Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/38073048-ee60-338e-8f88-e13c4e6390b9.roa
File:                     38073048-ee60-338e-8f88-e13c4e6390b9.roa (raw, json)
Hash identifier:          C1hsZ4qNXb+Xr8bd1SAtKqk3t6HZf0ITwPwDzEyIjhQ=
Subject key identifier:   75:49:B8:79:52:8D:98:52:9A:06:00:35:12:4F:13:1E:EE:9F:E9:33
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B3DBA29028560C0CA3C541E80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/38073048-ee60-338e-8f88-e13c4e6390b9.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     215728
IP address blocks:        139.177.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:29:02:85:60:c0:ca:3c:54:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=d37cd5db-ebe1-4414-b3f3-f4854ac4cc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dd:7c:e1:d3:48:0f:b1:7d:12:ed:31:97:6b:
                    05:52:7a:01:6e:a4:59:65:84:06:c5:5c:b2:7b:1d:
                    36:48:1c:c0:97:1b:8f:fd:bd:18:19:58:b1:a8:2e:
                    87:4a:82:83:8f:76:37:bf:70:11:ab:41:94:69:7a:
                    ca:36:58:b8:77:4a:f2:2a:83:44:27:50:ec:2a:55:
                    63:7b:b6:1b:9d:4c:33:84:67:0a:a6:fe:57:c6:e2:
                    7e:5e:b9:4b:26:52:f6:64:04:92:d7:66:7f:df:71:
                    0d:e8:10:f9:ed:78:1c:9d:a7:7b:85:24:f8:9c:a2:
                    27:bb:6d:2d:1f:d5:ef:f6:52:47:d2:26:13:69:c8:
                    f1:20:b0:c5:b1:4c:2c:74:10:3b:4b:a2:f2:e9:6b:
                    01:ea:c8:4f:31:a3:b1:c5:13:8c:56:28:2a:2d:1f:
                    20:5c:8b:7d:21:7e:f5:75:a7:cf:4a:0c:25:ac:42:
                    46:ed:db:52:7c:8f:17:ce:d9:ca:40:d8:ce:6c:34:
                    f2:da:b3:da:25:b0:e5:a0:8d:7c:87:82:e6:c5:4a:
                    af:74:0c:67:bf:0e:4d:44:14:33:56:39:ec:2b:52:
                    c3:91:54:be:c3:f8:3c:bc:ab:2b:47:6b:1b:83:e9:
                    a4:16:cb:ab:7e:76:46:f5:bd:24:59:8d:54:fc:aa:
                    3a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:49:B8:79:52:8D:98:52:9A:06:00:35:12:4F:13:1E:EE:9F:E9:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/38073048-ee60-338e-8f88-e13c4e6390b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:cb:44:0b:ce:16:df:0f:99:8c:78:a9:e1:c0:48:eb:64:
         88:cf:97:94:05:15:27:9f:c7:85:bf:ba:63:57:d0:60:57:69:
         fc:0d:13:83:d7:d2:6a:db:f2:40:fe:25:98:84:8e:cc:9f:d0:
         71:ac:27:7e:7a:05:3d:0e:3d:16:7b:43:0d:8b:a1:91:42:5c:
         06:05:80:8b:cc:40:6d:d4:8d:36:af:41:9c:1c:bf:f7:8c:e2:
         3d:42:14:0c:40:71:c5:ee:54:c1:20:03:41:95:e9:21:33:80:
         ea:12:26:16:ad:02:eb:28:61:9d:12:62:75:c2:a5:de:5d:e2:
         88:a7:45:e0:c3:08:14:a2:86:60:cf:56:09:72:8e:4f:9c:bf:
         14:4b:90:d2:d2:cc:33:78:63:84:b9:54:b9:fe:75:0d:1d:bb:
         83:ea:a2:37:6d:0f:dd:b1:89:5f:f1:85:d5:e4:3e:c4:5a:dc:
         5f:d7:ad:a0:c0:7f:ef:37:9b:61:3e:9a:7d:8b:a1:a7:eb:9d:
         01:50:9f:b9:d1:fb:65:38:67:58:a0:4c:ec:40:e7:0d:cf:ff:
         9f:4c:f5:74:f8:35:9e:94:52:b3:3e:28:98:c5:b5:3a:85:7a:
         ba:85:63:80:06:c3:06:06:51:e2:1a:78:6a:5c:02:db:55:17:
         e6:2d:bb:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uikChWDAyjxUHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
ZDM3Y2Q1ZGItZWJlMS00NDE0LWIzZjMtZjQ4NTRhYzRjYzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt184dNID7F9Eu0xl2sFUnoBbqRZZYQGxVyy
ex02SBzAlxuP/b0YGVixqC6HSoKDj3Y3v3ARq0GUaXrKNli4d0ryKoNEJ1DsKlVj
e7YbnUwzhGcKpv5XxuJ+XrlLJlL2ZASS12Z/33EN6BD57Xgcnad7hST4nKInu20t
H9Xv9lJH0iYTacjxILDFsUwsdBA7S6Ly6WsB6shPMaOxxROMVigqLR8gXIt9IX71
dafPSgwlrEJG7dtSfI8XztnKQNjObDTy2rPaJbDloI18h4LmxUqvdAxnvw5NRBQz
VjnsK1LDkVS+w/g8vKsrR2sbg+mkFsurfnZG9b0kWY1U/Ko6HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVJuHlSjZhSmgYANRJPEx7un+kzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMzgwNzMwNDgtZWU2MC0z
MzhlLThmODgtZTEzYzRlNjM5MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXUy0QLzhbfD5mMeKnhwEjrZIjPl5QFFSefx4W/umNX0GBXafwNE4PX
0mrb8kD+JZiEjsyf0HGsJ356BT0OPRZ7Qw2LoZFCXAYFgIvMQG3UjTavQZwcv/eM
4j1CFAxAccXuVMEgA0GV6SEzgOoSJhatAusoYZ0SYnXCpd5d4oinReDDCBSihmDP
Vglyjk+cvxRLkNLSzDN4Y4S5VLn+dQ0du4PqojdtD92xiV/xhdXkPsRa3F/XraDA
f+83m2E+mn2LoafrnQFQn7nR+2U4Z1igTOxA5w3P/59M9XT4NZ6UUrM+KJjFtTqF
erqFY4AGwwYGUeIaeGpcAttVF+Ytu5s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:37 2025 by rpki-client