Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa
File:                     9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa (raw, json)
Hash identifier:          qwQUFpc7HXn+iMP+JvJzr0jcjl5Qk1NVVmcU5QjTc9U=
Subject key identifier:   EE:73:73:B8:27:15:FA:74:D8:CF:03:6C:F7:32:E6:A4:56:B1:A7:34
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B4D11C9F99BBA2DC0F85F4540
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     21723
IP address blocks:        209.53.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:c9:f9:9b:ba:2d:c0:f8:5f:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=326224e6-4177-4f69-88e0-129d722cfe69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c1:ac:cc:2b:8d:8c:5e:13:2a:0b:a5:31:63:
                    93:3c:c8:b2:dc:6f:f2:c8:1f:40:65:cf:0b:e6:ae:
                    d2:45:86:f1:a0:78:82:92:d0:02:01:cb:3d:2d:d6:
                    bb:3c:0f:41:e0:ea:01:7b:9a:7b:ab:43:b2:be:38:
                    1a:d6:ed:4c:08:42:2a:49:4b:da:26:13:3b:31:b7:
                    f6:e1:20:74:c3:22:31:a4:6e:0a:16:73:44:39:c7:
                    0d:4b:88:0a:9e:4f:d7:b4:18:31:83:32:38:0d:18:
                    32:4a:b0:28:39:5f:6c:b1:65:e6:dd:63:41:d7:1b:
                    39:55:87:bf:14:11:94:b6:2a:5b:79:2b:92:71:4c:
                    28:f6:75:43:73:f6:35:05:d4:c6:b9:fa:7f:63:1a:
                    75:69:73:2d:1c:4f:85:c8:50:de:cb:d4:4a:a3:8b:
                    6b:3c:46:99:c2:a6:bc:41:a2:60:aa:67:dc:59:7d:
                    1e:20:09:38:9f:25:67:1b:9f:c2:64:96:00:e9:ef:
                    c3:d4:b1:f7:f8:1f:14:97:de:de:56:dc:2d:f6:bd:
                    9c:2c:59:f4:04:10:0e:dd:7f:b4:40:3d:ba:c4:78:
                    db:6d:85:73:30:8d:6a:d9:37:de:e6:e8:95:76:4b:
                    62:05:ca:0e:c5:a6:79:2e:d1:50:b2:8b:5d:97:1f:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:73:73:B8:27:15:FA:74:D8:CF:03:6C:F7:32:E6:A4:56:B1:A7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:01:fc:a2:c6:9b:ee:65:08:ca:56:59:b3:54:b5:02:25:6f:
         7e:de:34:77:95:87:08:6f:51:7f:29:42:f3:64:fd:5d:a3:3f:
         d8:4c:71:19:fa:c9:e6:cf:29:d7:2a:bc:2f:50:3b:f7:01:4a:
         9c:7e:33:3e:88:89:63:49:51:65:03:83:66:7e:a3:8e:01:69:
         c9:5d:2a:56:5d:55:23:b3:66:a1:71:8c:06:cd:c7:66:63:15:
         7e:eb:48:51:6b:50:01:3a:68:25:81:74:74:bc:c5:0c:e8:bb:
         87:d1:b7:1d:7d:0c:40:cf:de:e7:68:b0:1d:77:e2:96:8e:12:
         d1:5f:ab:70:5b:6b:1f:0d:8c:b4:6c:c0:43:f6:0c:23:bc:75:
         f4:50:3a:67:d8:aa:47:31:90:2c:9b:70:95:4f:cd:66:2b:56:
         4f:cb:fb:c7:53:5b:0c:ea:c2:34:96:ec:c6:8f:14:c2:9d:9a:
         ce:5e:43:25:85:f6:14:9f:80:76:8b:e0:17:ca:b2:b1:d7:f6:
         b7:76:31:97:40:76:73:1b:89:39:8b:e0:43:1a:1d:04:5c:ba:
         17:6b:a2:48:a8:be:d8:25:63:d5:a5:44:72:e8:ad:73:4b:4a:
         61:5c:9d:46:fa:df:10:f4:45:5c:5b:81:ae:2a:82:fe:e6:7c:
         a6:23:5d:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcn5m7otwPhfRUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk
MzI2MjI0ZTYtNDE3Ny00ZjY5LTg4ZTAtMTI5ZDcyMmNmZTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sGszCuNjF4TKgulMWOTPMiy3G/yyB9AZc8L
5q7SRYbxoHiCktACAcs9Lda7PA9B4OoBe5p7q0Oyvjga1u1MCEIqSUvaJhM7Mbf2
4SB0wyIxpG4KFnNEOccNS4gKnk/XtBgxgzI4DRgySrAoOV9ssWXm3WNB1xs5VYe/
FBGUtipbeSuScUwo9nVDc/Y1BdTGufp/Yxp1aXMtHE+FyFDey9RKo4trPEaZwqa8
QaJgqmfcWX0eIAk4nyVnG5/CZJYA6e/D1LH3+B8Ul97eVtwt9r2cLFn0BBAO3X+0
QD26xHjbbYVzMI1q2Tfe5uiVdktiBcoOxaZ5LtFQsotdlx/DwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5zc7gnFfp02M8DbPcy5qRWsac0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWNhZmNkN2YtMzJhZS0z
YTc5LTk3YjYtM2FhYjM2NzMyODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMEB/KLGm+5lCMpWWbNUtQIlb37eNHeVhwhvUX8pQvNk/V2jP9hMcRn6
yebPKdcqvC9QO/cBSpx+Mz6IiWNJUWUDg2Z+o44BacldKlZdVSOzZqFxjAbNx2Zj
FX7rSFFrUAE6aCWBdHS8xQzou4fRtx19DEDP3udosB134paOEtFfq3Bbax8NjLRs
wEP2DCO8dfRQOmfYqkcxkCybcJVPzWYrVk/L+8dTWwzqwjSW7MaPFMKdms5eQyWF
9hSfgHaL4BfKsrHX9rd2MZdAdnMbiTmL4EMaHQRcuhdrokiovtglY9WlRHLorXNL
SmFcnUb63xD0RVxbga4qgv7mfKYjXd0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:42 2025 by rpki-client