Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d97dc0c9-0a53-3b39-8619-7710126ebf97.roa
File:                     d97dc0c9-0a53-3b39-8619-7710126ebf97.roa (raw, json)
Hash identifier:          co4SKePfBag4hPbQiEPqD1PSkyP/1MkAElIsgxcd2sQ=
Subject key identifier:   44:4B:70:A0:93:55:75:01:1F:F8:92:3A:7C:DD:08:99:08:FB:2D:75
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B92DCF51B3127D3F72B27FF80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d97dc0c9-0a53-3b39-8619-7710126ebf97.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     21646
IP address blocks:        64.124.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f5:1b:31:27:d3:f7:2b:27:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=5e1bce56-baed-42f1-bc83-641ea6bc7a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:37:16:6c:52:c7:b2:a4:84:9a:f1:e8:d1:
                    aa:df:08:77:8e:32:b5:f4:79:f2:4b:86:f5:2e:9e:
                    06:fc:62:ba:bd:3d:21:09:fc:1b:e2:f2:f6:8f:f0:
                    4b:40:19:5f:76:aa:28:06:6b:2c:74:1f:78:f4:15:
                    7e:51:f5:d4:32:a8:a1:45:a7:bb:09:b5:0f:f5:12:
                    6e:3c:e9:2d:55:1e:4b:b0:be:24:26:fa:dc:ad:e7:
                    bf:55:9b:05:dd:bf:5d:54:34:68:9a:6b:70:2f:84:
                    8d:ee:65:86:d0:e0:a1:55:e0:f8:a7:68:57:ac:39:
                    7b:e7:40:11:5d:f5:4d:1f:4b:a4:1c:91:5d:22:0e:
                    42:15:da:e6:04:cd:b9:66:f9:a5:d1:75:45:57:d3:
                    b6:ae:6f:a5:6b:bb:00:e7:13:98:fc:e8:ef:fb:3d:
                    5e:2c:ed:9a:30:12:02:23:6d:ee:01:86:52:0f:12:
                    0a:90:6a:bb:e5:91:b0:dc:50:19:a7:64:4b:c6:6f:
                    a1:50:42:56:03:35:00:f2:2f:ba:d9:94:e3:e3:2e:
                    41:19:cb:dc:39:be:2c:79:f6:b3:2e:45:e0:e6:96:
                    b8:30:f6:a0:8d:69:ee:10:5b:83:50:b7:00:1b:20:
                    ea:7e:b4:68:a4:0a:96:1c:60:2b:6c:bf:23:19:35:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4B:70:A0:93:55:75:01:1F:F8:92:3A:7C:DD:08:99:08:FB:2D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d97dc0c9-0a53-3b39-8619-7710126ebf97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2f:5e:28:dd:e1:b5:91:02:91:77:17:2a:71:80:28:9e:64:
         bf:1d:dd:ee:84:bb:96:96:3b:39:6b:58:ef:bb:72:0e:c3:60:
         1c:55:fe:cc:5f:5e:61:7a:68:96:83:7b:e0:3c:cd:2f:6b:48:
         fd:e9:3e:7a:d8:39:64:da:be:bf:12:b5:4d:d6:99:a5:1c:72:
         68:b1:eb:9f:04:4f:c3:b5:82:cf:c7:d8:78:fc:48:75:e8:33:
         6f:25:43:29:3d:1f:b5:85:ec:48:b1:d7:59:4c:c1:31:10:e1:
         e3:d8:9b:f7:75:4c:50:09:1d:88:be:e4:0e:26:7f:c1:5c:42:
         1b:6a:a5:cb:c0:50:c8:e2:c6:49:37:bc:52:27:87:c8:2c:15:
         5b:6a:8d:11:2e:a7:dd:c1:ab:0d:ea:43:6c:84:64:90:f0:cb:
         08:85:41:df:c1:91:15:19:14:75:5a:2a:89:78:c7:fe:9c:a3:
         24:b8:05:66:7f:7e:03:f6:26:c6:ab:86:4c:b6:36:42:63:d9:
         3c:10:03:2b:89:d0:f7:81:0d:2f:82:ae:66:2f:40:e8:55:2e:
         dd:9f:b0:90:03:80:3a:96:33:72:8c:b6:ef:74:d9:c5:1b:c0:
         ae:3f:76:eb:5d:63:3b:3b:61:f8:5a:76:54:21:b9:4f:bc:6e:
         79:22:43:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PUbMSfT9ysn/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
NWUxYmNlNTYtYmFlZC00MmYxLWJjODMtNjQxZWE2YmM3YTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiU3FmxSx7KkhJrx6NGq3wh3jjK19HnyS4b1
Lp4G/GK6vT0hCfwb4vL2j/BLQBlfdqooBmssdB949BV+UfXUMqihRae7CbUP9RJu
POktVR5LsL4kJvrcree/VZsF3b9dVDRommtwL4SN7mWG0OChVeD4p2hXrDl750AR
XfVNH0ukHJFdIg5CFdrmBM25Zvml0XVFV9O2rm+la7sA5xOY/Ojv+z1eLO2aMBIC
I23uAYZSDxIKkGq75ZGw3FAZp2RLxm+hUEJWAzUA8i+62ZTj4y5BGcvcOb4sefaz
LkXg5pa4MPagjWnuEFuDULcAGyDqfrRopAqWHGArbL8jGTWJCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFERLcKCTVXUBH/iSOnzdCJkI+y11MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZDk3ZGMwYzktMGE1My0z
YjM5LTg2MTktNzcxMDEyNmViZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHyPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8vXijd4bWRApF3FypxgCieZL8d3e6Eu5aWOzlrWO+7cg7DYBxV/sxf
XmF6aJaDe+A8zS9rSP3pPnrYOWTavr8StU3WmaUccmix658ET8O1gs/H2Hj8SHXo
M28lQyk9H7WF7Eix11lMwTEQ4ePYm/d1TFAJHYi+5A4mf8FcQhtqpcvAUMjixkk3
vFInh8gsFVtqjREup93Bqw3qQ2yEZJDwywiFQd/BkRUZFHVaKol4x/6coyS4BWZ/
fgP2Jsarhky2NkJj2TwQAyuJ0PeBDS+CrmYvQOhVLt2fsJADgDqWM3KMtu902cUb
wK4/dutdYzs7YfhadlQhuU+8bnkiQ34=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:15:26 2025 by rpki-client