Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa
File:                     814253a9-9aad-32ad-b99c-4b4dc604402e.roa (raw, json)
Hash identifier:          61T1pz9vKKPruqo1Lkirl/sjp/G8kGsFWNz+SW8VbH4=
Subject key identifier:   26:4D:E9:B2:06:9F:8B:B7:DB:F9:F3:65:42:A1:13:7C:BF:7C:BF:9D
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584B13D6C2EC10F5645E25BA4C00
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     151797
IP address blocks:        104.251.224.0/20 maxlen: 24
                          172.81.102.0/23 maxlen: 24
                          172.81.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c2:ec:10:f5:64:5e:25:ba:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=3253fe6b-0150-456b-bfd6-3d7a835ae0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:14:15:80:0e:7b:ed:97:b3:84:59:7d:19:
                    70:9b:53:db:c1:51:c2:25:90:44:7c:83:28:e2:03:
                    48:1b:1d:72:96:9d:57:58:29:36:5b:ed:ea:80:39:
                    55:34:6e:d7:7d:69:dd:3e:7e:0d:3a:e4:cf:92:ad:
                    02:28:b2:74:a1:d7:52:c3:5e:3e:53:99:e0:2c:0f:
                    6b:8b:28:f9:e9:9f:37:52:35:85:bd:80:f5:70:c5:
                    e2:c0:3c:08:17:fe:be:c1:4b:1c:ea:8d:42:75:f2:
                    11:45:51:cb:e3:4f:dd:5a:91:fa:54:26:cd:71:ec:
                    fe:45:12:66:09:6f:ce:2f:50:d2:6c:f2:ad:3c:65:
                    4e:9d:f8:b9:f2:db:a5:c1:f9:d1:50:94:6c:17:14:
                    ba:a2:e6:56:f8:84:32:4f:ad:16:eb:cb:b0:a5:e5:
                    96:0b:1e:bf:8a:da:2b:7d:e6:34:91:26:ba:5f:41:
                    72:de:5d:bf:b1:00:90:5e:73:c4:d0:15:9d:e9:8d:
                    b5:7f:6e:ee:30:34:ec:d6:57:f8:1a:0f:a5:4f:9e:
                    da:5c:fe:84:5f:a2:90:dc:c7:4c:5f:3b:a1:63:19:
                    43:b6:37:9f:9c:2d:42:02:9c:df:97:0e:66:bd:0a:
                    ae:73:b3:64:71:7e:eb:a1:3b:b7:bc:ae:e1:29:33:
                    7a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4D:E9:B2:06:9F:8B:B7:DB:F9:F3:65:42:A1:13:7C:BF:7C:BF:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.224.0/20
                  172.81.102.0-172.81.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:28:6c:8e:1c:a6:7d:38:64:64:86:f2:d1:25:31:be:c6:10:
         8d:c6:95:66:c2:e1:90:3d:02:05:e2:09:4f:f1:85:a3:37:c1:
         e3:d0:4c:0e:57:4d:23:53:c7:fb:a6:19:dd:1e:7e:29:68:89:
         97:58:ee:21:26:00:c9:2b:e5:e1:44:e5:30:71:f8:a2:ca:ae:
         ed:73:15:ff:0e:c3:01:a0:82:f4:0c:1e:f8:81:b4:a7:cd:a8:
         06:55:09:dc:47:8a:10:5b:c0:21:4d:51:b3:44:23:80:b5:7c:
         f2:5d:61:fc:53:f7:56:54:e8:f2:36:21:f7:70:49:4b:63:12:
         3a:97:76:11:0f:c5:f9:55:0e:14:3a:8e:d0:05:6e:22:0b:06:
         19:a9:f9:5f:be:3d:e0:d0:11:85:df:41:03:d1:35:0c:43:ce:
         7f:9a:97:e3:0b:4d:e8:03:d2:40:4d:ae:c2:af:13:f0:a4:cc:
         60:cc:50:36:fb:89:86:d1:5a:55:72:88:48:44:b2:9b:e6:c4:
         58:07:56:c3:10:c4:a9:52:9a:3d:b4:de:4f:d6:d4:2c:cb:cd:
         be:5e:0b:40:27:3e:db:e4:d6:e2:51:46:e5:55:0f:53:0a:bd:
         15:da:a1:40:4d:11:cf:53:50:01:12:cf:28:ff:16:83:b4:d3:
         a6:6d:64:44
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEsT1sLsEPVkXiW6TAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm
MDYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
MzI1M2ZlNmItMDE1MC00NTZiLWJmZDYtM2Q3YTgzNWFlMGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojUUFYAOe+2Xs4RZfRlwm1PbwVHCJZBEfIMo
4gNIGx1ylp1XWCk2W+3qgDlVNG7XfWndPn4NOuTPkq0CKLJ0oddSw14+U5ngLA9r
iyj56Z83UjWFvYD1cMXiwDwIF/6+wUsc6o1CdfIRRVHL40/dWpH6VCbNcez+RRJm
CW/OL1DSbPKtPGVOnfi58tulwfnRUJRsFxS6ouZW+IQyT60W68uwpeWWCx6/itor
feY0kSa6X0Fy3l2/sQCQXnPE0BWd6Y21f27uMDTs1lf4Gg+lT57aXP6EX6KQ3MdM
XzuhYxlDtjefnC1CApzflw5mvQquc7NkcX7roTu3vK7hKTN6UwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFCZN6bIGn4u32/nzZUKhE3y/fL+dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi
MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvODE0MjUzYTktOWFhZC0z
MmFkLWI5OWMtNGI0ZGM2MDQ0MDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1
YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky
ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4
NzY5MmYwNjMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEaPvgMAwD
BAGsUWYDBASsUWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAHihsjhymfThkZIby0SUxvsYQjcaVZsLhkD0C
BeIJT/GFozfB49BMDldNI1PH+6YZ3R5+KWiJl1juISYAySvl4UTlMHH4osqu7XMV
/w7DAaCC9Awe+IG0p82oBlUJ3EeKEFvAIU1Rs0QjgLV88l1h/FP3VlTo8jYh93BJ
S2MSOpd2EQ/F+VUOFDqO0AVuIgsGGan5X7494NARhd9BA9E1DEPOf5qX4wtN6APS
QE2uwq8T8KTMYMxQNvuJhtFaVXKISESym+bEWAdWwxDEqVKaPbTeT9bULMvNvl4L
QCc+2+TW4lFG5VUPUwq9FdqhQE0Rz1NQARLPKP8Wg7TTpm1kRA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:03:20 2025 by rpki-client