Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa
File:                     ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa (raw, json)
Hash identifier:          VcIenqJLj/7Fwi9kRV97Qb1TMAFDtDn1fDTdNoNqmQ8=
Subject key identifier:   04:53:8E:78:81:E3:63:69:5B:68:7D:72:60:23:83:DE:7D:A0:EE:A6
Certificate issuer:       /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial:       010D0C9F4328584B2496DA143CED3EFD86AA4400
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        207.174.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:da:14:3c:ed:3e:fd:86:aa:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=66ce3679-3d91-4eb6-9206-59db172c869a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:90:cf:f3:6d:63:66:36:67:9e:a0:5a:01:
                    75:2d:20:18:32:ab:ed:e8:9e:31:16:85:4d:a7:34:
                    12:8c:d4:c4:ab:2c:45:09:4f:c2:a1:81:1d:ac:4c:
                    ea:4b:74:36:35:cd:3e:5d:22:a4:96:ed:13:8d:ec:
                    bf:10:f7:82:ba:e4:77:de:2f:a7:a9:17:b4:eb:3d:
                    09:65:94:77:cd:4f:52:2a:d3:a7:9e:d0:72:d5:6a:
                    7f:b1:09:e2:b5:dc:ee:59:8e:d1:89:9c:a5:50:60:
                    46:de:29:33:19:6d:1c:63:7b:80:1d:df:99:1f:92:
                    8b:de:59:63:1c:29:c0:02:2d:f0:22:ec:ea:04:90:
                    f2:36:5b:fc:a1:14:10:48:a5:73:74:d9:8b:5a:1e:
                    45:be:00:58:88:9f:ae:b5:dc:fd:ab:83:18:07:79:
                    6d:69:ac:a8:b9:9d:f2:ce:e2:44:1d:e8:c1:ce:f1:
                    3d:12:85:a0:4d:81:ff:48:ee:e5:3d:2a:0c:27:0c:
                    4e:8b:45:f4:7c:dd:36:43:75:01:7d:89:c7:82:af:
                    fa:df:41:70:a0:31:78:37:e3:53:54:a0:00:dc:ef:
                    e7:55:1a:5b:0d:51:2b:dd:7f:db:b3:f2:5a:34:78:
                    49:14:0e:df:a4:2f:5c:8f:18:d0:70:fd:6f:ed:17:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:53:8E:78:81:E3:63:69:5B:68:7D:72:60:23:83:DE:7D:A0:EE:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl

            X509v3 Authority Key Identifier:
                keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e5:52:72:7c:db:d5:80:ab:70:89:b9:c2:5c:cc:f5:00:cd:
         09:ad:25:df:52:19:ac:8c:c2:a6:73:6a:4a:f1:5d:23:0e:56:
         b1:ba:6b:6c:bc:16:08:15:9d:f5:fc:cc:f5:ae:20:73:9f:5a:
         63:45:eb:2c:24:e3:1b:7e:04:bf:c9:02:77:22:54:72:70:45:
         32:66:eb:ab:80:7d:1f:06:75:c6:cb:56:27:31:31:fc:0b:cb:
         f7:1b:56:94:36:1f:84:8b:cc:3c:db:84:86:0e:02:61:a4:32:
         f6:d2:35:8c:20:87:8b:66:a7:24:6a:96:02:18:2f:5f:1f:28:
         9e:a6:93:9e:2a:5e:9a:eb:eb:95:e9:5c:bd:76:ef:cf:c5:f7:
         4f:5c:f6:53:05:14:59:c2:af:51:55:25:68:69:d9:d6:51:62:
         a2:b9:3a:e4:02:52:fc:ff:27:fa:09:31:32:a3:b8:27:72:e5:
         d8:ba:a2:4c:8b:70:47:8f:35:69:0b:60:4c:d7:b0:6d:48:23:
         c9:bd:e3:21:53:87:6f:bc:bb:ea:7f:2d:a0:5e:30:b9:5e:f2:
         bc:e4:68:13:94:80:84:1a:1b:2e:11:65:b2:3f:6b:a9:fa:5e:
         ba:bb:4e:03:10:16:19:4e:db:6e:f6:03:12:d0:a1:21:70:3b:
         49:fe:04:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltoUPO0+/YaqRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNjODgwZmQtMTdkNi00YjM3LTk1MzctNDU2ZWU2MzY5
ZWQ0MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
NjZjZTM2NzktM2Q5MS00ZWI2LTkyMDYtNTlkYjE3MmM4NjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBSQz/NtY2Y2Z56gWgF1LSAYMqvt6J4xFoVN
pzQSjNTEqyxFCU/CoYEdrEzqS3Q2Nc0+XSKklu0Tjey/EPeCuuR33i+nqRe06z0J
ZZR3zU9SKtOnntBy1Wp/sQnitdzuWY7RiZylUGBG3ikzGW0cY3uAHd+ZH5KL3llj
HCnAAi3wIuzqBJDyNlv8oRQQSKVzdNmLWh5FvgBYiJ+utdz9q4MYB3ltaayouZ3y
zuJEHejBzvE9EoWgTYH/SO7lPSoMJwxOi0X0fN02Q3UBfYnHgq/630FwoDF4N+NT
VKAA3O/nVRpbDVEr3X/bs/JaNHhJFA7fpC9cjxjQcP1v7ReRWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARTjniB42NpW2h9cmAjg959oO6mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kM2M4
ODBmZC0xN2Q2LTRiMzctOTUzNy00NTZlZTYzNjllZDQvZWQzZWI3ODMtOGY5NC0z
ZDBjLTliNWUtZTI2ZDc1MWI5MGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDNjODgwZmQtMTdkNi00YjM3LTk1
MzctNDU2ZWU2MzY5ZWQ0L2QzYzg4MGZkLTE3ZDYtNGIzNy05NTM3LTQ1NmVlNjM2
OWVkNC5jcmwwHwYDVR0jBBgwFoAUYvCQUJVtCdjqk9lfUIr65R55EwAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kM2M4ODBmZC0xN2Q2LTRiMzctOTUzNy00NTZl
ZTYzNjllZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnlUnJ829WAq3CJucJczPUAzQmtJd9SGayMwqZzakrxXSMOVrG6a2y8
FggVnfX8zPWuIHOfWmNF6ywk4xt+BL/JAnciVHJwRTJm66uAfR8GdcbLVicxMfwL
y/cbVpQ2H4SLzDzbhIYOAmGkMvbSNYwgh4tmpyRqlgIYL18fKJ6mk54qXprr65Xp
XL1278/F909c9lMFFFnCr1FVJWhp2dZRYqK5OuQCUvz/J/oJMTKjuCdy5di6okyL
cEePNWkLYEzXsG1II8m94yFTh2+8u+p/LaBeMLle8rzkaBOUgIQaGy4RZbI/a6n6
Xrq7TgMQFhlO2272AxLQoSFwO0n+BNE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:27 2025 by rpki-client