Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c9407958-6644-3985-a2d1-5ecfb37943b5.roa
File:                     c9407958-6644-3985-a2d1-5ecfb37943b5.roa (raw, json)
Hash identifier:          FBr5jBmnojd4M/gHzSeRyBtcz1kOynBEbgDsS7WbPbA=
Subject key identifier:   C6:34:ED:9A:85:F4:A5:14:8F:AB:BF:55:44:F9:A6:64:4E:04:0C:AF
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B3FC346D89F4D6C1D4515F7C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c9407958-6644-3985-a2d1-5ecfb37943b5.roa
Signing time:             Fri 19 Sep 2025 18:37:05 +0000
ROA not before:           Fri 19 Sep 2025 18:37:05 +0000
ROA not after:            Thu 18 Dec 2025 19:37:05 +0000
asID:                     399839
IP address blocks:        216.24.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:c3:46:d8:9f:4d:6c:1d:45:15:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 19 18:37:05 2025 GMT
            Not After : Dec 18 19:37:05 2025 GMT
        Subject: CN=a91eda92-050a-413d-a5e7-e4ad2f2eb749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:ad:a1:19:fe:76:1c:ec:09:31:4e:8c:38:
                    83:98:ae:e1:e0:df:7f:6e:aa:3d:c7:d7:93:ea:55:
                    fa:f9:fc:8e:97:d5:58:cc:e6:f3:f3:0f:ca:a2:cc:
                    77:b7:25:5a:2a:ac:ff:74:dd:90:cb:37:cc:f3:e3:
                    d8:ca:96:e2:48:24:64:74:90:d3:77:19:dd:cf:53:
                    0a:35:e7:52:49:fc:5f:4e:b7:de:c4:ab:c6:24:36:
                    87:39:c9:de:4b:f3:c9:71:ac:5b:6d:aa:5b:20:c7:
                    17:c0:c3:b8:8c:10:1f:93:de:0c:c7:4a:aa:0c:5e:
                    ad:2f:35:e4:c8:79:3c:09:90:bd:e2:91:43:f9:5d:
                    e0:e1:c9:c4:2e:17:60:8b:dd:05:04:f5:77:c5:00:
                    8c:af:49:db:27:cc:a5:7c:60:80:f8:04:59:7b:36:
                    8c:4b:64:9c:19:a2:0b:03:80:82:58:74:a2:b0:7b:
                    4e:6d:99:a3:e7:10:32:15:78:26:fb:e4:20:92:13:
                    25:38:49:79:8a:52:93:ba:1c:b7:68:e9:06:71:32:
                    7c:c5:75:02:2a:67:29:1e:ea:ef:92:c7:db:1b:0e:
                    d2:ec:60:a2:ef:07:83:60:d3:40:69:f9:10:4f:4d:
                    b5:18:19:bd:e7:70:c2:92:22:31:78:f5:87:b0:b3:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:ED:9A:85:F4:A5:14:8F:AB:BF:55:44:F9:A6:64:4E:04:0C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c9407958-6644-3985-a2d1-5ecfb37943b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:81:b0:e4:cc:90:08:59:57:6d:6b:f1:a0:6e:aa:06:57:d6:
         12:8b:6a:23:7f:2d:ea:02:1f:cc:88:59:ba:e5:df:03:e7:5c:
         37:f3:98:5a:0b:1b:96:56:ca:c0:71:ad:90:7a:45:a6:37:ca:
         c1:f0:f0:2d:76:02:f2:df:0c:26:a6:15:3a:fc:57:9f:ae:9b:
         8e:84:90:5c:16:eb:d2:87:d2:ee:df:35:d9:af:93:d8:35:5d:
         c8:46:3e:e5:2f:2e:05:43:d7:16:c2:b4:23:5e:e5:f9:74:b8:
         f4:1d:ed:15:7d:97:5b:bc:44:0a:9f:ef:d5:74:5e:61:de:24:
         c6:f4:f7:fc:e0:de:10:a0:c9:55:fd:8a:6c:44:ff:0d:e5:72:
         55:43:84:14:0c:77:ce:a5:7b:83:03:0f:f0:ca:c0:4e:3f:25:
         11:35:0a:4f:c7:ed:d2:f2:81:63:ff:b5:2e:5e:82:b2:77:09:
         af:de:97:84:c7:56:e0:7b:a5:a7:69:be:6b:57:17:7a:cc:ca:
         b6:07:82:46:77:ff:80:57:ee:78:c4:63:46:49:16:2a:0b:aa:
         c5:3d:b0:d2:82:3f:d3:0a:89:53:55:b8:f8:a4:8d:73:4c:f6:
         59:e0:0e:86:95:b7:ff:31:bf:f9:66:71:d6:06:91:3d:97:32:
         a6:2c:cd:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/w0bYn01sHUUV98AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDkxOTE4MzcwNVoXDTI1MTIxODE5MzcwNVowLzEtMCsGA1UEAxMk
YTkxZWRhOTItMDUwYS00MTNkLWE1ZTctZTRhZDJmMmViNzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPGtoRn+dhzsCTFOjDiDmK7h4N9/bqo9x9eT
6lX6+fyOl9VYzObz8w/Kosx3tyVaKqz/dN2QyzfM8+PYypbiSCRkdJDTdxndz1MK
NedSSfxfTrfexKvGJDaHOcneS/PJcaxbbapbIMcXwMO4jBAfk94Mx0qqDF6tLzXk
yHk8CZC94pFD+V3g4cnELhdgi90FBPV3xQCMr0nbJ8ylfGCA+ARZezaMS2ScGaIL
A4CCWHSisHtObZmj5xAyFXgm++QgkhMlOEl5ilKTuhy3aOkGcTJ8xXUCKmcpHurv
ksfbGw7S7GCi7weDYNNAafkQT021GBm953DCkiIxePWHsLPuGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMY07ZqF9KUUj6u/VUT5pmROBAyvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYzk0MDc5NTgtNjY0NC0z
OTg1LWEyZDEtNWVjZmIzNzk0M2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKBsOTMkAhZV21r8aBuqgZX1hKLaiN/LeoCH8yIWbrl3wPnXDfzmFoL
G5ZWysBxrZB6RaY3ysHw8C12AvLfDCamFTr8V5+um46EkFwW69KH0u7fNdmvk9g1
XchGPuUvLgVD1xbCtCNe5fl0uPQd7RV9l1u8RAqf79V0XmHeJMb09/zg3hCgyVX9
imxE/w3lclVDhBQMd86le4MDD/DKwE4/JRE1Ck/H7dLygWP/tS5egrJ3Ca/el4TH
VuB7padpvmtXF3rMyrYHgkZ3/4BX7njEY0ZJFioLqsU9sNKCP9MKiVNVuPikjXNM
9lngDoaVt/8xv/lmcdYGkT2XMqYszZM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:41:57 2025 by rpki-client