Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7da26e36-38b8-3249-84d7-664639e8ff7f.roa
File:                     7da26e36-38b8-3249-84d7-664639e8ff7f.roa (raw, json)
Hash identifier:          knerVVhkr4btJBpHGrfRjZEO+I61idxE31DM5pL8hyo=
Subject key identifier:   1B:F0:44:D7:69:1B:14:5B:C8:1A:48:4E:6A:68:69:B1:53:C6:E8:37
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C370632374D5583250FA480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7da26e36-38b8-3249-84d7-664639e8ff7f.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397243
IP address blocks:        192.100.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:06:32:37:4d:55:83:25:0f:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=b830e5f2-cdf4-4514-affb-dbb94343909f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:69:bc:33:be:6b:87:08:b9:40:87:23:75:
                    9d:1a:5e:ba:0d:10:3d:dd:03:93:65:8f:e6:18:ae:
                    ec:ba:a7:d1:41:a6:7b:d1:7a:aa:e1:7e:2b:a0:a1:
                    99:3e:ce:10:ff:dc:c1:fb:e6:ab:d9:6b:e8:07:3c:
                    40:82:a6:c0:bd:ce:4a:67:4b:4c:dc:2a:6d:ab:f7:
                    a2:05:77:fd:85:c4:ce:e8:a3:93:26:64:5c:ad:eb:
                    22:3b:a3:63:91:1d:0c:3f:69:ea:80:9b:d3:4e:68:
                    50:e9:c2:32:4e:08:42:c3:5c:f8:09:57:56:8f:21:
                    bc:59:4c:15:96:d9:22:d6:ee:67:4e:f0:3b:fc:76:
                    fc:36:2a:37:69:21:83:cf:e2:0e:09:0c:38:a7:21:
                    6a:c9:d0:3f:d7:c7:dc:fa:de:24:0d:b2:f3:f8:ec:
                    c9:9c:86:89:88:2b:a5:72:9e:19:cb:c4:a1:d1:9a:
                    e8:e3:cf:d5:b0:ca:c6:c5:d9:cb:1f:44:1f:2a:f7:
                    2f:bd:15:9f:93:a1:bd:27:62:e3:f5:09:89:9d:8d:
                    44:2b:af:13:1c:93:d5:91:1f:02:c8:ca:35:2f:f4:
                    49:be:4b:96:66:63:a7:bc:30:8b:96:ad:07:3d:8a:
                    45:31:40:34:01:56:8e:40:cf:6d:69:87:b2:4e:e3:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F0:44:D7:69:1B:14:5B:C8:1A:48:4E:6A:68:69:B1:53:C6:E8:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7da26e36-38b8-3249-84d7-664639e8ff7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:86:bb:97:5d:aa:64:9b:46:08:3f:64:07:27:3d:c1:cd:41:
         9a:04:7e:5c:22:04:e3:38:56:c0:20:77:5b:79:f5:3f:53:d4:
         5e:80:68:2a:4f:16:63:2e:b6:9e:6f:7c:c6:fb:a8:05:3a:4f:
         c2:8c:98:e9:60:14:26:99:43:5f:13:e0:74:aa:15:b9:e7:9a:
         16:92:0b:88:45:20:c1:7a:87:67:5f:68:1d:4e:0f:52:29:70:
         82:f2:4f:6f:e6:e5:a2:20:bd:f2:d5:7f:ae:59:92:a6:5a:64:
         86:58:1f:89:8a:45:57:0d:f1:15:7e:3f:a6:a2:5d:69:18:37:
         57:69:d8:69:b2:94:74:6d:b3:c1:98:aa:0a:36:63:93:a8:34:
         83:a2:9a:ca:b2:3c:17:11:1a:e7:8b:b7:3a:ae:9d:b0:06:6f:
         48:86:b3:ac:6b:03:55:59:5d:eb:a9:69:1a:d3:f4:33:82:40:
         de:73:ff:9b:83:e8:a0:a1:32:a1:0d:a2:da:36:0e:75:0b:61:
         4e:ee:f4:ed:79:b2:1c:e8:c8:ed:b6:dd:06:9b:a7:b7:4f:72:
         3e:6c:04:ce:db:47:e0:1d:b3:42:e2:65:9d:93:a6:3e:27:e7:
         6a:36:0e:76:7f:4c:6c:98:e2:9e:c7:3f:fc:9b:29:c7:fd:97:
         d3:73:2c:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwYyN01VgyUPpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
YjgzMGU1ZjItY2RmNC00NTE0LWFmZmItZGJiOTQzNDM5MDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5lpvDO+a4cIuUCHI3WdGl66DRA93QOTZY/m
GK7suqfRQaZ70Xqq4X4roKGZPs4Q/9zB++ar2WvoBzxAgqbAvc5KZ0tM3Cptq/ei
BXf9hcTO6KOTJmRcresiO6NjkR0MP2nqgJvTTmhQ6cIyTghCw1z4CVdWjyG8WUwV
ltki1u5nTvA7/Hb8Nio3aSGDz+IOCQw4pyFqydA/18fc+t4kDbLz+OzJnIaJiCul
cp4Zy8Sh0Zro48/VsMrGxdnLH0QfKvcvvRWfk6G9J2Lj9QmJnY1EK68THJPVkR8C
yMo1L/RJvkuWZmOnvDCLlq0HPYpFMUA0AVaOQM9taYeyTuOGiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBvwRNdpGxRbyBpITmpoabFTxug3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2RhMjZlMzYtMzhiOC0z
MjQ5LTg0ZDctNjY0NjM5ZThmZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGQ7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGGu5ddqmSbRgg/ZAcnPcHNQZoEflwiBOM4VsAgd1t59T9T1F6AaCpP
FmMutp5vfMb7qAU6T8KMmOlgFCaZQ18T4HSqFbnnmhaSC4hFIMF6h2dfaB1OD1Ip
cILyT2/m5aIgvfLVf65ZkqZaZIZYH4mKRVcN8RV+P6aiXWkYN1dp2GmylHRts8GY
qgo2Y5OoNIOimsqyPBcRGueLtzqunbAGb0iGs6xrA1VZXeupaRrT9DOCQN5z/5uD
6KChMqENoto2DnULYU7u9O15shzoyO223Qabp7dPcj5sBM7bR+Ads0LiZZ2Tpj4n
52o2DnZ/TGyY4p7HP/ybKcf9l9NzLMs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:06:34 2025 by rpki-client