Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/bc290b45-2d90-32cc-a783-29c0c0317fc6.roa
File:                     bc290b45-2d90-32cc-a783-29c0c0317fc6.roa (raw, json)
Hash identifier:          SN5S4GFT0o0ykBmItCnwkHV5kWtLb17ca2XulaoCW5w=
Subject key identifier:   5E:34:4A:82:58:AA:1B:F8:31:EB:74:6E:41:B4:82:A4:7D:0C:E8:D4
Certificate issuer:       /CN=b764fe0e-08f6-4216-a719-1ca6386e5571
Certificate serial:       010D0C9F4328584B4D11D35D4BCA98F4B7AD9380
Authority key identifier: 71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/bc290b45-2d90-32cc-a783-29c0c0317fc6.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     400862
IP address blocks:        209.188.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d3:5d:4b:ca:98:f4:b7:ad:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b764fe0e-08f6-4216-a719-1ca6386e5571
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=adddb3d8-95da-478c-a259-3d33e550a2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:bf:20:d0:78:b4:c5:27:ad:33:40:44:3f:
                    13:6f:3d:c8:56:cf:c8:46:fe:04:cc:2f:1a:cd:17:
                    30:b1:2a:1a:cd:84:68:30:83:a6:b3:86:d2:01:99:
                    65:03:d7:bf:80:b7:43:02:f9:80:88:18:4d:80:3c:
                    85:75:1f:73:50:d9:de:e2:15:8e:00:24:5e:b1:c5:
                    93:05:ff:d5:bb:65:93:6c:be:ec:38:ff:e4:ac:f6:
                    71:f1:40:c2:a3:da:cb:36:0a:5d:e6:75:aa:bf:ac:
                    ab:d5:7b:5c:7c:30:2c:c6:5f:70:a9:ee:67:ac:b5:
                    1a:af:51:3e:06:83:fe:45:36:5c:0a:ab:74:22:c2:
                    da:db:5d:9d:b9:0d:41:9e:5f:c3:cd:ed:4c:01:34:
                    9d:31:cf:34:4c:80:07:36:24:21:32:7c:a5:4e:2e:
                    2d:75:05:e9:1c:3c:e3:8f:b0:94:94:13:52:65:29:
                    98:98:d1:1c:49:52:af:0e:e8:a6:62:8c:a5:94:c9:
                    9f:ce:27:c3:00:2b:94:2f:29:8c:05:3f:cb:c5:f7:
                    9e:ce:76:84:4b:94:e6:27:18:6a:cd:8c:cf:c2:2e:
                    97:a4:76:08:59:83:68:b4:cc:56:e0:07:e9:76:9d:
                    87:f4:c0:e9:14:83:8c:27:09:4a:d3:06:43:fc:e4:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:34:4A:82:58:AA:1B:F8:31:EB:74:6E:41:B4:82:A4:7D:0C:E8:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/bc290b45-2d90-32cc-a783-29c0c0317fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.crl

            X509v3 Authority Key Identifier:
                keyid:71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:4e:4a:04:81:f3:14:d8:37:f1:97:e8:b1:3b:ee:60:60:54:
         21:4c:7b:d5:df:4f:a5:5f:38:93:44:4c:80:f6:74:1b:a5:23:
         a4:d9:2e:1a:88:3f:79:c4:69:9f:60:30:73:12:89:63:a1:4e:
         10:ce:59:f4:5f:1a:eb:e9:f4:55:f4:c7:6b:a7:25:55:68:51:
         ce:ac:c9:03:78:4c:b3:e6:2b:0f:ea:28:8b:21:6e:a7:a9:f3:
         14:e9:02:df:2a:5c:b4:e6:d3:96:8d:d7:8b:83:a0:32:0b:9c:
         74:6d:5e:f2:6c:9a:a1:a3:da:16:10:45:be:95:16:6a:2c:02:
         37:1b:62:07:59:d8:c9:0b:25:de:bf:6a:b3:53:71:41:d6:8c:
         2a:80:88:08:be:d9:8a:e5:3e:6b:ba:69:ca:21:55:a2:4e:03:
         8f:dc:bd:2a:57:7e:61:cd:b4:47:92:44:62:6f:e9:d7:cc:b2:
         6c:c2:96:17:1b:3e:d0:16:22:65:de:76:b4:b5:a6:6b:aa:f8:
         8b:34:18:c7:54:7f:11:ff:79:f0:d0:d1:47:69:27:91:f7:59:
         1c:fe:b0:51:40:93:12:95:20:e3:c7:a7:7c:e3:b0:f6:44:f5:
         de:4f:3a:6f:6c:8f:19:4e:56:20:eb:bd:ba:58:74:80:cc:06:
         e0:b4:65:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdNdS8qY9Letk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2NGZlMGUtMDhmNi00MjE2LWE3MTktMWNhNjM4NmU1
NTcxMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk
YWRkZGIzZDgtOTVkYS00NzhjLWEyNTktM2QzM2U1NTBhMmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlW/INB4tMUnrTNARD8Tbz3IVs/IRv4EzC8a
zRcwsSoazYRoMIOms4bSAZllA9e/gLdDAvmAiBhNgDyFdR9zUNne4hWOACRescWT
Bf/Vu2WTbL7sOP/krPZx8UDCo9rLNgpd5nWqv6yr1XtcfDAsxl9wqe5nrLUar1E+
BoP+RTZcCqt0IsLa212duQ1Bnl/Dze1MATSdMc80TIAHNiQhMnylTi4tdQXpHDzj
j7CUlBNSZSmYmNEcSVKvDuimYoyllMmfzifDACuULymMBT/LxfeeznaES5TmJxhq
zYzPwi6XpHYIWYNotMxW4Afpdp2H9MDpFIOMJwlK0wZD/OR/5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF40SoJYqhv4Met0bkG0gqR9DOjUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzY0
ZmUwZS0wOGY2LTQyMTYtYTcxOS0xY2E2Mzg2ZTU1NzEvYmMyOTBiNDUtMmQ5MC0z
MmNjLWE3ODMtMjljMGMwMzE3ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2NGZlMGUtMDhmNi00MjE2LWE3
MTktMWNhNjM4NmU1NTcxL2I3NjRmZTBlLTA4ZjYtNDIxNi1hNzE5LTFjYTYzODZl
NTU3MS5jcmwwHwYDVR0jBBgwFoAUcbRbbrbA5iiN8AlgtLFxFI/hy/AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzY0ZmUwZS0wOGY2LTQyMTYtYTcxOS0xY2E2
Mzg2ZTU1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bxuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJOSgSB8xTYN/GX6LE77mBgVCFMe9XfT6VfOJNETID2dBulI6TZLhqI
P3nEaZ9gMHMSiWOhThDOWfRfGuvp9FX0x2unJVVoUc6syQN4TLPmKw/qKIshbqep
8xTpAt8qXLTm05aN14uDoDILnHRtXvJsmqGj2hYQRb6VFmosAjcbYgdZ2MkLJd6/
arNTcUHWjCqAiAi+2YrlPmu6acohVaJOA4/cvSpXfmHNtEeSRGJv6dfMsmzClhcb
PtAWImXedrS1pmuq+Is0GMdUfxH/efDQ0UdpJ5H3WRz+sFFAkxKVIOPHp3zjsPZE
9d5POm9sjxlOViDrvbpYdIDMBuC0ZTU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:11 2025 by rpki-client