Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f03ddb40-aee5-3293-bd41-a631e8443296.roa
File:                     f03ddb40-aee5-3293-bd41-a631e8443296.roa (raw, json)
Hash identifier:          cjNYSdqUJ3e2YJjWcJViiZomr2WQBEHa7EISmZlxVIU=
Subject key identifier:   95:DB:2F:84:6D:F1:0D:72:83:25:5D:1C:07:1F:34:B6:96:FF:05:97
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C708D9B051923B83C4B00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f03ddb40-aee5-3293-bd41-a631e8443296.roa
Signing time:             Fri 10 Oct 2025 15:41:23 +0000
ROA not before:           Fri 10 Oct 2025 15:41:23 +0000
ROA not after:            Thu 08 Jan 2026 16:41:23 +0000
asID:                     81
IP address blocks:        204.84.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:70:8d:9b:05:19:23:b8:3c:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:23 2025 GMT
            Not After : Jan  8 16:41:23 2026 GMT
        Subject: CN=851c9d80-ca41-4943-ae67-1d38d6b52890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:fc:8e:33:5f:50:2d:1c:8c:87:bd:94:e1:
                    25:91:ef:94:ec:00:87:15:05:29:2b:38:00:8f:59:
                    e6:c4:ae:01:74:cd:c7:d4:64:28:c4:08:05:4f:b0:
                    bf:77:37:70:6c:d0:f4:6a:fa:6b:41:75:c5:ff:b5:
                    69:75:41:f3:4e:97:46:dc:b8:1e:e4:7e:11:f4:67:
                    70:5b:f4:bb:1e:a0:a7:56:4a:3a:a4:a3:9c:f0:32:
                    65:3e:7a:ab:b2:d0:58:98:56:73:b0:56:ff:96:a8:
                    3f:fe:70:6a:47:7d:7a:a5:04:2c:a1:4b:38:79:53:
                    08:cb:f0:bb:0a:05:79:82:64:4c:aa:65:cb:db:a2:
                    01:dc:2d:99:b3:be:f3:36:70:4e:20:10:33:fc:1e:
                    0a:2b:5c:8b:5b:04:b6:25:d6:30:19:16:6e:75:be:
                    ad:cf:4e:a8:33:05:fb:27:3b:e1:3d:35:18:a8:bb:
                    9f:71:d6:70:a9:d4:26:cf:b6:78:24:10:1f:ea:31:
                    16:66:27:b0:0b:c3:d8:20:27:77:65:05:27:c1:cd:
                    ae:d8:65:7f:a3:9c:60:b5:8e:0a:a2:f9:17:03:a2:
                    97:d3:25:80:c9:04:45:cb:51:35:06:99:e7:65:54:
                    39:1e:d6:43:e9:dd:e1:8a:10:aa:98:9a:49:af:e7:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DB:2F:84:6D:F1:0D:72:83:25:5D:1C:07:1F:34:B6:96:FF:05:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f03ddb40-aee5-3293-bd41-a631e8443296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:df:05:a0:83:8f:dc:ac:89:ce:5e:29:d0:ab:96:0e:56:ad:
         4c:80:5f:0f:a2:c4:e7:1d:25:ef:37:63:ab:16:8f:7e:bd:50:
         53:59:f8:ee:48:a9:3c:4b:5f:b0:c3:03:90:4a:c2:ca:b6:2b:
         55:7c:a2:9d:d4:b5:da:3c:58:60:12:a1:f3:68:55:88:a6:d8:
         b0:b3:0d:ca:94:6c:62:18:60:14:c7:c2:46:05:2f:fd:70:0d:
         dd:23:36:d3:97:02:a2:67:ad:fe:ef:bd:16:71:2e:88:fb:bd:
         5d:a9:81:5f:8d:15:11:6e:02:b5:bb:72:3a:0d:ed:93:79:be:
         17:c9:dc:ae:37:e3:14:8b:a0:1e:80:07:ad:64:05:74:97:69:
         7a:01:69:f4:d6:91:f3:14:4e:55:b2:f8:37:6d:bb:38:69:7b:
         c8:f2:3c:7d:d5:c7:1c:18:93:3e:6e:95:e7:0b:d8:76:15:d1:
         12:67:b3:7b:33:86:f5:19:ed:56:0a:4c:f3:c9:e5:5d:83:f6:
         64:65:16:70:ec:f0:41:c8:01:8c:e5:9a:65:6a:70:0b:20:79:
         41:e9:5d:6d:73:a1:35:c8:de:5f:81:c9:9c:0d:56:cb:fc:48:
         db:55:04:f7:ca:17:27:6e:ce:c6:88:0e:b5:b0:cb:d7:81:c4:
         3f:b2:9a:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DHCNmwUZI7g8SwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MTAxMDE1NDEyM1oXDTI2MDEwODE2NDEyM1owLzEtMCsGA1UEAxMk
ODUxYzlkODAtY2E0MS00OTQzLWFlNjctMWQzOGQ2YjUyODkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8f8jjNfUC0cjIe9lOElke+U7ACHFQUpKzgA
j1nmxK4BdM3H1GQoxAgFT7C/dzdwbND0avprQXXF/7VpdUHzTpdG3Lge5H4R9Gdw
W/S7HqCnVko6pKOc8DJlPnqrstBYmFZzsFb/lqg//nBqR316pQQsoUs4eVMIy/C7
CgV5gmRMqmXL26IB3C2Zs77zNnBOIBAz/B4KK1yLWwS2JdYwGRZudb6tz06oMwX7
JzvhPTUYqLufcdZwqdQmz7Z4JBAf6jEWZiewC8PYICd3ZQUnwc2u2GV/o5xgtY4K
ovkXA6KX0yWAyQRFy1E1BpnnZVQ5HtZD6d3hihCqmJpJr+dpHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXbL4Rt8Q1ygyVdHAcfNLaW/wWXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjAzZGRiNDAtYWVlNS0z
MjkzLWJkNDEtYTYzMWU4NDQzMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFTzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/fBaCDj9ysic5eKdCrlg5WrUyAXw+ixOcdJe83Y6sWj369UFNZ+O5I
qTxLX7DDA5BKwsq2K1V8op3Utdo8WGASofNoVYim2LCzDcqUbGIYYBTHwkYFL/1w
Dd0jNtOXAqJnrf7vvRZxLoj7vV2pgV+NFRFuArW7cjoN7ZN5vhfJ3K434xSLoB6A
B61kBXSXaXoBafTWkfMUTlWy+Ddtuzhpe8jyPH3VxxwYkz5ulecL2HYV0RJns3sz
hvUZ7VYKTPPJ5V2D9mRlFnDs8EHIAYzlmmVqcAsgeUHpXW1zoTXI3l+ByZwNVsv8
SNtVBPfKFyduzsaIDrWwy9eBxD+ymmg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:19 2025 by rpki-client