Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/f13079a7-520e-33e0-b6cf-a8f8dfe184e6.roa
File:                     f13079a7-520e-33e0-b6cf-a8f8dfe184e6.roa (raw, json)
Hash identifier:          tH/FCKifMcQPt/jwmDPN48EPc8JZJjiducKD05VsJKk=
Subject key identifier:   46:49:2A:77:74:C0:F2:01:3E:B7:54:68:74:92:1E:68:EF:35:FF:3D
Certificate issuer:       /CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
Certificate serial:       010D0C9F4328584B21CC1A3B388296AA424070C0
Authority key identifier: 7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/f13079a7-520e-33e0-b6cf-a8f8dfe184e6.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     397263
IP address blocks:        204.128.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:1a:3b:38:82:96:aa:42:40:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=25aa7e64-0aff-47d3-b2d1-f7f607d77fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:7a:ba:ba:e1:85:42:86:92:16:90:6b:b1:
                    f9:22:66:42:54:d5:1e:ab:af:e7:b2:1a:3e:1f:59:
                    28:47:cc:b5:71:76:3c:8c:76:b5:7a:92:d6:cf:a7:
                    90:da:f3:46:ce:71:33:cb:12:16:8d:f0:be:06:c6:
                    f4:25:80:11:b9:96:37:c2:c7:b4:c2:e8:d0:3e:6e:
                    0a:cc:37:90:b8:79:1b:77:4c:dc:1f:03:47:7e:14:
                    bc:00:a4:40:f2:93:fc:54:4b:df:3b:51:d5:98:73:
                    f2:fe:eb:fb:4e:4f:06:1e:8a:01:44:a5:4b:d3:97:
                    94:a6:ab:59:ce:db:d6:8f:5f:f1:6b:66:70:cc:4f:
                    3f:52:2a:67:9c:af:1d:db:78:39:16:42:53:bf:73:
                    a1:37:ea:4c:78:f6:45:8d:37:0c:7a:90:fd:c3:54:
                    09:43:5b:3a:0d:6e:68:2a:5d:3b:8e:67:af:33:31:
                    89:54:13:8d:9e:3a:3c:b3:bd:ab:0b:f8:11:93:82:
                    5e:fe:5c:29:55:dd:dd:01:6a:94:e7:cd:a8:5a:ec:
                    99:71:1c:a4:51:fb:ef:c7:6f:29:53:8e:ff:60:d8:
                    d5:92:da:ac:9b:ca:ce:25:e4:8d:69:d6:60:b6:fb:
                    a2:a3:a1:48:d3:0a:bf:5b:46:99:30:52:92:92:52:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:49:2A:77:74:C0:F2:01:3E:B7:54:68:74:92:1E:68:EF:35:FF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/f13079a7-520e-33e0-b6cf-a8f8dfe184e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.128.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:86:a7:e0:f2:fe:ea:84:e4:5b:3a:ad:2e:f8:6f:69:d5:f5:
         05:e9:00:4e:f3:12:c3:cd:31:36:05:53:e7:ad:a1:35:e4:7c:
         c7:17:3e:ab:f6:06:1d:40:a8:c6:df:ce:01:f0:98:40:c5:17:
         41:de:81:3f:04:04:8f:e5:2a:89:da:c9:22:f3:45:a1:94:9b:
         b0:82:7f:ae:17:bf:36:d0:19:0d:35:c7:f2:5c:dd:8b:53:79:
         bc:3d:b9:1f:8e:8a:4c:19:9c:dc:ce:a0:b6:b3:0c:b6:d0:35:
         a5:a6:67:94:df:93:c5:6e:79:b6:ce:1c:fe:0f:af:29:ac:cb:
         b3:f6:b0:a9:32:98:53:b4:d1:5a:69:a1:93:6c:9a:66:9f:04:
         0e:cd:d7:7a:14:b6:bb:3a:42:de:7a:6a:f9:c4:16:a9:d8:14:
         75:cf:e6:00:f1:ab:e7:02:db:34:28:2f:89:c0:5d:b7:be:4c:
         0e:c6:42:28:44:37:09:53:44:33:ee:64:ce:0c:51:88:97:11:
         9f:30:22:4a:b8:36:26:e3:71:03:1e:e5:a3:ea:9d:e3:1a:00:
         66:d9:d5:33:ca:81:b9:b9:70:59:65:d3:64:db:c1:d7:6d:ac:
         0c:63:d2:e8:ba:af:d3:17:02:95:1b:84:8d:80:b5:c2:c0:fd:
         cf:c0:8d:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBo7OIKWqkJAcMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTY2YTQzNjctM2EwZC00NTBjLWFiMmUtOWI4Zjg0ZTQz
NmVkMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
MjVhYTdlNjQtMGFmZi00N2QzLWIyZDEtZjdmNjA3ZDc3ZmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM56urrhhUKGkhaQa7H5ImZCVNUeq6/nsho+
H1koR8y1cXY8jHa1epLWz6eQ2vNGznEzyxIWjfC+Bsb0JYARuZY3wse0wujQPm4K
zDeQuHkbd0zcHwNHfhS8AKRA8pP8VEvfO1HVmHPy/uv7Tk8GHooBRKVL05eUpqtZ
ztvWj1/xa2ZwzE8/UipnnK8d23g5FkJTv3OhN+pMePZFjTcMepD9w1QJQ1s6DW5o
Kl07jmevMzGJVBONnjo8s72rC/gRk4Je/lwpVd3dAWqU582oWuyZcRykUfvvx28p
U47/YNjVktqsm8rOJeSNadZgtvuio6FI0wq/W0aZMFKSklIg/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZJKnd0wPIBPrdUaHSSHmjvNf89MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjZh
NDM2Ny0zYTBkLTQ1MGMtYWIyZS05YjhmODRlNDM2ZWQvZjEzMDc5YTctNTIwZS0z
M2UwLWI2Y2YtYThmOGRmZTE4NGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTY2YTQzNjctM2EwZC00NTBjLWFi
MmUtOWI4Zjg0ZTQzNmVkL2E2NmE0MzY3LTNhMGQtNDUwYy1hYjJlLTliOGY4NGU0
MzZlZC5jcmwwHwYDVR0jBBgwFoAUfPUMrnxr5if+Q4YV78nJWRe2CTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjZhNDM2Ny0zYTBkLTQ1MGMtYWIyZS05Yjhm
ODRlNDM2ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIC2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOGp+Dy/uqE5Fs6rS74b2nV9QXpAE7zEsPNMTYFU+etoTXkfMcXPqv2
Bh1AqMbfzgHwmEDFF0HegT8EBI/lKonaySLzRaGUm7CCf64XvzbQGQ01x/Jc3YtT
ebw9uR+OikwZnNzOoLazDLbQNaWmZ5Tfk8VuebbOHP4Prymsy7P2sKkymFO00Vpp
oZNsmmafBA7N13oUtrs6Qt56avnEFqnYFHXP5gDxq+cC2zQoL4nAXbe+TA7GQihE
NwlTRDPuZM4MUYiXEZ8wIkq4NibjcQMe5aPqneMaAGbZ1TPKgbm5cFll02Tbwddt
rAxj0ui6r9MXApUbhI2AtcLA/c/AjUA=
-----END CERTIFICATE-----
Generated at Wed Oct 22 04:35:05 2025 by rpki-client