Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0be743-41a5-30b5-ab4c-22b1b0c329db.roa
File:                     fa0be743-41a5-30b5-ab4c-22b1b0c329db.roa (raw, json)
Hash identifier:          FormoM5+6LeOYzMzwyc5pAa4IyjMes1XQgScefSwxdE=
Subject key identifier:   59:47:51:CE:9C:7D:C5:9B:83:66:AF:E5:92:0D:70:E3:96:CF:D7:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E773490F1C0484AA9B6F300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0be743-41a5-30b5-ab4c-22b1b0c329db.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     21313
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:34:90:f1:c0:48:4a:a9:b6:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=ac8838fd-d233-4fb4-bacf-1898f3652a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:bd:30:af:4e:29:8a:36:b5:09:27:59:67:
                    15:d3:60:a2:68:61:39:d0:7a:7d:ee:66:c3:bf:30:
                    a9:81:d0:b2:e6:4a:2c:6c:05:c1:9c:0f:b4:2b:bc:
                    70:89:f3:65:5e:fc:e3:ec:f7:aa:b0:3f:89:b6:62:
                    0c:7e:0a:46:ca:98:36:3b:44:08:ad:67:2c:6e:89:
                    cc:8b:ee:cd:a3:44:e1:c5:51:a1:4f:22:4b:2f:42:
                    18:87:55:94:07:07:fe:40:21:1e:76:0a:ce:10:eb:
                    d5:97:1f:37:66:b2:78:d0:b7:07:8b:c8:07:e1:ac:
                    3f:56:e2:5c:4c:37:dd:e8:c4:27:1f:86:fc:d3:c5:
                    6e:2b:aa:fd:cc:a9:eb:af:4f:76:64:99:96:6c:fe:
                    9f:aa:90:07:b0:e4:93:38:93:a0:df:22:42:21:e7:
                    bb:61:a6:af:4e:ef:0d:6e:70:4e:27:77:17:81:88:
                    df:03:a6:c1:26:8a:71:bc:0c:bf:e8:19:0d:ad:d3:
                    7b:2c:10:b8:bc:05:d2:7f:16:de:e3:a6:04:d9:f7:
                    c7:fc:cb:03:40:20:15:2b:04:8b:d5:fc:75:32:d0:
                    9f:12:8a:5a:3e:df:42:26:bb:47:56:2e:66:7c:e2:
                    ff:bd:ba:71:bf:4e:13:d0:d7:ac:3e:67:a3:80:36:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:47:51:CE:9C:7D:C5:9B:83:66:AF:E5:92:0D:70:E3:96:CF:D7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0be743-41a5-30b5-ab4c-22b1b0c329db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:22:cb:b5:cf:1f:09:12:6b:1f:f9:b8:88:54:de:d6:24:fd:
         62:7c:c0:e3:90:98:65:79:df:cd:5a:ec:e6:bb:bb:82:24:a0:
         82:5a:75:88:ee:a5:05:ef:e3:be:34:74:fd:a3:aa:19:07:8c:
         30:ca:fb:18:7f:e5:00:17:d7:34:cc:89:74:1b:cd:4f:94:be:
         f6:5e:5c:a7:55:41:34:f9:74:e6:16:3c:48:fe:61:58:c6:12:
         a2:7b:13:9d:3a:78:82:ba:93:91:eb:25:91:1e:96:8e:4e:37:
         b5:d2:8a:60:5b:4f:35:7b:bd:e1:73:91:a0:bd:19:ba:1e:95:
         a1:a4:1b:b7:0e:e9:5b:10:06:69:cf:0b:1f:16:54:48:b9:fe:
         5d:fa:ba:fc:51:76:50:8e:53:96:9c:37:74:fe:f6:33:7f:9a:
         d8:ed:9d:0b:07:1f:58:3f:4a:f0:38:c0:75:50:81:f9:04:65:
         65:25:72:47:7b:3b:4e:b6:31:08:07:ab:cb:8f:21:fe:ce:d4:
         93:48:5a:25:df:16:ef:41:2d:ec:aa:8e:8c:28:c9:ab:09:1e:
         0b:37:18:e6:76:da:3b:21:49:21:49:d5:f6:dd:69:b6:70:17:
         35:25:1f:e0:84:f4:1f:ec:f5:f6:a4:1d:19:5e:a2:bd:37:e1:
         bd:37:3a:42
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtOdzSQ8cBISqm28wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
YWM4ODM4ZmQtZDIzMy00ZmI0LWJhY2YtMTg5OGYzNjUyYTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKC9MK9OKYo2tQknWWcV02CiaGE50Hp97mbD
vzCpgdCy5kosbAXBnA+0K7xwifNlXvzj7PeqsD+JtmIMfgpGypg2O0QIrWcsbonM
i+7No0ThxVGhTyJLL0IYh1WUBwf+QCEedgrOEOvVlx83ZrJ40LcHi8gH4aw/VuJc
TDfd6MQnH4b808VuK6r9zKnrr092ZJmWbP6fqpAHsOSTOJOg3yJCIee7YaavTu8N
bnBOJ3cXgYjfA6bBJopxvAy/6BkNrdN7LBC4vAXSfxbe46YE2ffH/MsDQCAVKwSL
1fx1MtCfEopaPt9CJrtHVi5mfOL/vbpxv04T0NesPmejgDYmnwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFlHUc6cfcWbg2av5ZINcOOWz9dbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmEwYmU3NDMtNDFhNS0z
MGI1LWFiNGMtMjJiMWIwYzMyOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFG5HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAkIsu1zx8JEmsf+biIVN7WJP1ifMDjkJhled/NWuzmu7uCJKCCWnWI
7qUF7+O+NHT9o6oZB4wwyvsYf+UAF9c0zIl0G81PlL72XlynVUE0+XTmFjxI/mFY
xhKiexOdOniCupOR6yWRHpaOTje10opgW081e73hc5GgvRm6HpWhpBu3DulbEAZp
zwsfFlRIuf5d+rr8UXZQjlOWnDd0/vYzf5rY7Z0LBx9YP0rwOMB1UIH5BGVlJXJH
eztOtjEIB6vLjyH+ztSTSFol3xbvQS3sqo6MKMmrCR4LNxjmdto7IUkhSdX23Wm2
cBc1JR/ghPQf7PX2pB0ZXqK9N+G9NzpC
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:31 2025 by rpki-client