Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/954ea494-f444-3344-8f0e-7b69475d7f4f.roa
File:                     954ea494-f444-3344-8f0e-7b69475d7f4f.roa (raw, json)
Hash identifier:          4z/hojxQLYX2oA6eV0PLgTI+F/NGV9Hxi/ICwrFbK2k=
Subject key identifier:   66:67:C7:5C:70:06:9D:DE:DC:6C:C4:C8:53:38:4F:F7:04:68:39:E9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B6BC77DC187BA6AF43FA9D614
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/954ea494-f444-3344-8f0e-7b69475d7f4f.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     36631
IP address blocks:        216.168.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:7d:c1:87:ba:6a:f4:3f:a9:d6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=c220a599-1791-49c4-9d23-e085d67b8384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:d0:1c:54:70:2e:17:52:7c:62:c4:c5:89:
                    60:e3:49:4d:cc:96:2a:59:7a:f2:cd:5f:b0:87:5d:
                    ff:f9:4b:39:72:2f:4e:27:17:4e:7d:c6:3a:f7:ce:
                    4d:ad:05:5e:e5:a3:e1:28:9b:ad:cf:c9:49:de:1e:
                    bf:12:d9:da:25:9e:d9:67:6e:d2:2b:2c:ad:85:7a:
                    23:61:0b:32:88:6a:96:2e:fe:35:7c:fd:0a:6d:66:
                    3c:eb:f0:18:49:0a:34:1a:23:cb:24:38:b9:1c:d6:
                    dd:02:b9:ae:83:64:e3:06:b0:47:79:fa:9d:78:d1:
                    c6:92:b3:b0:fd:c2:55:f1:68:90:77:d3:fa:a8:61:
                    dc:24:4e:20:eb:84:5f:c3:a6:f2:76:14:2b:50:fc:
                    ee:76:c2:6c:a6:ef:a7:05:12:03:5b:06:2f:35:89:
                    d0:8d:e6:35:f7:36:7f:75:6d:22:2b:1b:72:cb:56:
                    a5:49:c4:59:da:94:d6:9c:ea:d6:a7:27:97:3c:70:
                    98:ac:7a:92:11:6c:98:13:3f:ca:41:4f:73:fe:70:
                    85:8a:87:7e:01:e5:f0:45:ca:5f:8e:a2:d1:9a:ff:
                    a8:5c:ca:ca:53:87:1a:76:1e:0f:d9:f6:44:3e:6e:
                    62:9e:63:b0:25:1f:a1:b2:94:66:1d:11:7f:6e:16:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:67:C7:5C:70:06:9D:DE:DC:6C:C4:C8:53:38:4F:F7:04:68:39:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/954ea494-f444-3344-8f0e-7b69475d7f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:7a:1f:91:21:c3:b7:04:6f:91:37:33:df:be:2f:d5:3a:
         a6:95:51:ba:80:1a:e2:a0:5d:f7:fd:0b:77:07:5b:13:a6:81:
         6e:14:60:fe:1b:08:e5:b3:c1:4c:62:c3:41:e9:db:6a:fb:28:
         4a:d4:8e:a8:35:08:51:09:ac:9c:86:0f:6b:64:32:35:50:18:
         23:3e:4f:11:d6:9f:70:ae:d2:2f:8c:30:ea:bd:a0:af:b4:8b:
         50:4e:23:d1:98:78:db:23:61:8d:fb:7e:93:aa:61:5a:f0:23:
         46:cd:49:e5:92:02:25:1c:e3:0b:3f:5b:2c:94:0b:e3:62:3e:
         ed:20:5b:be:74:7d:1f:2c:15:cc:7e:71:ae:83:14:b5:87:2f:
         7c:7c:7b:f8:8e:63:cc:96:a0:0c:33:e1:bf:b3:d1:91:2e:85:
         b3:02:be:2c:c4:77:4b:58:c1:5b:26:f0:47:f1:d8:fc:7a:52:
         29:43:aa:9b:a7:88:b7:af:8b:9d:66:cd:06:2d:f3:ee:04:cd:
         cb:ff:2c:39:65:0d:6c:16:71:41:aa:87:e6:77:3d:71:8b:55:
         00:6d:35:4b:38:63:c8:6d:1e:f5:d2:7a:66:0b:33:9e:94:d4:
         55:a8:71:6a:74:e4:55:1a:a0:76:0d:8a:6c:28:a6:e0:ca:d0:
         25:f7:9c:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx33Bh7pq9D+p1hQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk
YzIyMGE1OTktMTc5MS00OWM0LTlkMjMtZTA4NWQ2N2I4Mzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk/QHFRwLhdSfGLExYlg40lNzJYqWXryzV+w
h13/+Us5ci9OJxdOfcY6985NrQVe5aPhKJutz8lJ3h6/EtnaJZ7ZZ27SKyythXoj
YQsyiGqWLv41fP0KbWY86/AYSQo0GiPLJDi5HNbdArmug2TjBrBHefqdeNHGkrOw
/cJV8WiQd9P6qGHcJE4g64Rfw6bydhQrUPzudsJspu+nBRIDWwYvNYnQjeY19zZ/
dW0iKxtyy1alScRZ2pTWnOrWpyeXPHCYrHqSEWyYEz/KQU9z/nCFiod+AeXwRcpf
jqLRmv+oXMrKU4cadh4P2fZEPm5inmOwJR+hspRmHRF/bhZuywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZnx1xwBp3e3GzEyFM4T/cEaDnpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTU0ZWE0OTQtZjQ0NC0z
MzQ0LThmMGUtN2I2OTQ3NWQ3ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1Seh+RIcO3BG+RNzPfvi/VOqaVUbqAGuKgXff9C3cHWxOmgW4UYP4b
COWzwUxiw0Hp22r7KErUjqg1CFEJrJyGD2tkMjVQGCM+TxHWn3Cu0i+MMOq9oK+0
i1BOI9GYeNsjYY37fpOqYVrwI0bNSeWSAiUc4ws/WyyUC+NiPu0gW750fR8sFcx+
ca6DFLWHL3x8e/iOY8yWoAwz4b+z0ZEuhbMCvizEd0tYwVsm8Efx2Px6UilDqpun
iLevi51mzQYt8+4Ezcv/LDllDWwWcUGqh+Z3PXGLVQBtNUs4Y8htHvXSemYLM56U
1FWocWp05FUaoHYNimwopuDK0CX3nDc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:25 2025 by rpki-client