Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a4171d2f-2a2a-388f-8f8b-362186830c3a.roa
File:                     a4171d2f-2a2a-388f-8f8b-362186830c3a.roa (raw, json)
Hash identifier:          hOFdLAoXeqDvc2E+Md85lxZ8mNRyGEvKAJhkX8vc+MA=
Subject key identifier:   AC:EA:E5:83:99:D5:E8:24:FA:DD:76:08:2C:26:8E:6A:F3:B2:15:3B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B8EACF0EB5F7C025200CA4F80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a4171d2f-2a2a-388f-8f8b-362186830c3a.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     17025
IP address blocks:        64.124.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:f0:eb:5f:7c:02:52:00:ca:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=424c2613-e8b3-44b9-8456-169382162ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:79:e1:95:5a:50:f7:2f:8d:9b:ba:df:23:a1:
                    87:1c:97:86:aa:3a:33:de:23:1b:f2:59:ae:33:ea:
                    5e:da:dd:ac:ed:e9:78:eb:d2:5d:07:76:da:04:e1:
                    65:ea:72:28:29:15:a9:ae:1b:d9:5a:83:aa:b4:23:
                    96:4c:bc:e3:30:08:1b:0a:18:c0:6c:f6:0d:c5:fa:
                    1d:9b:f5:38:90:e5:c3:a2:72:4f:9c:61:f6:0b:7b:
                    18:d2:b0:30:51:73:8f:8e:e0:22:34:d0:c0:de:86:
                    13:31:58:0b:87:11:66:2b:49:fc:a5:3d:5c:e3:5c:
                    81:e8:62:c5:70:18:79:2d:97:f9:dc:e0:33:b9:06:
                    25:36:71:a9:3e:66:3d:6b:b2:18:8f:12:94:f7:f4:
                    2a:95:b3:93:0b:af:74:de:5e:17:27:9c:ae:b3:18:
                    3d:8c:b6:32:f1:b8:e0:74:73:bb:b4:07:ae:3c:9b:
                    bf:03:59:60:d9:97:90:67:5a:4e:c3:2f:22:da:5a:
                    95:b6:bb:5d:cc:b0:66:15:68:39:7e:3f:5d:d5:9c:
                    f5:91:e5:5f:18:02:9f:34:8b:c1:e4:92:06:f8:dd:
                    66:66:01:66:d9:47:ad:c7:7f:c7:9e:be:ab:65:f2:
                    d5:39:55:f5:ab:7f:9a:cd:23:01:d0:26:29:6b:6a:
                    49:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EA:E5:83:99:D5:E8:24:FA:DD:76:08:2C:26:8E:6A:F3:B2:15:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a4171d2f-2a2a-388f-8f8b-362186830c3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:11:a2:6f:cf:f1:77:3c:bc:66:f6:17:c0:8c:95:43:b7:6b:
         bc:98:8b:aa:12:9c:12:62:c8:21:2f:29:b3:8b:d5:01:31:7c:
         57:97:dd:e1:7a:ac:50:6b:8f:22:7c:57:7b:1c:36:4b:1d:d8:
         b8:72:e7:c2:c3:96:4e:21:45:94:7e:ab:9f:74:df:37:f6:95:
         1d:72:01:87:91:ca:d1:15:71:90:b5:4d:b5:aa:b3:49:23:a6:
         21:26:6f:b5:a2:8a:f0:d0:bb:46:e9:e2:4e:32:ca:f7:c8:c9:
         45:1b:93:86:a9:48:f9:4f:06:8f:af:01:48:60:5c:ad:44:91:
         36:72:24:38:b9:80:39:cf:f3:28:4e:e6:b0:b5:a1:e4:da:6a:
         b7:f9:96:cb:71:11:bd:f6:a1:6c:b2:db:79:91:2a:51:0b:a7:
         bc:2c:b9:85:93:ca:3a:d6:ef:eb:18:c5:8b:31:b7:f5:78:27:
         01:06:f1:6d:7e:49:4a:e6:80:76:53:8a:5d:f1:81:74:7a:0c:
         49:f1:a3:f5:d6:ad:27:6a:6e:32:f3:f9:49:9d:c3:f0:21:70:
         d8:8d:9b:e7:c5:96:03:b6:9a:ea:c2:5f:8f:a0:5c:f3:18:70:
         11:0a:c2:63:ef:35:7c:a8:89:91:a0:6a:a5:25:b4:e7:46:fb:
         1c:e6:17:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPDrX3wCUgDKT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
NDI0YzI2MTMtZThiMy00NGI5LTg0NTYtMTY5MzgyMTYyZGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXnhlVpQ9y+Nm7rfI6GHHJeGqjoz3iMb8lmu
M+pe2t2s7el469JdB3baBOFl6nIoKRWprhvZWoOqtCOWTLzjMAgbChjAbPYNxfod
m/U4kOXDonJPnGH2C3sY0rAwUXOPjuAiNNDA3oYTMVgLhxFmK0n8pT1c41yB6GLF
cBh5LZf53OAzuQYlNnGpPmY9a7IYjxKU9/QqlbOTC6903l4XJ5yusxg9jLYy8bjg
dHO7tAeuPJu/A1lg2ZeQZ1pOwy8i2lqVtrtdzLBmFWg5fj9d1Zz1keVfGAKfNIvB
5JIG+N1mZgFm2Uetx3/Hnr6rZfLVOVX1q3+azSMB0CYpa2pJJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzq5YOZ1egk+t12CCwmjmrzshU7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYTQxNzFkMmYtMmEyYS0z
ODhmLThmOGItMzYyMTg2ODMwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHxcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALsRom/P8Xc8vGb2F8CMlUO3a7yYi6oSnBJiyCEvKbOL1QExfFeX3eF6
rFBrjyJ8V3scNksd2Lhy58LDlk4hRZR+q5903zf2lR1yAYeRytEVcZC1TbWqs0kj
piEmb7WiivDQu0bp4k4yyvfIyUUbk4apSPlPBo+vAUhgXK1EkTZyJDi5gDnP8yhO
5rC1oeTaarf5lstxEb32oWyy23mRKlELp7wsuYWTyjrW7+sYxYsxt/V4JwEG8W1+
SUrmgHZTil3xgXR6DEnxo/XWrSdqbjLz+Umdw/AhcNiNm+fFlgO2murCX4+gXPMY
cBEKwmPvNXyoiZGgaqUltOdG+xzmF4E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:28:14 2025 by rpki-client