Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/ba4b6a0d-fed6-37b5-a4ca-5fb2c5f860e8.roa
File:                     ba4b6a0d-fed6-37b5-a4ca-5fb2c5f860e8.roa (raw, json)
Hash identifier:          JiqTBLzQt2tCCZTPy0tfdF5WVPVZcZR75kXoUOcpv8w=
Subject key identifier:   5E:74:E5:98:4C:B7:6C:EF:A1:D8:0B:06:69:C4:FD:84:E6:57:16:CC
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584B636741948565CF0C2E10F240
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/ba4b6a0d-fed6-37b5-a4ca-5fb2c5f860e8.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     213867
IP address blocks:        204.155.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:41:94:85:65:cf:0c:2e:10:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=8926a7b9-7462-4522-8fd6-57c446746185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:c9:4b:87:c8:6a:2d:ae:cc:b9:a7:a3:ae:
                    a6:8f:98:ac:02:79:ee:c3:ae:75:fd:a4:dd:88:84:
                    7f:27:c7:98:11:cc:b5:d0:3a:72:78:e6:45:d9:ad:
                    05:a3:77:7c:79:55:f9:85:1b:5a:7c:d2:10:26:0d:
                    f7:12:d7:47:c5:4d:7c:82:d2:b5:a3:cc:58:9c:47:
                    f8:ac:24:25:d8:a6:d6:1c:28:9f:fa:4c:ad:b6:e6:
                    58:bd:92:d0:a2:eb:c5:58:4b:04:92:2a:d3:44:1a:
                    00:7a:6d:11:fb:c7:ca:83:a4:fa:ee:a3:8a:e2:53:
                    73:bd:6e:28:f3:a2:93:8f:db:ee:6a:6c:62:d9:d1:
                    e8:14:fd:a5:52:19:ef:19:5d:02:cc:f9:a1:99:a5:
                    a5:1a:01:17:df:b1:21:fa:74:24:48:4e:ad:c5:01:
                    75:b5:91:7d:98:80:b9:ea:0c:45:b1:44:77:2f:d0:
                    a9:99:47:f5:1f:41:8c:a1:f8:21:57:b9:75:1d:f0:
                    7d:2e:55:91:66:47:15:ca:8c:62:99:ee:9c:34:e3:
                    e4:85:22:72:db:cf:70:9f:05:ba:aa:37:2a:0f:34:
                    98:2c:cd:2e:f5:1e:dd:43:a1:cc:96:7f:d9:42:d7:
                    89:d5:e4:62:52:9f:01:90:c4:cd:d2:b3:1a:6b:20:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:74:E5:98:4C:B7:6C:EF:A1:D8:0B:06:69:C4:FD:84:E6:57:16:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/ba4b6a0d-fed6-37b5-a4ca-5fb2c5f860e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:30:c6:f8:c0:dc:02:04:32:58:61:d0:24:50:85:fc:af:ed:
         be:0b:28:16:80:f1:e6:a5:b7:36:b6:00:b5:e9:52:44:a3:5f:
         2a:d4:45:40:96:f5:42:9f:3d:7f:19:7f:08:33:74:d6:6b:dc:
         3c:f1:35:f4:e5:ac:a3:6f:07:e1:5f:e4:8d:07:3c:75:26:9b:
         a0:a7:31:b5:5e:71:b5:46:16:e5:30:ca:d1:60:a8:e3:bd:6c:
         69:ed:5c:16:27:f7:52:42:2c:2a:02:0a:60:6e:25:7a:b9:68:
         d2:29:ab:01:0a:8b:83:c0:e8:e9:31:a3:e4:7d:c9:51:58:25:
         c8:a7:94:1f:10:7f:71:18:fa:fc:c8:91:8d:ba:b6:b3:55:f3:
         10:ee:a7:c2:59:3e:88:d9:b3:b2:8e:3c:ff:b8:12:1f:47:13:
         81:d6:9e:04:58:c3:a4:8f:8e:7f:99:52:91:ec:e2:a6:44:63:
         3a:d6:4e:5c:c8:f3:10:33:70:51:4b:da:3e:2e:1f:ad:a0:21:
         d0:9a:af:de:c2:c9:70:7c:df:8d:51:7a:c3:39:69:bb:01:fd:
         cb:0d:f5:bc:b6:1e:de:9b:6c:33:c2:78:de:ac:f5:0b:93:43:
         2c:2d:03:78:63:84:6b:24:f3:5e:08:79:ad:ef:15:9a:b4:75:
         df:d5:c9:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0GUhWXPDC4Q8kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3
NWFiMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk
ODkyNmE3YjktNzQ2Mi00NTIyLThmZDYtNTdjNDQ2NzQ2MTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYPJS4fIai2uzLmno66mj5isAnnuw651/aTd
iIR/J8eYEcy10DpyeOZF2a0Fo3d8eVX5hRtafNIQJg33EtdHxU18gtK1o8xYnEf4
rCQl2KbWHCif+kyttuZYvZLQouvFWEsEkirTRBoAem0R+8fKg6T67qOK4lNzvW4o
86KTj9vuamxi2dHoFP2lUhnvGV0CzPmhmaWlGgEX37Eh+nQkSE6txQF1tZF9mIC5
6gxFsUR3L9CpmUf1H0GMofghV7l1HfB9LlWRZkcVyoxime6cNOPkhSJy289wnwW6
qjcqDzSYLM0u9R7dQ6HMln/ZQteJ1eRiUp8BkMTN0rMaayDkZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF505ZhMt2zvodgLBmnE/YTmVxbMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3
MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvYmE0YjZhMGQtZmVkNi0z
N2I1LWE0Y2EtNWZiMmM1Zjg2MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj
ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3
NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz
NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJt6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQwxvjA3AIEMlhh0CRQhfyv7b4LKBaA8ealtza2ALXpUkSjXyrURUCW
9UKfPX8ZfwgzdNZr3DzxNfTlrKNvB+Ff5I0HPHUmm6CnMbVecbVGFuUwytFgqOO9
bGntXBYn91JCLCoCCmBuJXq5aNIpqwEKi4PA6Okxo+R9yVFYJcinlB8Qf3EY+vzI
kY26trNV8xDup8JZPojZs7KOPP+4Eh9HE4HWngRYw6SPjn+ZUpHs4qZEYzrWTlzI
8xAzcFFL2j4uH62gIdCar97CyXB8341ResM5absB/csN9by2Ht6bbDPCeN6s9QuT
QywtA3hjhGsk814Iea3vFZq0dd/VyVA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:28 2025 by rpki-client