Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
File:                     17acb471-f0ec-3752-90a5-05f953ebd85f.roa (raw, json)
Hash identifier:          fiZQ4vKjraC5ayCtmiaPQv65Tv3d36AaSfar8dbOkBs=
Subject key identifier:   24:51:49:D4:2A:06:B7:B9:C5:C1:38:1D:9E:D8:C6:2D:07:33:20:BA
Certificate issuer:       /CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
Certificate serial:       010D0C9F4328584B7DECABBF5B2BAD8C42057380
Authority key identifier: E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     36352
IP address blocks:        128.254.228.0/22 maxlen: 22
                          162.245.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:ab:bf:5b:2b:ad:8c:42:05:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=8409a347-2e2b-4770-a2e5-f8cf3e1050f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:a7:f0:55:b9:eb:e9:87:a1:b7:e3:a7:ec:
                    c5:19:f9:e3:5b:d5:55:33:ef:76:ee:8d:ed:ce:15:
                    87:ca:99:0c:65:0b:f0:0e:42:a2:9a:35:e6:5e:d8:
                    53:77:20:76:1f:3e:42:49:2c:69:e7:f8:aa:61:e8:
                    66:ba:89:dc:45:6f:c4:fb:45:a3:38:b9:f9:39:fe:
                    c5:e2:81:97:15:1d:28:b5:3e:db:52:6e:8b:64:ff:
                    2d:8e:cc:b4:53:b5:07:d0:47:c8:af:1d:18:96:28:
                    1a:43:ba:d2:ec:61:60:32:b4:5a:51:17:32:c2:97:
                    10:ff:2f:9c:c2:14:00:d6:57:df:6f:a9:a8:54:62:
                    16:ef:40:af:ea:a9:60:76:ed:6d:43:ab:8a:16:a8:
                    9b:63:74:76:38:d1:1a:16:3b:8c:db:16:c3:8d:61:
                    6c:d7:f9:1b:70:cf:6c:20:ee:2f:3c:e6:9f:24:de:
                    40:65:04:83:e7:f0:04:57:47:86:85:f6:6b:d4:24:
                    45:1e:2d:e7:62:05:87:82:5b:92:bc:24:4e:db:58:
                    d1:cd:a1:9d:9a:e6:24:93:b5:fd:82:c5:38:5a:75:
                    51:e7:39:e8:c2:ac:ac:04:6e:15:55:40:8f:49:2b:
                    38:85:0f:b9:02:bd:98:fd:61:fd:f7:92:67:31:cf:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:51:49:D4:2A:06:B7:B9:C5:C1:38:1D:9E:D8:C6:2D:07:33:20:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl

            X509v3 Authority Key Identifier:
                keyid:E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.228.0/22
                  162.245.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e8:9e:78:61:b8:cf:ac:31:ae:19:b1:95:11:94:71:43:91:
         1d:4f:72:f2:fe:a3:3a:c4:36:5c:f2:42:3a:a3:4a:b5:fe:8c:
         ec:20:2a:96:a0:b1:ee:44:ce:81:eb:a1:09:bd:39:18:bf:b8:
         e3:fd:48:91:58:4d:04:66:3f:07:24:ae:ce:f9:b9:45:5e:f5:
         64:fd:9d:20:dd:03:97:3f:27:94:f7:b0:4b:7c:4a:07:d3:0e:
         e8:a0:e2:16:8f:64:6e:79:42:a8:cf:1a:f0:6c:7d:d0:99:eb:
         a6:f3:0f:55:bd:b9:9e:d2:ea:fc:c3:5c:30:ab:0d:ba:38:28:
         e0:64:f5:ed:39:a4:2b:e2:76:58:51:d4:c6:16:0a:e9:e2:9e:
         56:eb:53:d4:17:9a:8b:44:b0:49:e2:85:4a:d2:35:5d:cb:09:
         c5:5b:92:b9:e4:0b:d5:a6:74:e2:be:2c:68:2d:7c:47:b6:c9:
         22:74:26:b3:47:4a:5a:6e:ae:21:6d:68:9a:28:e2:c9:ed:8e:
         f1:7a:d5:f5:fc:63:2f:23:f3:5b:22:9c:d6:08:20:13:bc:f6:
         a6:6c:66:04:41:05:a1:d7:ef:c0:f6:8f:82:31:81:48:fd:cc:
         42:2c:e2:36:84:f9:06:49:43:17:1c:a3:07:84:11:b1:c5:0c:
         39:a5:26:84
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt97Ku/WyutjEIFc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY5YWZmMzAtNDc4Ni00MzFjLTkwZTgtYWFmNzhjYzY0
Y2JlMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
ODQwOWEzNDctMmUyYi00NzcwLWEyZTUtZjhjZjNlMTA1MGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Sn8FW56+mHobfjp+zFGfnjW9VVM+927o3t
zhWHypkMZQvwDkKimjXmXthTdyB2Hz5CSSxp5/iqYehmuoncRW/E+0WjOLn5Of7F
4oGXFR0otT7bUm6LZP8tjsy0U7UH0EfIrx0YligaQ7rS7GFgMrRaURcywpcQ/y+c
whQA1lffb6moVGIW70Cv6qlgdu1tQ6uKFqibY3R2ONEaFjuM2xbDjWFs1/kbcM9s
IO4vPOafJN5AZQSD5/AEV0eGhfZr1CRFHi3nYgWHgluSvCRO21jRzaGdmuYkk7X9
gsU4WnVR5znowqysBG4VVUCPSSs4hQ+5Ar2Y/WH995JnMc/BCQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCRRSdQqBre5xcE4HZ7Yxi0HMyC6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNjlh
ZmYzMC00Nzg2LTQzMWMtOTBlOC1hYWY3OGNjNjRjYmUvMTdhY2I0NzEtZjBlYy0z
NzUyLTkwYTUtMDVmOTUzZWJkODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzY5YWZmMzAtNDc4Ni00MzFjLTkw
ZTgtYWFmNzhjYzY0Y2JlL2M2OWFmZjMwLTQ3ODYtNDMxYy05MGU4LWFhZjc4Y2M2
NGNiZS5jcmwwHwYDVR0jBBgwFoAU4Qrm1Yk+AYyF+IGr+zP/YKM0L2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jNjlhZmYzMC00Nzg2LTQzMWMtOTBlOC1hYWY3
OGNjNjRjYmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCgP7kAwQC
ovVkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGronnhhuM+sMa4ZsZURlHFDkR1PcvL+ozrENlzyQjqjSrX+
jOwgKpagse5EzoHroQm9ORi/uOP9SJFYTQRmPwckrs75uUVe9WT9nSDdA5c/J5T3
sEt8SgfTDuig4haPZG55QqjPGvBsfdCZ66bzD1W9uZ7S6vzDXDCrDbo4KOBk9e05
pCvidlhR1MYWCuninlbrU9QXmotEsEnihUrSNV3LCcVbkrnkC9WmdOK+LGgtfEe2
ySJ0JrNHSlpuriFtaJoo4sntjvF61fX8Yy8j81sinNYIIBO89qZsZgRBBaHX78D2
j4IxgUj9zEIs4jaE+QZJQxccoweEEbHFDDmlJoQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:44 2025 by rpki-client