Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa
File:                     210d697f-4471-33fc-9f0b-14da84092c79.roa (raw, json)
Hash identifier:          gyCUZccmFX3tpETiQzX7dzJEMais3XJ5zOeUX10tHt4=
Subject key identifier:   15:F0:5B:43:CE:F7:AC:A8:71:E7:BF:15:EA:D3:84:42:EC:AE:92:92
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F4328584B3AEC464531C315D471CADD00
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     26658
IP address blocks:        198.180.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:46:45:31:c3:15:d4:71:ca:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=5e9b4f27-3da4-4386-94f2-8e9023b5ed43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:44:a2:5e:fd:ae:0d:8a:b0:28:29:65:58:
                    81:d0:95:2f:f3:28:ec:5c:6f:85:f5:4a:52:83:52:
                    f6:92:00:14:d1:32:b4:68:18:71:8e:58:ab:26:53:
                    3f:5e:30:cf:b1:da:76:d7:3c:9c:b4:cf:85:b9:a0:
                    53:f5:89:af:54:ec:d7:b5:e0:3c:c9:c2:5c:4d:2b:
                    87:94:9e:c3:37:96:83:11:91:11:85:99:ee:25:ac:
                    73:18:45:9e:77:46:2f:1e:19:fd:81:c9:51:2e:3e:
                    71:a8:28:83:67:1d:8a:04:2b:24:f2:6e:c3:d0:40:
                    bb:98:d5:24:be:eb:89:20:43:e2:f9:6d:0f:d8:e9:
                    d3:63:b1:a8:20:59:fa:71:03:c9:59:3b:f5:2a:f8:
                    06:f8:0a:84:02:18:71:58:6c:bf:a1:c0:1c:15:29:
                    15:64:18:22:ad:06:ff:01:85:0b:4e:a5:89:bd:69:
                    78:52:8a:ce:11:54:33:64:70:e6:dc:b5:28:5c:9b:
                    b6:91:a4:ba:7a:c3:fd:24:df:b4:50:32:a3:15:39:
                    81:f0:d4:7e:cf:06:1f:5f:31:f5:e6:3a:02:ee:9b:
                    16:86:18:a2:bf:d4:15:1a:0f:02:0f:dc:b3:16:3f:
                    b3:32:cf:71:f9:51:31:0b:25:23:d0:19:cf:15:fb:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F0:5B:43:CE:F7:AC:A8:71:E7:BF:15:EA:D3:84:42:EC:AE:92:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:20:9b:d4:9b:6e:62:04:06:7e:d5:14:89:6f:20:93:10:3f:
         e0:1e:03:da:50:f4:95:ab:12:e0:a6:2e:4b:df:6a:3f:cd:5b:
         ce:cd:b1:d8:79:2c:32:05:ab:70:8d:bc:58:ea:e8:04:b8:4f:
         73:68:b7:de:6a:9a:f6:b6:a8:8b:85:41:12:d5:f1:f8:6c:f8:
         88:5c:7d:7c:c9:f6:96:d8:e8:a7:38:0e:df:29:82:d8:db:ef:
         9e:23:9a:7d:72:6e:1a:74:e5:b2:8b:ba:31:fb:bc:b2:a1:14:
         18:66:7c:73:fd:2d:0a:f7:be:60:a0:82:df:67:4f:1a:d4:64:
         ab:f4:93:a5:66:7a:28:d9:53:40:1d:c0:4e:2b:f9:62:f9:32:
         e7:71:ad:93:98:11:37:13:a3:32:7b:0f:f5:92:0f:d0:77:3b:
         3d:16:b9:54:4f:ac:6c:81:c3:1b:ae:99:0b:2a:9b:2b:45:8f:
         41:73:b7:8c:46:67:da:0a:48:45:84:5c:a5:61:19:05:bd:e2:
         92:94:05:56:f3:12:59:fe:76:a6:67:02:c1:ca:53:96:b3:5e:
         9c:db:a7:66:d4:08:9a:f4:f2:d6:ae:64:c3:17:45:b0:20:77:
         11:66:5d:57:c7:dc:de:8a:b1:b1:25:09:7a:71:f8:61:2f:88:
         83:4f:18:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67EZFMcMV1HHK3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0
YTZkMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk
NWU5YjRmMjctM2RhNC00Mzg2LTk0ZjItOGU5MDIzYjVlZDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubFEol79rg2KsCgpZViB0JUv8yjsXG+F9UpS
g1L2kgAU0TK0aBhxjlirJlM/XjDPsdp21zyctM+FuaBT9YmvVOzXteA8ycJcTSuH
lJ7DN5aDEZERhZnuJaxzGEWed0YvHhn9gclRLj5xqCiDZx2KBCsk8m7D0EC7mNUk
vuuJIEPi+W0P2OnTY7GoIFn6cQPJWTv1KvgG+AqEAhhxWGy/ocAcFSkVZBgirQb/
AYULTqWJvWl4UorOEVQzZHDm3LUoXJu2kaS6esP9JN+0UDKjFTmB8NR+zwYfXzH1
5joC7psWhhiiv9QVGg8CD9yzFj+zMs9x+VExCyUj0BnPFfu/4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXwW0PO96yocee/FerThELsrpKSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5
YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMjEwZDY5N2YtNDQ3MS0z
M2ZjLTlmMGItMTRkYTg0MDkyYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj
ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2
NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3
MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrTGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAgm9SbbmIEBn7VFIlvIJMQP+AeA9pQ9JWrEuCmLkvfaj/NW87Nsdh5
LDIFq3CNvFjq6AS4T3Not95qmva2qIuFQRLV8fhs+IhcfXzJ9pbY6Kc4Dt8pgtjb
754jmn1ybhp05bKLujH7vLKhFBhmfHP9LQr3vmCggt9nTxrUZKv0k6VmeijZU0Ad
wE4r+WL5MudxrZOYETcTozJ7D/WSD9B3Oz0WuVRPrGyBwxuumQsqmytFj0Fzt4xG
Z9oKSEWEXKVhGQW94pKUBVbzEln+dqZnAsHKU5azXpzbp2bUCJr08tauZMMXRbAg
dxFmXVfH3N6KsbElCXpx+GEviINPGHQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:31 2025 by rpki-client