Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa
File:                     b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa (raw, json)
Hash identifier:          UKPrhRr097htzDi5aGQbzT7+h+xB/mXhNYjqrSuGX2k=
Subject key identifier:   90:FE:E7:E6:C1:A9:56:16:A4:CC:A6:60:23:E8:8A:EF:C5:3A:89:56
Certificate issuer:       /CN=6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c
Certificate serial:       010D0C9F4328584B328C438B5D48D8F8D423DD80
Authority key identifier: 13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     393796
IP address blocks:        63.245.180.0/23 maxlen: 24
                          104.128.32.0/20 maxlen: 24
                          130.51.32.0/23 maxlen: 24
                          2604:7640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:43:8b:5d:48:d8:f8:d4:23:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=da6186c1-5aa3-460f-83f0-7633878edf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:80:c7:39:57:5f:7e:1f:91:05:93:de:9f:
                    df:ae:41:c1:d7:37:16:8e:9f:d8:e0:45:46:f8:ce:
                    63:ae:d0:db:c4:9f:64:92:cc:04:80:1d:59:8e:a5:
                    74:e7:ea:bd:23:eb:e8:ea:4c:6f:b1:c6:73:c7:54:
                    1a:b7:0e:e2:9b:ae:f7:eb:33:f4:d1:5a:88:36:de:
                    c4:32:5b:c0:36:85:04:ed:61:ec:45:c7:96:c8:30:
                    ff:9c:3f:fa:4f:0b:48:60:82:a6:0d:5b:a9:8c:31:
                    41:ec:96:37:5c:19:a8:27:f2:1f:21:2b:03:79:b7:
                    e7:89:92:4f:89:1b:4a:60:79:99:bc:1b:3c:a4:46:
                    e3:49:38:3a:57:c8:39:fb:7b:d9:3e:ea:7c:1b:ec:
                    c6:f8:bb:9d:4f:cc:87:b5:6e:4f:8a:ac:dc:76:f9:
                    7d:70:aa:0d:1a:78:80:7c:6f:4b:1f:00:67:03:1e:
                    e4:6a:28:04:f7:c8:af:ee:fc:5d:b0:34:0c:8a:02:
                    ae:0b:92:72:72:12:6c:22:4d:ba:9a:a9:78:8c:8c:
                    c7:ed:c1:94:ec:db:c5:8c:83:8f:d8:e8:6d:f7:4a:
                    b3:cf:20:f1:d5:90:c1:91:23:02:3a:c1:fe:12:66:
                    7b:17:0b:37:f3:a0:55:84:9d:90:cd:ee:37:94:2e:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FE:E7:E6:C1:A9:56:16:A4:CC:A6:60:23:E8:8A:EF:C5:3A:89:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.crl

            X509v3 Authority Key Identifier:
                keyid:13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.180.0/23
                  104.128.32.0/20
                  130.51.32.0/23
                IPv6:
                  2604:7640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8a:ca:91:dc:5e:29:49:17:74:31:9e:c3:fe:5f:ba:ef:e9:
         ac:f2:44:53:46:67:33:54:81:ad:20:05:8e:7d:91:b8:ac:b5:
         7a:94:c5:a6:f1:ac:f2:aa:0e:91:33:ac:81:0e:19:e2:35:0d:
         25:bb:bd:30:a9:73:5e:1c:08:f0:88:67:21:d7:e8:17:25:91:
         14:e8:03:03:77:d3:40:0e:13:2b:4f:f2:f7:fb:27:59:a6:b0:
         d2:8c:25:f6:8d:5e:0c:38:ac:aa:bf:37:13:c8:23:75:0a:a4:
         65:bc:a7:fc:e9:92:07:4f:fd:0e:5e:ae:97:d5:c0:05:09:33:
         21:56:e2:d6:42:ef:90:0f:dd:f3:a5:cb:70:82:dc:33:03:7f:
         28:cc:e5:c0:9c:60:da:52:05:72:e2:01:9c:35:8c:98:6c:da:
         f7:46:82:1e:a0:d0:9e:65:a8:71:94:55:14:d3:3e:06:a0:29:
         49:f4:1c:4e:cc:af:69:82:d9:b8:7f:88:a0:8d:92:cf:27:a6:
         31:49:70:63:c2:bd:14:82:17:09:e8:66:12:45:f6:75:55:b5:
         ee:57:82:05:e5:aa:9f:12:b2:80:44:97:bf:f1:ec:e3:bf:ba:
         3b:04:21:3d:bd:68:f4:65:88:1f:dd:3f:76:9a:3f:08:63:6b:
         b0:ab:90:29
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEsyjEOLXUjY+NQj3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ0Y2ViMzgtYzI3YS00ZWJkLTlhZDctYTZjZWNlODcw
ZDNjMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZGE2MTg2YzEtNWFhMy00NjBmLTgzZjAtNzYzMzg3OGVkZjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7WAxzlXX34fkQWT3p/frkHB1zcWjp/Y4EVG
+M5jrtDbxJ9kkswEgB1ZjqV05+q9I+vo6kxvscZzx1Qatw7im6736zP00VqINt7E
MlvANoUE7WHsRceWyDD/nD/6TwtIYIKmDVupjDFB7JY3XBmoJ/IfISsDebfniZJP
iRtKYHmZvBs8pEbjSTg6V8g5+3vZPup8G+zG+LudT8yHtW5Piqzcdvl9cKoNGniA
fG9LHwBnAx7kaigE98iv7vxdsDQMigKuC5JychJsIk26mql4jIzH7cGU7NvFjIOP
2Oht90qzzyDx1ZDBkSMCOsH+EmZ7Fws386BVhJ2Qze43lC54ywIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFJD+5+bBqVYWpMymYCPoiu/FOolWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82ZDRj
ZWIzOC1jMjdhLTRlYmQtOWFkNy1hNmNlY2U4NzBkM2MvYjU3MzU3ZjEtNzgwZC0z
MGUwLThmNWMtODUyZmY0YmFmYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNmQ0Y2ViMzgtYzI3YS00ZWJkLTlh
ZDctYTZjZWNlODcwZDNjLzZkNGNlYjM4LWMyN2EtNGViZC05YWQ3LWE2Y2VjZTg3
MGQzYy5jcmwwHwYDVR0jBBgwFoAUE4J9lKf+retgrY0Wa4RhpIPcAqgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82ZDRjZWIzOC1jMjdhLTRlYmQtOWFkNy1hNmNl
Y2U4NzBkM2MuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBP/W0AwQE
aIAgAwQBgjMgMA0EAgACMAcDBQAmBHZAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD+KypHcXilJF3QxnsP+
X7rv6azyRFNGZzNUga0gBY59kbistXqUxabxrPKqDpEzrIEOGeI1DSW7vTCpc14c
CPCIZyHX6BclkRToAwN300AOEytP8vf7J1mmsNKMJfaNXgw4rKq/NxPII3UKpGW8
p/zpkgdP/Q5erpfVwAUJMyFW4tZC75AP3fOly3CC3DMDfyjM5cCcYNpSBXLiAZw1
jJhs2vdGgh6g0J5lqHGUVRTTPgagKUn0HE7Mr2mC2bh/iKCNks8npjFJcGPCvRSC
FwnoZhJF9nVVte5XggXlqp8SsoBEl7/x7OO/ujsEIT29aPRliB/dP3aaPwhja7Cr
kCk=
-----END CERTIFICATE-----
Generated at Tue Oct 21 06:45:09 2025 by rpki-client