxlen: 48
                          2001:559:1ec::/48 maxlen: 48
                          2001:559:28b::/48 maxlen: 48
                          2001:559:307::/48 maxlen: 48
                          2001:559:315::/48 maxlen: 48
                          2001:559:317::/48 maxlen: 48
                          2001:559:32f::/48 maxlen: 48
                          2001:559:332::/48 maxlen: 48
                          2001:559:36e::/48 maxlen: 48
                          2001:559:3d0::/48 maxlen: 48
                          2001:559:3e8::/48 maxlen: 48
                          2001:559:3f9::/48 maxlen: 48
                          2001:559:430::/48 maxlen: 48
                          2001:559:456::/48 maxlen: 48
                          2001:559:47f::/48 maxlen: 48
                          2001:559:4f8::/48 maxlen: 48
                          2001:559:516::/48 maxlen: 48
                          2001:559:79f::/48 maxlen: 48
                          2001:559:7f2::/48 maxlen: 48
                          2001:559:5002::/48 maxlen: 48
                          2001:559:5003::/48 maxlen: 48
                          2001:559:5004::/48 maxlen: 48
                          2001:559:80fa::/48 maxlen: 48
                          2001:559:811a::/48 maxlen: 48
                          2001:559:8125::/48 maxlen: 48
                          2001:559:817f::/48 maxlen: 48
                          2001:559:819a::/48 maxlen: 48
                          2001:559:81e8::/48 maxlen: 48
                          2001:559:83a9::/48 maxlen: 48
                          2001:559:844e::/48 maxlen: 48
                          2001:559:84c1::/48 maxlen: 48
                          2001:559:84ed::/48 maxlen: 48
                          2001:559:85c0::/48 maxlen: 48
                          2001:559:8651::/48 maxlen: 48
                          2001:559:8795::/48 maxlen: 48
                          2001:559:87da::/48 maxlen: 48
                          2001:559:c072::/48 maxlen: 48
                          2001:559:c0d9::/48 maxlen: 48
                          2001:559:c0e2::/48 maxlen: 48
                          2001:559:c115::/48 maxlen: 48
                          2001:559:c11f::/48 maxlen: 48
                          2001:559:c127::/48 maxlen: 48
                          2001:559:c168::/48 maxlen: 48
                          2001:559:c16c::/48 maxlen: 48
                          2001:559:c190::/48 maxlen: 48
                          2001:559:c193::/48 maxlen: 48
                          2001:559:c1af::/48 maxlen: 48
                          2001:559:c1bf::/48 maxlen: 48
                          2001:559:c3ca::/48 maxlen: 48
                          2001:559:c3ff::/48 maxlen: 48
                          2001:559:c47a::/48 maxlen: 48
                          2001:559:c4f3::/48 maxlen: 48
                          2001:559:c544::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:7b:3d:db:51:18:67:57:be:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=85f56684-87d3-4b98-9173-639c7db37e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d0:f8:58:ee:8b:40:1d:b4:ed:03:86:bd:4b:
                    04:b9:37:48:3d:36:fc:c0:db:e8:2c:86:a0:d5:26:
                    d8:db:dd:37:f0:3e:3e:f1:0a:d1:45:f4:11:b2:69:
                    e0:be:5f:0d:0b:bc:76:a5:60:2d:83:d7:95:6d:01:
                    51:38:53:d0:a0:40:7e:04:80:c2:c1:53:b8:0c:60:
                    a8:62:68:2f:fc:54:df:39:86:7f:b9:62:44:69:55:
                    05:7d:26:53:09:65:8d:8d:ec:e7:45:ea:15:b2:c7:
                    82:0e:79:04:8d:4e:0a:b9:1e:7b:d3:33:12:6c:7d:
                    02:21:c5:f5:58:7d:93:3d:fc:6a:34:00:a1:35:99:
                    c4:c0:e9:ab:79:c7:bf:c7:fa:ad:8a:8f:36:ab:1b:
                    9a:b5:7e:9e:12:09:7d:80:34:72:75:84:b2:59:5e:
                    65:0d:ab:30:60:eb:21:7e:de:d6:09:a6:21:bf:6a:
                    67:a0:f7:58:d4:b9:85:e4:8d:79:50:27:c9:94:7e:
                    fc:76:b1:82:6f:80:33:37:52:af:71:07:7d:e7:fd:
                    13:67:0f:df:d4:ee:03:7a:1e:a2:69:53:c8:3c:11:
                    0c:90:3b:2e:3b:fe:39:fc:88:44:df:66:eb:a5:c1:
                    af:25:50:b8:78:67:2d:b2:7b:c5:6a:02:80:0e:3e:
                    ff:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BF:A7:C1:6D:89:2A:54:BB:88:2A:08:A7:96:25:1C:B6:CF:A4:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d244ba7f-f314-37ec-89fd-51badbdfcb25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:150::/44
                  2001:558:190::/44
                  2001:558:2e0::/44
                  2001:558:4fec::/48
                  2001:558:5003::/48
                  2001:558:5008::/48
                  2001:558:5015::/48
                  2001:558:6041::/48
                  2001:558:6043::-2001:558:6044:ffff:ffff:ffff:ffff:ffff
                  2001:558:fe1d::/48
                  2001:558:fe27::/48
                  2001:558:fe35::/48
                  2001:559:ac::/48
                  2001:559:df::/48
                  2001:559:164::/48
                  2001:559:178::/48
                  2001:559:1eb::-2001:559:1ec:ffff:ffff:ffff:ffff:ffff
                  2001:559:28b::/48
                  2001:559:307::/48
                  2001:559:315::/48
                  2001:559:317::/48
                  2001:559:32f::/48
                  2001:559:332::/48
                  2001:559:36e::/48
                  2001:559:3d0::/48
                  2001:559:3e8::/48
                  2001:559:3f9::/48
                  2001:559:430::/48
                  2001:559:456::/48
                  2001:559:47f::/48
                  2001:559:4f8::/48
                  2001:559:516::/48
                  2001:559:79f::/48
                  2001:559:7f2::/48
                  2001:559:5002::-2001:559:5004:ffff:ffff:ffff:ffff:ffff
                  2001:559:80fa::/48
                  2001:559:811a::/48
                  2001:559:8125::/48
                  2001:559:817f::/48
                  2001:559:819a::/48
                  2001:559:81e8::/48
                  2001:559:83a9::/48
                  2001:559:844e::/48
                  2001:559:84c1::/48
                  2001:559:84ed::/48
                  2001:559:85c0::/48
                  2001:559:8651::/48
                  2001:559:8795::/48
                  2001:559:87da::/48
                  2001:559:c072::/48
                  2001:559:c0d9::/48
                  2001:559:c0e2::/48
                  2001:559:c115::/48
                  2001:559:c11f::/48
                  2001:559:c127::/48
                  2001:559:c168::/48
                  2001:559:c16c::/48
                  2001:559:c190::/48
                  2001:559:c193::/48
                  2001:559:c1af::/48
                  2001:559:c1bf::/48
                  2001:559:c3ca::/48
                  2001:559:c3ff::/48
                  2001:559:c47a::/48
                  2001:559:c4f3::/48
                  2001:559:c544::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:9b:0b:d5:f2:09:07:ea:e8:7d:e0:58:67:0c:3c:d3:27:a6:
         c1:91:e0:4f:83:69:7f:a9:61:e5:12:d7:b2:8e:15:03:2a:20:
         29:67:63:f1:f8:b5:f4:04:36:ec:88:b2:e2:be:19:68:e8:3b:
         3f:1e:9d:59:91:82:32:fa:80:07:2a:6f:de:14:9e:5c:a4:69:
         66:23:13:18:61:97:b4:d4:45:e5:37:a0:8e:25:1a:20:4b:14:
         f5:56:d1:fc:49:73:80:28:07:79:a8:41:3a:13:1a:14:31:3b:
         96:3d:42:0b:c3:0d:ef:eb:a8:ae:e5:bd:da:4d:61:cd:f9:c0:
         a1:4c:29:f0:8e:94:ad:53:5f:ae:c9:ff:4d:a0:0b:22:7e:7c:
         f5:6b:e7:31:51:07:55:a6:9a:f3:6f:b7:f2:10:2f:ae:d5:15:
         2f:3f:8f:5c:28:1f:45:82:49:4a:ca:86:53:b8:87:f2:eb:db:
         5f:9c:d8:0c:f8:37:e0:50:7c:31:c0:bc:c2:60:90:5c:66:16:
         00:30:46:11:66:4e:bf:f8:69:3e:f0:0c:00:64:0f:87:cb:3b:
         04:a3:32:fe:c3:2d:db:b0:f9:50:b1:44:ca:8b:96:30:6a:16:
         f8:9b:ad:fd:3b:91:a3:35:1d:2f:70:66:02:6d:5c:70:6e:48:
         a3:10:b3:b9
-----BEGIN CERTIFICATE-----
MIIIujCCB6KgAwIBAgIUAQ0Mn0MoWEtYPHs921EYZ1e+LAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
ODVmNTY2ODQtODdkMy00Yjk4LTkxNzMtNjM5YzdkYjM3ZTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9D4WO6LQB207QOGvUsEuTdIPTb8wNvoLIag
1SbY29038D4+8QrRRfQRsmngvl8NC7x2pWAtg9eVbQFROFPQoEB+BIDCwVO4DGCo
Ymgv/FTfOYZ/uWJEaVUFfSZTCWWNjeznReoVsseCDnkEjU4KuR570zMSbH0CIcX1
WH2TPfxqNAChNZnEwOmrece/x/qtio82qxuatX6eEgl9gDRydYSyWV5lDaswYOsh
ft7WCaYhv2pnoPdY1LmF5I15UCfJlH78drGCb4AzN1KvcQd95/0TZw/f1O4Deh6i
aVPIPBEMkDsuO/45/IhE32brpcGvJVC4eGctsnvFagKADj7/lwIDAQABo4IFzDCC
BcgwHQYDVR0OBBYEFAO/p8FtiSpUu4gqCKeWJRy2z6QyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDI0NGJhN2YtZjMxNC0z
N2VjLTg5ZmQtNTFiYWRiZGZjYjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMIIClAYIKwYBBQUHAQcBAf8EggKDMIICfzCCAnsEAgACMIIC
cwMHBCABBVgBUAMHBCABBVgBkAMHBCABBVgC4AMHACABBVhP7AMHACABBVhQAwMH
ACABBVhQCAMHACABBVhQFQMHACABBVhgQTASAwcAIAEFWGBDAwcAIAEFWGBEAwcA
IAEFWP4dAwcAIAEFWP4nAwcAIAEFWP41AwcAIAEFWQCsAwcAIAEFWQDfAwcAIAEF
WQFkAwcAIAEFWQF4MBIDBwAgAQVZAesDBwAgAQVZAewDBwAgAQVZAosDBwAgAQVZ
AwcDBwAgAQVZAxUDBwAgAQVZAxcDBwAgAQVZAy8DBwAgAQVZAzIDBwAgAQVZA24D
BwAgAQVZA9ADBwAgAQVZA+gDBwAgAQVZA/kDBwAgAQVZBDADBwAgAQVZBFYDBwAg
AQVZBH8DBwAgAQVZBPgDBwAgAQVZBRYDBwAgAQVZB58DBwAgAQVZB/IwEgMHASAB
BVlQAgMHACABBVlQBAMHACABBVmA+gMHACABBVmBGgMHACABBVmBJQMHACABBVmB
fwMHACABBVmBmgMHACABBVmB6AMHACABBVmDqQMHACABBVmETgMHACABBVmEwQMH
ACABBVmE7QMHACABBVmFwAMHACABBVmGUQMHACABBVmHlQMHACABBVmH2gMHACAB
BVnAcgMHACABBVnA2QMHACABBVnA4gMHACABBVnBFQMHACABBVnBHwMHACABBVnB
JwMHACABBVnBaAMHACABBVnBbAMHACABBVnBkAMHACABBVnBkwMHACABBVnBrwMH
ACABBVnBvwMHACABBVnDygMHACABBVnD/wMHACABBVnEegMHACABBVnE8wMHACAB
BVnFRDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQCrmwvV8gkH6uh94FhnDDzTJ6bBkeBPg2l/qWHlEteyjhUD
KiApZ2Px+LX0BDbsiLLivhlo6Ds/Hp1ZkYIy+oAHKm/eFJ5cpGlmIxMYYZe01EXl
N6COJRogSxT1VtH8SXOAKAd5qEE6ExoUMTuWPUILww3v66iu5b3aTWHN+cChTCnw
jpStU1+uyf9NoAsifnz1a+cxUQdVpprzb7fyEC+u1RUvP49cKB9FgklKyoZTuIfy
69tfnNgM+DfgUHwxwLzCYJBcZhYAMEYRZk6/+Gk+8AwAZA+HyzsEozL+wy3bsPlQ
sUTKi5Ywahb4m639O5GjNR0vcGYCbVxwbkijELO5
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:00 2025 by rpki-client