Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/00088c77-4f49-355a-8e08-519168e1f1ef.roa
File:                     00088c77-4f49-355a-8e08-519168e1f1ef.roa (raw, json)
Hash identifier:          Qk0IYuGyiefqLIBkJGjR8GlySDnRCSHIQa0GgYpF4L4=
Subject key identifier:   D9:DF:BE:57:49:57:00:FC:A6:8F:74:94:EE:39:01:14:90:3C:17:D0
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B41E7050BF3416DD1C348BB80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/00088c77-4f49-355a-8e08-519168e1f1ef.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        207.253.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:05:0b:f3:41:6d:d1:c3:48:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=60e2eccb-df27-4719-91aa-add80273a6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:05:81:81:93:ee:a0:9f:28:ca:f7:6b:e6:
                    9b:19:7d:98:08:53:17:bb:52:62:37:8a:d4:6f:a0:
                    50:17:71:de:22:5a:f9:b5:bb:76:17:d5:b9:8e:5c:
                    e0:c6:67:88:8c:ce:42:77:88:0b:6b:f5:53:9f:b2:
                    af:24:7e:03:de:21:33:04:3b:18:ad:d2:ad:ca:41:
                    39:d0:af:9d:1e:03:50:c5:69:af:69:2b:eb:22:b1:
                    c4:32:3f:e7:81:0c:24:44:b5:ff:57:e6:bb:39:a8:
                    d5:23:b9:5c:9a:fb:d7:58:c9:ff:13:a9:a7:41:3e:
                    88:9a:18:c1:85:b0:05:49:84:1d:f1:59:28:51:d5:
                    32:95:e8:ef:79:a0:a7:fc:1f:79:4b:8a:02:f2:1b:
                    d8:cc:d5:8f:34:dc:96:c6:b2:6f:b0:26:dc:22:fb:
                    e3:27:8c:fb:6b:94:c4:a6:f0:bf:4e:c7:48:51:53:
                    a9:a2:9c:b3:89:db:8c:ec:14:ce:0f:27:f7:11:d2:
                    f3:b6:68:d7:2b:43:80:b2:bd:01:00:4c:15:17:02:
                    cb:29:de:c2:ff:ed:c6:82:0a:5b:dc:e7:64:e6:1f:
                    6d:18:4a:b7:3d:3f:55:70:36:2c:4d:32:2a:cf:47:
                    75:c7:b9:74:f9:d2:3f:02:32:bd:3e:3e:c2:16:33:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DF:BE:57:49:57:00:FC:A6:8F:74:94:EE:39:01:14:90:3C:17:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/00088c77-4f49-355a-8e08-519168e1f1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:28:5f:f6:af:2c:06:53:d3:2f:5f:7b:23:9e:5d:52:3b:58:
         23:ff:e3:a2:97:c5:5d:14:ec:63:8a:d3:7e:d9:bc:51:4f:af:
         55:f4:92:0b:b4:a9:a0:36:75:ac:02:8e:aa:13:7d:6c:e5:f3:
         d0:bd:86:f1:cc:fb:4b:fe:17:17:11:3a:8a:83:96:f1:6b:a6:
         7b:75:de:20:60:fa:9d:82:6f:da:93:a2:d4:c2:da:9e:df:ad:
         34:b8:da:32:50:97:76:84:ed:a0:21:34:dd:cb:7a:61:f3:f5:
         96:b2:d6:5d:7f:7e:be:8a:46:50:f5:51:b2:55:a9:2d:b2:ee:
         b2:15:4c:cc:96:06:fb:ed:4b:81:e5:1b:67:04:ba:19:0a:4c:
         b4:0b:23:81:35:1a:b8:51:ec:da:58:5e:e1:40:b4:f9:aa:3a:
         7d:cc:29:01:b7:3e:46:b4:0d:e0:8a:a3:95:50:83:c2:93:bc:
         8f:12:8b:72:15:0f:6a:35:9a:50:fb:a6:4d:24:40:8e:ec:89:
         44:60:fb:aa:03:9b:4f:8b:fb:91:97:5d:40:b1:c5:ba:77:07:
         21:5b:f2:13:0d:14:ca:05:c7:67:4e:b1:39:a4:b6:f7:99:47:
         db:af:2e:7e:73:1e:c7:3a:46:7f:39:3b:60:31:4e:72:17:fa:
         91:d6:ff:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5wUL80Ft0cNIu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk
NjBlMmVjY2ItZGYyNy00NzE5LTkxYWEtYWRkODAyNzNhNmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BUFgYGT7qCfKMr3a+abGX2YCFMXu1JiN4rU
b6BQF3HeIlr5tbt2F9W5jlzgxmeIjM5Cd4gLa/VTn7KvJH4D3iEzBDsYrdKtykE5
0K+dHgNQxWmvaSvrIrHEMj/ngQwkRLX/V+a7OajVI7lcmvvXWMn/E6mnQT6ImhjB
hbAFSYQd8VkoUdUylejveaCn/B95S4oC8hvYzNWPNNyWxrJvsCbcIvvjJ4z7a5TE
pvC/TsdIUVOpopyziduM7BTODyf3EdLztmjXK0OAsr0BAEwVFwLLKd7C/+3Gggpb
3Odk5h9tGEq3PT9VcDYsTTIqz0d1x7l0+dI/AjK9Pj7CFjOwkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnfvldJVwD8po90lO45ARSQPBfQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMDAwODhjNzctNGY0OS0z
NTVhLThlMDgtNTE5MTY4ZTFmMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/0pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAoX/avLAZT0y9feyOeXVI7WCP/46KXxV0U7GOK037ZvFFPr1X0kgu0
qaA2dawCjqoTfWzl89C9hvHM+0v+FxcROoqDlvFrpnt13iBg+p2Cb9qTotTC2p7f
rTS42jJQl3aE7aAhNN3LemHz9Zay1l1/fr6KRlD1UbJVqS2y7rIVTMyWBvvtS4Hl
G2cEuhkKTLQLI4E1GrhR7NpYXuFAtPmqOn3MKQG3Pka0DeCKo5VQg8KTvI8Si3IV
D2o1mlD7pk0kQI7siURg+6oDm0+L+5GXXUCxxbp3ByFb8hMNFMoFx2dOsTmktveZ
R9uvLn5zHsc6Rn85O2AxTnIX+pHW/5Q=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:13 2025 by rpki-client