Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/aab26e30-65cd-3f5a-9f04-11ae3336ae1b.roa
File:                     aab26e30-65cd-3f5a-9f04-11ae3336ae1b.roa (raw, json)
Hash identifier:          yrM3og3eolEqBwJHGjtJDWPC6FnSuy81e5FCSXdNYSs=
Subject key identifier:   70:E8:30:9B:37:8B:A4:67:D8:08:24:00:0F:1C:68:85:26:01:99:11
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584AEE2695ED5E40A724097B0400
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/aab26e30-65cd-3f5a-9f04-11ae3336ae1b.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     1742
IP address blocks:        192.54.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:95:ed:5e:40:a7:24:09:7b:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=c2dd6a24-d18a-410a-999e-543e7391887f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:07:1d:55:62:1d:28:f0:a2:cf:1c:61:c5:
                    3d:86:26:67:f3:4f:78:99:ce:f4:53:88:18:20:2c:
                    80:88:c3:cf:bb:66:4b:d5:5d:4c:78:c0:48:98:71:
                    03:0c:3b:f5:c4:67:b0:f4:a1:d8:5a:74:52:40:40:
                    bb:fa:14:b4:88:99:01:c9:b1:f7:91:03:96:4c:09:
                    24:06:de:66:8a:1f:93:ac:eb:58:ba:68:6a:88:b4:
                    fb:79:d8:a9:01:2b:87:54:c1:27:af:7c:28:b1:11:
                    94:f9:43:da:d8:d0:5d:7d:8a:a7:da:4f:91:51:86:
                    23:a6:c3:7c:00:80:89:42:89:b1:c3:dd:8e:af:5d:
                    1d:21:81:0b:2b:70:40:45:d4:16:6d:c7:87:b1:17:
                    6e:83:c2:7e:10:5c:3b:47:03:0e:c6:5f:47:98:41:
                    a9:10:65:d7:a5:d9:18:82:d5:f1:b0:25:e2:d6:8e:
                    df:69:8e:95:1e:71:d9:97:a2:7b:93:a3:f9:29:89:
                    af:9d:5c:df:7c:09:e8:cd:ae:b3:be:cc:bc:c2:3b:
                    01:ad:30:58:19:66:ae:cd:3d:ed:37:68:a0:5c:08:
                    b4:c9:28:b3:6e:f6:39:68:37:b5:2c:25:d4:01:fa:
                    05:f3:83:80:bb:9f:d4:a9:18:c1:07:fb:8e:f1:90:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:30:9B:37:8B:A4:67:D8:08:24:00:0F:1C:68:85:26:01:99:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/aab26e30-65cd-3f5a-9f04-11ae3336ae1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:29:c4:dd:92:da:10:88:0f:1d:4f:66:74:d0:27:0d:0a:2d:
         f6:fc:bc:73:22:3b:23:1e:8c:51:5a:6a:dc:0e:75:b1:e2:c3:
         87:38:d2:3d:e7:81:69:26:e6:69:ab:88:27:a3:ac:44:93:26:
         9b:03:b4:f6:30:6b:13:e1:f8:a0:eb:f3:ce:7a:52:ce:76:6f:
         6f:bc:e1:61:9e:13:32:a2:32:77:2a:61:97:f0:bc:56:b3:64:
         36:6a:51:16:73:ff:fd:61:46:6c:c9:ef:6b:bc:10:a4:88:bc:
         7d:5c:76:e2:e0:e5:53:e8:d4:5f:48:0e:c1:90:ae:68:40:b2:
         fd:d2:a9:66:c1:56:4a:94:c3:fd:a0:f9:9e:ac:1c:57:58:d1:
         0a:f9:db:52:6f:26:9c:7d:38:7f:47:eb:a7:8e:f3:07:7c:fc:
         6a:2a:24:15:91:76:9d:e6:2d:f6:6f:d5:a1:4d:11:74:21:bd:
         1d:9e:10:04:fc:f2:42:b7:64:7c:eb:65:9a:f3:6a:a9:e4:1c:
         d7:77:62:f8:f6:f0:d7:cf:3d:62:11:ef:f0:a9:b7:db:86:19:
         20:ed:f0:5f:1b:f7:89:56:19:b5:76:6a:a7:5f:b4:90:2b:48:
         5a:03:32:2a:91:1a:79:4c:7e:ba:dc:ec:82:be:f6:07:3d:08:
         f7:dd:cb:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpXtXkCnJAl7BAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3
ZDdjMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk
YzJkZDZhMjQtZDE4YS00MTBhLTk5OWUtNTQzZTczOTE4ODdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoEHHVViHSjwos8cYcU9hiZn8094mc70U4gY
ICyAiMPPu2ZL1V1MeMBImHEDDDv1xGew9KHYWnRSQEC7+hS0iJkBybH3kQOWTAkk
Bt5mih+TrOtYumhqiLT7edipASuHVMEnr3wosRGU+UPa2NBdfYqn2k+RUYYjpsN8
AICJQomxw92Or10dIYELK3BARdQWbceHsRdug8J+EFw7RwMOxl9HmEGpEGXXpdkY
gtXxsCXi1o7faY6VHnHZl6J7k6P5KYmvnVzffAnoza6zvsy8wjsBrTBYGWauzT3t
N2igXAi0ySizbvY5aDe1LCXUAfoF84OAu5/UqRjBB/uO8ZCcGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDoMJs3i6Rn2AgkAA8caIUmAZkRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx
N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvYWFiMjZlMzAtNjVjZC0z
ZjVhLTlmMDQtMTFhZTMzMzZhZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli
ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm
N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0
YzBlZjdkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDbfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEpxN2S2hCIDx1PZnTQJw0KLfb8vHMiOyMejFFaatwOdbHiw4c40j3n
gWkm5mmriCejrESTJpsDtPYwaxPh+KDr8856Us52b2+84WGeEzKiMncqYZfwvFaz
ZDZqURZz//1hRmzJ72u8EKSIvH1cduLg5VPo1F9IDsGQrmhAsv3SqWbBVkqUw/2g
+Z6sHFdY0Qr521JvJpx9OH9H66eO8wd8/GoqJBWRdp3mLfZv1aFNEXQhvR2eEAT8
8kK3ZHzrZZrzaqnkHNd3Yvj28NfPPWIR7/Cpt9uGGSDt8F8b94lWGbV2aqdftJAr
SFoDMiqRGnlMfrrc7IK+9gc9CPfdyx4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:49 2025 by rpki-client