Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d8569905-c89c-3355-8466-f3e7230a68f9.roa
File:                     d8569905-c89c-3355-8466-f3e7230a68f9.roa (raw, json)
Hash identifier:          ZXjWIxx1Rm7pcAdLyXQ6XUfY1mzvhmGcUTpMjNdw9Pw=
Subject key identifier:   03:DE:63:0D:8F:7C:51:31:D5:DE:DC:D3:2D:68:2C:45:FC:27:7C:26
Certificate issuer:       /CN=d5776a8f-6996-4275-a804-f1fb7cdf0d72
Certificate serial:       010D0C9F4328584B004BEDC765E6045AF4B05F00
Authority key identifier: DA:E4:16:F2:8B:3A:BB:A3:60:CE:08:55:96:C9:87:78:3F:C8:A6:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d8569905-c89c-3355-8466-f3e7230a68f9.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     1037
IP address blocks:        172.83.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d5776a8f-6996-4275-a804-f1fb7cdf0d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d5776a8f-6996-4275-a804-f1fb7cdf0d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:ed:c7:65:e6:04:5a:f4:b0:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5776a8f-6996-4275-a804-f1fb7cdf0d72
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=90e357a5-a937-4272-bdb3-eafcd728132c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f9:2a:69:34:80:49:88:d3:2e:33:a2:a8:19:
                    c1:c9:b0:50:ba:1b:62:17:df:d2:76:42:b8:63:60:
                    ed:5f:c5:35:fa:3d:b3:2f:bf:81:21:b2:04:87:b9:
                    6e:e6:93:d5:a0:89:c0:cc:4f:48:f8:ff:6a:5a:c7:
                    ce:81:72:52:24:57:ea:eb:8e:d4:5e:7f:2d:15:a6:
                    6d:5c:7b:46:b2:18:70:13:aa:18:e0:12:1a:d6:87:
                    5b:65:10:e5:61:36:67:0e:40:31:25:cc:58:9e:cb:
                    12:dc:fd:4c:ef:f2:19:ba:70:0e:16:68:7b:b4:47:
                    d7:df:12:33:e1:26:d4:68:9e:3b:9b:7d:9f:3b:70:
                    d3:d1:31:55:74:da:6f:85:ac:1f:ed:23:b2:47:ac:
                    f4:0d:f5:51:63:b5:34:c2:a3:90:b8:7a:75:90:cf:
                    36:9e:dd:4e:dd:58:d2:18:30:b6:e5:e2:d0:d0:80:
                    89:f0:1e:87:8b:16:24:ce:23:cb:3b:db:43:cf:80:
                    30:18:a6:7d:d8:b0:4e:bb:6f:d6:af:40:a2:27:fb:
                    45:cd:cf:9d:6d:b1:c7:11:1a:0e:8c:5d:09:ef:ab:
                    0c:a1:c7:c1:9f:9f:80:33:54:10:74:87:4e:99:aa:
                    94:2e:b9:cb:62:50:b2:81:07:4c:46:64:d7:5e:e0:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DE:63:0D:8F:7C:51:31:D5:DE:DC:D3:2D:68:2C:45:FC:27:7C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d8569905-c89c-3355-8466-f3e7230a68f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d5776a8f-6996-4275-a804-f1fb7cdf0d72.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E4:16:F2:8B:3A:BB:A3:60:CE:08:55:96:C9:87:78:3F:C8:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:32:d3:7d:0f:ae:d2:6c:c3:56:20:8c:1b:3a:65:fc:68:e0:
         93:3a:40:38:0d:40:99:4d:e8:57:3a:5e:ac:c5:eb:b3:66:11:
         2e:37:62:d6:7d:51:37:31:b9:d2:08:08:f2:3f:32:22:3a:4a:
         35:86:f8:4c:f0:99:b2:73:24:97:b5:e4:3b:6a:c1:a9:9f:fd:
         fd:69:f4:2c:b4:a4:f4:df:43:4e:3a:5a:98:75:53:6b:f9:85:
         e6:a4:c5:d0:85:66:15:f3:02:da:31:03:59:1f:f0:10:c0:11:
         44:3d:75:ee:28:0d:b4:f9:65:ab:04:7e:5f:f6:87:9e:be:4d:
         5b:60:be:a8:d9:22:da:44:75:b1:5f:01:62:af:33:66:4e:d3:
         06:89:fb:8d:66:dd:e3:2b:69:2b:bf:7e:a1:09:d0:71:2d:09:
         76:56:fd:f7:8c:51:56:91:ef:38:ab:28:c2:c9:dc:40:e8:b2:
         00:41:0f:d5:9d:58:93:cf:bc:5d:ee:00:71:65:df:d9:28:47:
         f9:df:89:73:a5:44:8a:eb:7e:90:90:4e:37:49:6a:22:3a:b1:
         05:e7:39:ac:13:1c:dc:4f:c7:be:9b:4d:6d:14:d9:3b:d6:4b:
         d1:10:d5:80:34:f1:31:f2:d5:0c:a9:f8:f8:38:05:94:7a:60:
         69:a1:80:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+3HZeYEWvSwXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU3NzZhOGYtNjk5Ni00Mjc1LWE4MDQtZjFmYjdjZGYw
ZDcyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
OTBlMzU3YTUtYTkzNy00MjcyLWJkYjMtZWFmY2Q3MjgxMzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/kqaTSASYjTLjOiqBnBybBQuhtiF9/SdkK4
Y2DtX8U1+j2zL7+BIbIEh7lu5pPVoInAzE9I+P9qWsfOgXJSJFfq647UXn8tFaZt
XHtGshhwE6oY4BIa1odbZRDlYTZnDkAxJcxYnssS3P1M7/IZunAOFmh7tEfX3xIz
4SbUaJ47m32fO3DT0TFVdNpvhawf7SOyR6z0DfVRY7U0wqOQuHp1kM82nt1O3VjS
GDC25eLQ0ICJ8B6HixYkziPLO9tDz4AwGKZ92LBOu2/Wr0CiJ/tFzc+dbbHHERoO
jF0J76sMocfBn5+AM1QQdIdOmaqULrnLYlCygQdMRmTXXuDt+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPeYw2PfFEx1d7c0y1oLEX8J3wmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNTc3
NmE4Zi02OTk2LTQyNzUtYTgwNC1mMWZiN2NkZjBkNzIvZDg1Njk5MDUtYzg5Yy0z
MzU1LTg0NjYtZjNlNzIzMGE2OGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDU3NzZhOGYtNjk5Ni00Mjc1LWE4
MDQtZjFmYjdjZGYwZDcyL2Q1Nzc2YThmLTY5OTYtNDI3NS1hODA0LWYxZmI3Y2Rm
MGQ3Mi5jcmwwHwYDVR0jBBgwFoAU2uQW8os6u6NgzghVlsmHeD/IpqcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNTc3NmE4Zi02OTk2LTQyNzUtYTgwNC1mMWZi
N2NkZjBkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFNTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4y030PrtJsw1YgjBs6Zfxo4JM6QDgNQJlN6Fc6XqzF67NmES43YtZ9
UTcxudIICPI/MiI6SjWG+EzwmbJzJJe15Dtqwamf/f1p9Cy0pPTfQ046Wph1U2v5
heakxdCFZhXzAtoxA1kf8BDAEUQ9de4oDbT5ZasEfl/2h56+TVtgvqjZItpEdbFf
AWKvM2ZO0waJ+41m3eMraSu/fqEJ0HEtCXZW/feMUVaR7zirKMLJ3EDosgBBD9Wd
WJPPvF3uAHFl39koR/nfiXOlRIrrfpCQTjdJaiI6sQXnOawTHNxPx76bTW0U2TvW
S9EQ1YA08THy1Qyp+Pg4BZR6YGmhgIU=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:12:42 2025 by rpki-client