Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/290cc34d-dc8d-39a9-b35e-a492b18459d0.roa
File:                     290cc34d-dc8d-39a9-b35e-a492b18459d0.roa (raw, json)
Hash identifier:          u5DnK6oq/VdLKEXur6PnqbHep5acs/oiSbG7G2og0AI=
Subject key identifier:   51:5B:94:53:40:2B:BA:77:D7:62:18:3E:0F:30:28:78:5D:32:0E:BA
Certificate issuer:       /CN=6e005a51-3e55-4f51-b393-eb9918255f3f
Certificate serial:       010D0C9F4328584B4E77163670AE66FA9C9E2DB0
Authority key identifier: 7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/290cc34d-dc8d-39a9-b35e-a492b18459d0.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     400817
IP address blocks:        199.58.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:16:36:70:ae:66:fa:9c:9e:2d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e005a51-3e55-4f51-b393-eb9918255f3f
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=7b5e928e-0eec-45a0-950e-e184ce6b9dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e4:70:c9:81:87:9f:7d:bd:f6:6f:14:ef:aa:
                    73:f7:ce:bb:f9:91:b7:a4:7b:90:4c:dc:f5:11:85:
                    2f:d4:13:02:f7:b8:b1:ba:a2:4c:c3:ce:15:76:84:
                    75:2f:62:7d:85:9d:54:1f:d9:98:23:b8:36:f0:e4:
                    a2:53:0c:78:31:b5:a4:0d:ba:58:3e:a3:39:17:ba:
                    63:0e:44:1e:18:51:82:70:9f:c6:77:0c:b0:0f:66:
                    56:21:59:22:23:99:8a:1e:38:24:90:f4:09:a2:96:
                    3a:e4:bc:66:cf:20:04:d1:7f:d1:fb:95:d9:bf:1f:
                    39:cb:78:e6:ed:45:36:12:e8:88:2a:23:2a:ff:ae:
                    86:e5:53:f5:8b:2b:d5:a5:09:9e:25:62:5c:dd:e0:
                    9f:62:6c:96:a0:cf:51:21:c5:79:96:33:10:1a:c5:
                    a0:1d:ea:fb:c1:42:20:c2:56:da:6e:26:e8:7b:16:
                    f9:41:ea:26:c3:78:fe:4f:18:84:54:5c:45:b8:12:
                    63:ec:ab:d1:3b:70:f0:70:b9:b2:07:56:7e:87:fb:
                    ed:0f:91:6b:64:08:20:72:af:39:e5:66:5d:a8:0c:
                    f3:f9:54:53:0c:bd:90:08:cb:33:9f:cd:5e:ba:b7:
                    99:ec:e7:97:45:5a:3b:98:27:bf:94:ca:56:c1:e4:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5B:94:53:40:2B:BA:77:D7:62:18:3E:0F:30:28:78:5D:32:0E:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/290cc34d-dc8d-39a9-b35e-a492b18459d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl

            X509v3 Authority Key Identifier:
                keyid:7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d8:3c:23:86:a4:08:d4:2a:da:9c:34:d2:46:4f:73:81:7c:
         d0:c3:12:60:2d:78:4e:4f:77:c4:ae:36:01:d8:54:52:31:6e:
         a6:9e:55:ee:a2:1b:ab:ff:19:90:fe:b1:d7:27:2d:ed:e1:da:
         23:5c:88:fa:46:cb:ea:1e:8e:f6:17:42:52:c3:67:26:e0:1b:
         cb:83:d5:04:0d:44:8e:74:eb:01:0c:c2:dc:10:b7:41:10:97:
         1c:c3:59:66:ec:78:26:c3:90:f7:a6:d3:c5:db:a1:80:96:f0:
         6a:8f:a8:d6:5a:af:6d:d5:c5:6b:5c:f9:f6:40:45:54:d7:1b:
         0a:69:b9:18:27:69:05:7b:30:6e:a6:8a:1e:3e:9f:94:1a:4a:
         50:54:d1:50:aa:39:63:e5:46:a8:6e:6e:35:30:20:c4:72:b9:
         84:55:44:74:48:f7:26:24:46:c5:76:f7:67:af:7a:19:1c:32:
         00:d1:fa:dc:a9:8e:70:86:37:4d:79:3e:a7:92:87:e6:80:bb:
         eb:66:48:bd:5e:fb:ef:1b:91:77:e2:24:f7:fc:4c:b1:79:32:
         69:c9:f2:6e:50:ff:87:a3:a5:8d:94:fb:2e:9d:94:bd:44:e7:
         a2:d7:5d:30:bf:7b:e4:51:85:ff:de:e8:00:9c:25:d1:cd:be:
         44:20:6d:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxY2cK5m+pyeLbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUwMDVhNTEtM2U1NS00ZjUxLWIzOTMtZWI5OTE4MjU1
ZjNmMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
N2I1ZTkyOGUtMGVlYy00NWEwLTk1MGUtZTE4NGNlNmI5ZGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgORwyYGHn3299m8U76pz9867+ZG3pHuQTNz1
EYUv1BMC97ixuqJMw84VdoR1L2J9hZ1UH9mYI7g28OSiUwx4MbWkDbpYPqM5F7pj
DkQeGFGCcJ/GdwywD2ZWIVkiI5mKHjgkkPQJopY65LxmzyAE0X/R+5XZvx85y3jm
7UU2EuiIKiMq/66G5VP1iyvVpQmeJWJc3eCfYmyWoM9RIcV5ljMQGsWgHer7wUIg
wlbabiboexb5Qeomw3j+TxiEVFxFuBJj7KvRO3DwcLmyB1Z+h/vtD5FrZAggcq85
5WZdqAzz+VRTDL2QCMszn81eureZ7OeXRVo7mCe/lMpWweQyVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFFblFNAK7p312IYPg8wKHhdMg66MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTAw
NWE1MS0zZTU1LTRmNTEtYjM5My1lYjk5MTgyNTVmM2YvMjkwY2MzNGQtZGM4ZC0z
OWE5LWIzNWUtYTQ5MmIxODQ1OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmUwMDVhNTEtM2U1NS00ZjUxLWIz
OTMtZWI5OTE4MjU1ZjNmLzZlMDA1YTUxLTNlNTUtNGY1MS1iMzkzLWViOTkxODI1
NWYzZi5jcmwwHwYDVR0jBBgwFoAUf6XhVGyl0nPxEzVBNJ49rg/sa/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTAwNWE1MS0zZTU1LTRmNTEtYjM5My1lYjk5
MTgyNTVmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvYPCOGpAjUKtqcNNJGT3OBfNDDEmAteE5Pd8SuNgHYVFIxbqaeVe6i
G6v/GZD+sdcnLe3h2iNciPpGy+oejvYXQlLDZybgG8uD1QQNRI506wEMwtwQt0EQ
lxzDWWbseCbDkPem08XboYCW8GqPqNZar23VxWtc+fZARVTXGwppuRgnaQV7MG6m
ih4+n5QaSlBU0VCqOWPlRqhubjUwIMRyuYRVRHRI9yYkRsV292evehkcMgDR+typ
jnCGN015PqeSh+aAu+tmSL1e++8bkXfiJPf8TLF5MmnJ8m5Q/4ejpY2U+y6dlL1E
56LXXTC/e+RRhf/e6ACcJdHNvkQgbVw=
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:46:33 2025 by rpki-client