Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/1448247e-c449-3147-a2db-a3bca71ec4f6.roa
File:                     1448247e-c449-3147-a2db-a3bca71ec4f6.roa (raw, json)
Hash identifier:          TQ4iI+I1oS0pygcXqpNzB0MFXv8Pv1TOh74QRmP1hc4=
Subject key identifier:   FB:4F:8B:FE:8B:A0:5F:0B:EB:08:99:F5:D0:93:72:9D:E0:37:13:99
Certificate issuer:       /CN=09729117-c725-49ca-9a64-f10a055403c3
Certificate serial:       010D0C9F4328584B48E1C6C89736B5ACC718BB00
Authority key identifier: 22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/1448247e-c449-3147-a2db-a3bca71ec4f6.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     54528
IP address blocks:        45.41.234.0/24 maxlen: 32
                          2602:80b:b000::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:c6:c8:97:36:b5:ac:c7:18:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09729117-c725-49ca-9a64-f10a055403c3
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=dd2660ba-e523-4f9b-bcc1-0f0f84a42b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:bf:db:5a:36:56:32:7f:ee:02:5a:ee:e6:
                    07:70:cc:e6:5b:3b:3a:fa:f6:43:b9:fd:0b:ff:85:
                    20:24:22:0b:77:b7:e0:ce:16:d6:cb:4f:b3:17:74:
                    f1:45:94:66:94:da:82:ca:34:1f:9e:f2:d0:e6:4e:
                    cb:3d:30:a0:32:33:5e:7a:f8:b2:59:02:d1:f7:62:
                    e1:a2:6b:e1:ff:bc:b0:4c:f7:9e:62:f3:31:92:d0:
                    f8:63:46:f7:54:30:c7:71:ee:f7:70:d7:d4:11:34:
                    83:1a:3d:a5:f3:b3:7f:c4:16:17:84:c0:99:0c:b6:
                    80:e2:67:5c:10:94:ac:b0:d5:77:cd:4b:1e:67:88:
                    db:9a:6c:3a:82:84:3c:ad:aa:6a:b7:bc:cd:b8:d3:
                    2a:25:55:10:9e:82:f2:26:1f:d0:59:ba:e3:9f:d5:
                    57:a9:29:f8:a2:c8:e3:6c:98:3e:a9:e4:48:6e:cf:
                    8e:5b:1a:46:22:f7:ba:9b:91:ca:f8:04:8d:60:30:
                    33:4a:34:27:db:03:cd:33:4a:61:73:b5:12:84:48:
                    e2:af:5d:04:5c:e3:93:7e:81:1f:06:fa:41:58:85:
                    5a:f0:be:22:33:06:84:10:f6:fd:56:24:98:8d:cf:
                    a8:71:73:5e:ac:01:f0:b2:06:ba:99:9a:a5:87:8a:
                    2d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4F:8B:FE:8B:A0:5F:0B:EB:08:99:F5:D0:93:72:9D:E0:37:13:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/1448247e-c449-3147-a2db-a3bca71ec4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl

            X509v3 Authority Key Identifier:
                keyid:22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.234.0/24
                IPv6:
                  2602:80b:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:df:7d:7f:75:92:45:8a:20:aa:0c:77:44:36:5a:fb:5b:56:
         e3:9c:d2:cb:fc:9e:0c:a3:1b:25:90:9b:72:66:da:25:41:13:
         54:58:df:dc:f3:2b:77:14:d8:28:06:1b:83:13:f9:78:cb:49:
         1a:1e:20:56:77:33:74:6d:24:ec:7e:9a:c6:05:3a:b4:a7:b3:
         af:2a:86:24:78:f5:fa:d1:4e:56:76:08:d2:f3:65:e0:97:50:
         b0:ae:77:9a:71:3f:d0:d9:61:5f:c6:50:3c:56:36:60:e6:45:
         b7:b7:c4:fc:09:6e:a2:0d:42:dc:88:68:25:58:61:b9:e1:52:
         51:30:72:d2:93:23:8e:19:14:4d:6a:56:99:12:e2:48:f4:ca:
         af:17:14:8f:90:5c:77:2b:b2:7b:d1:ea:82:53:c4:6e:df:60:
         64:1b:ea:b1:52:ec:38:92:d0:70:b5:75:54:2d:86:d4:5d:6f:
         f7:9d:f3:37:0e:dc:5c:ec:8a:38:86:02:a4:09:88:36:a0:91:
         93:e9:2a:72:46:ce:b9:2c:a6:26:b4:8c:47:44:97:7d:37:96:
         d9:5d:d8:28:82:55:d3:6b:1c:7a:92:29:1d:b4:d6:17:5d:5d:
         e0:d5:87:1e:92:f9:12:e4:97:d9:18:44:95:91:fa:10:6d:dd:
         14:90:d0:41
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtI4cbIlza1rMcYuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk3MjkxMTctYzcyNS00OWNhLTlhNjQtZjEwYTA1NTQw
M2MzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZGQyNjYwYmEtZTUyMy00ZjliLWJjYzEtMGYwZjg0YTQyYjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja+/21o2VjJ/7gJa7uYHcMzmWzs6+vZDuf0L
/4UgJCILd7fgzhbWy0+zF3TxRZRmlNqCyjQfnvLQ5k7LPTCgMjNeeviyWQLR92Lh
omvh/7ywTPeeYvMxktD4Y0b3VDDHce73cNfUETSDGj2l87N/xBYXhMCZDLaA4mdc
EJSssNV3zUseZ4jbmmw6goQ8rapqt7zNuNMqJVUQnoLyJh/QWbrjn9VXqSn4osjj
bJg+qeRIbs+OWxpGIve6m5HK+ASNYDAzSjQn2wPNM0phc7UShEjir10EXOOTfoEf
BvpBWIVa8L4iMwaEEPb9ViSYjc+ocXNerAHwsga6mZqlh4otVQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFPtPi/6LoF8L6wiZ9dCTcp3gNxOZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wOTcy
OTExNy1jNzI1LTQ5Y2EtOWE2NC1mMTBhMDU1NDAzYzMvMTQ0ODI0N2UtYzQ0OS0z
MTQ3LWEyZGItYTNiY2E3MWVjNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDk3MjkxMTctYzcyNS00OWNhLTlh
NjQtZjEwYTA1NTQwM2MzLzA5NzI5MTE3LWM3MjUtNDljYS05YTY0LWYxMGEwNTU0
MDNjMy5jcmwwHwYDVR0jBBgwFoAUIhsZyr33iDxQ2BPzsviveqmKfNwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wOTcyOTExNy1jNzI1LTQ5Y2EtOWE2NC1mMTBh
MDU1NDAzYzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALSnqMA8E
AgACMAkDBwQmAggLsAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAY999f3WSRYogqgx3RDZa+1tW45zSy/ye
DKMbJZCbcmbaJUETVFjf3PMrdxTYKAYbgxP5eMtJGh4gVnczdG0k7H6axgU6tKez
ryqGJHj1+tFOVnYI0vNl4JdQsK53mnE/0NlhX8ZQPFY2YOZFt7fE/Aluog1C3Iho
JVhhueFSUTBy0pMjjhkUTWpWmRLiSPTKrxcUj5Bcdyuye9HqglPEbt9gZBvqsVLs
OJLQcLV1VC2G1F1v953zNw7cXOyKOIYCpAmINqCRk+kqckbOuSymJrSMR0SXfTeW
2V3YKIJV02scepIpHbTWF11d4NWHHpL5EuSX2RhElZH6EG3dFJDQQQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:23 2025 by rpki-client