Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f1d73a89-bcc4-3b69-a290-e33c7fccd89f.roa
File:                     f1d73a89-bcc4-3b69-a290-e33c7fccd89f.roa (raw, json)
Hash identifier:          MceIOSHG8+o9o8Ys3PXbSo2UvxHwp++C6L8M6ZtM0rU=
Subject key identifier:   BC:DC:38:7B:08:FE:C9:67:E2:E4:17:25:79:E6:3D:FE:67:BB:7B:BD
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584B78574D7DAD03ABFED81A9680
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f1d73a89-bcc4-3b69-a290-e33c7fccd89f.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     400196
IP address blocks:        207.22.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:4d:7d:ad:03:ab:fe:d8:1a:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=5f27d12c-57b5-498c-ada9-164d5bbd15dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:e4:c3:5d:c5:0c:fa:25:e4:18:12:20:87:
                    93:3a:45:58:27:c9:8e:c7:9b:cb:cc:5f:3a:13:7f:
                    6f:05:10:35:d5:91:f1:d9:ad:39:e6:1c:0c:b3:b4:
                    11:f9:04:15:dd:84:41:4d:6e:e4:78:db:76:4c:c1:
                    2f:c1:70:a0:8f:43:e1:a1:4c:3e:e8:a0:bf:35:f0:
                    83:b3:9e:0b:d2:37:12:2f:f3:7d:c6:83:a8:05:91:
                    67:0f:3a:76:85:f5:f1:c0:96:7b:11:20:30:8d:16:
                    40:b4:9a:09:91:9c:2d:6c:c6:62:a1:75:81:86:68:
                    f3:87:96:a3:9d:31:20:c9:55:e4:3d:dc:1c:e7:59:
                    14:5f:25:bc:d2:22:69:7e:4d:64:2a:81:95:da:df:
                    e6:82:78:b9:de:19:09:23:be:af:3b:a0:bf:44:78:
                    a5:d3:0d:60:8b:e3:67:f8:1d:a2:a3:de:81:47:3b:
                    92:82:d0:1e:ec:97:f1:6f:3c:1c:f9:0e:4e:3a:6f:
                    69:76:ff:87:e2:60:53:55:45:7a:b8:c6:30:86:46:
                    4a:51:c8:a8:e1:d8:d2:5b:20:de:59:92:2d:f9:65:
                    37:1e:16:e9:f2:3d:9f:e5:72:d9:98:c2:0d:f0:a9:
                    c9:d5:17:60:c8:81:4f:d8:b6:b7:fb:8d:d2:2c:e5:
                    ea:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DC:38:7B:08:FE:C9:67:E2:E4:17:25:79:E6:3D:FE:67:BB:7B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f1d73a89-bcc4-3b69-a290-e33c7fccd89f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:91:bc:22:16:07:d8:12:5f:e3:7d:a4:77:49:56:62:92:b4:
         d2:bd:ff:99:e2:4d:80:ac:1c:48:52:06:ba:78:1e:27:5c:98:
         d7:c5:cd:51:5c:ae:f3:d3:54:b1:c1:d0:e1:fe:d0:01:33:38:
         7d:39:10:07:39:9c:a3:01:02:96:3e:46:57:4c:ca:06:18:ed:
         9a:32:8c:5f:a2:3b:29:a4:38:63:86:5c:36:1a:53:ba:bf:a3:
         54:43:94:89:3c:ad:3a:e5:07:75:aa:13:48:23:ff:2f:39:d8:
         c2:f5:08:8a:c8:ca:a0:46:b4:c5:6a:75:9e:36:c7:ee:9a:bf:
         26:8a:e2:cf:94:5f:ff:b2:1b:6c:52:7e:7b:76:6f:7b:30:37:
         aa:48:db:40:20:81:ad:ca:eb:13:69:08:2d:49:28:9a:67:70:
         7b:0c:2f:45:88:fb:2f:ce:ae:b0:4f:77:1a:9b:79:73:fb:83:
         c9:69:6f:87:ea:e7:e9:3c:9d:17:2c:4b:64:f1:d4:62:f2:44:
         27:92:44:a5:78:0c:8c:d3:3d:4a:00:95:a1:b7:2d:9f:bd:21:
         1a:1f:d4:30:7d:a7:39:f5:54:35:f1:13:26:f5:24:df:fd:87:
         e4:2a:21:b8:ad:c0:15:ac:7c:31:3c:e9:70:e3:70:ed:96:08:
         8c:4e:16:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V019rQOr/tgaloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk
NWYyN2QxMmMtNTdiNS00OThjLWFkYTktMTY0ZDViYmQxNWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoHkw13FDPol5BgSIIeTOkVYJ8mOx5vLzF86
E39vBRA11ZHx2a055hwMs7QR+QQV3YRBTW7keNt2TMEvwXCgj0PhoUw+6KC/NfCD
s54L0jcSL/N9xoOoBZFnDzp2hfXxwJZ7ESAwjRZAtJoJkZwtbMZioXWBhmjzh5aj
nTEgyVXkPdwc51kUXyW80iJpfk1kKoGV2t/mgni53hkJI76vO6C/RHil0w1gi+Nn
+B2io96BRzuSgtAe7Jfxbzwc+Q5OOm9pdv+H4mBTVUV6uMYwhkZKUcio4djSWyDe
WZIt+WU3Hhbp8j2f5XLZmMIN8KnJ1RdgyIFP2La3+43SLOXqCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLzcOHsI/sln4uQXJXnmPf5nu3u9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvZjFkNzNhODktYmNjNC0z
YjY5LWEyOTAtZTMzYzdmY2NkODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxYjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyRvCIWB9gSX+N9pHdJVmKStNK9/5niTYCsHEhSBrp4HidcmNfFzVFc
rvPTVLHB0OH+0AEzOH05EAc5nKMBApY+RldMygYY7ZoyjF+iOymkOGOGXDYaU7q/
o1RDlIk8rTrlB3WqE0gj/y852ML1CIrIyqBGtMVqdZ42x+6avyaK4s+UX/+yG2xS
fnt2b3swN6pI20Agga3K6xNpCC1JKJpncHsML0WI+y/OrrBPdxqbeXP7g8lpb4fq
5+k8nRcsS2Tx1GLyRCeSRKV4DIzTPUoAlaG3LZ+9IRof1DB9pzn1VDXxEyb1JN/9
h+QqIbitwBWsfDE86XDjcO2WCIxOFuk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:20:46 2025 by rpki-client