Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/312741df-2d3e-30a4-96c0-592817fec1c7.roa
File:                     312741df-2d3e-30a4-96c0-592817fec1c7.roa (raw, json)
Hash identifier:          mJAEeC4lpQDRB+KAFubUqsuL9UP/eiho5eO4y/bUn0E=
Subject key identifier:   02:43:49:69:80:D4:B2:70:A9:68:97:7A:6C:2E:39:F1:80:BA:8B:AC
Certificate issuer:       /CN=b18afa70-561d-4db9-a167-25cd94a409b4
Certificate serial:       010D0C9F4328584B33F1A14E193F70E8A38960C0
Authority key identifier: 8A:F3:37:52:DB:E5:86:3D:18:07:F9:62:64:D1:45:C6:FB:A1:D3:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/312741df-2d3e-30a4-96c0-592817fec1c7.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     52438
IP address blocks:        209.127.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a1:4e:19:3f:70:e8:a3:89:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18afa70-561d-4db9-a167-25cd94a409b4
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=5aadef65-c930-4a60-976e-5805aa463a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:67:ee:a3:0f:bf:c2:8b:a6:89:21:65:7c:
                    d1:7f:19:2b:80:c8:54:be:7f:c3:3f:f2:bc:9c:fe:
                    dd:33:92:48:4f:fe:f1:a3:b5:d8:21:2e:cb:97:e3:
                    43:1b:76:1d:2e:8e:2f:31:05:72:85:0e:b6:0a:e2:
                    58:0e:b1:7e:92:53:0b:a7:5d:2c:d6:a6:3c:0b:00:
                    49:28:d1:b2:7c:a3:7f:9b:bf:3d:b9:cd:c3:27:a2:
                    5a:34:bb:75:f9:f5:ef:0e:65:29:b0:21:01:8a:f2:
                    55:e6:1c:c7:30:32:ce:bf:d4:fa:ff:82:a7:50:17:
                    1b:3a:ff:76:be:07:63:2c:38:6c:68:12:c2:f7:0f:
                    c9:23:4c:1e:77:86:1c:a4:64:f6:9f:e3:75:46:b7:
                    90:c5:cf:e4:ea:91:86:ae:5e:20:74:49:45:4d:89:
                    74:a5:d2:7e:49:c1:c5:50:ec:ed:fb:00:b7:1d:05:
                    b6:6a:f7:1d:45:df:95:d0:c4:de:b6:61:59:df:30:
                    da:96:b2:65:12:d5:67:ff:1e:4e:da:ef:8d:71:f5:
                    09:09:59:76:8b:62:f1:b2:06:90:f7:d4:34:a6:be:
                    17:e4:e6:74:e1:56:26:29:18:17:34:c9:a5:92:ee:
                    e6:f0:c3:45:15:86:ce:b4:48:15:61:56:0e:fd:9c:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:43:49:69:80:D4:B2:70:A9:68:97:7A:6C:2E:39:F1:80:BA:8B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/312741df-2d3e-30a4-96c0-592817fec1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.crl

            X509v3 Authority Key Identifier:
                keyid:8A:F3:37:52:DB:E5:86:3D:18:07:F9:62:64:D1:45:C6:FB:A1:D3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:73:fe:62:05:c8:c4:90:95:f3:ca:9e:ea:4b:4a:6e:45:02:
         b9:bf:ec:bf:6a:77:47:d0:fe:a6:c7:4b:64:0c:9e:2b:70:96:
         e5:68:37:e0:d8:18:c7:36:54:5d:8b:9d:9b:82:51:c2:e9:ff:
         5c:93:d1:d4:e9:23:bf:b1:39:15:21:c5:36:ee:34:65:92:91:
         83:97:88:b7:f5:89:e5:80:02:23:e7:0f:8c:14:7a:5b:bd:0d:
         0d:c5:a8:19:38:ca:b3:7a:42:ea:e2:75:b0:41:99:9a:66:f5:
         71:bf:60:82:18:8f:ba:da:5a:86:e5:b5:f5:f0:1f:37:cd:07:
         e5:5a:64:e3:03:43:f7:3d:76:0a:fb:fe:3c:24:1a:1a:ee:b1:
         27:8f:76:04:3e:b4:16:95:92:d3:f5:55:34:c3:59:e3:a6:11:
         65:bb:8d:d3:01:8a:a9:0e:d9:7c:bb:f0:cb:ea:6f:74:5b:df:
         58:4e:4b:44:a2:95:52:2d:b6:18:2c:2a:f9:76:2d:dc:77:e8:
         b3:5d:90:38:09:61:60:7d:e9:08:56:68:95:f4:61:33:aa:14:
         1b:e3:53:83:fc:2a:bc:f2:e2:55:52:a2:2c:64:ae:ff:7e:78:
         0a:66:58:86:d5:2c:a3:8e:94:7b:72:57:10:e5:69:54:92:2b:
         75:b0:ad:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aFOGT9w6KOJYMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4YWZhNzAtNTYxZC00ZGI5LWExNjctMjVjZDk0YTQw
OWI0MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk
NWFhZGVmNjUtYzkzMC00YTYwLTk3NmUtNTgwNWFhNDYzYTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosxn7qMPv8KLpokhZXzRfxkrgMhUvn/DP/K8
nP7dM5JIT/7xo7XYIS7Ll+NDG3YdLo4vMQVyhQ62CuJYDrF+klMLp10s1qY8CwBJ
KNGyfKN/m789uc3DJ6JaNLt1+fXvDmUpsCEBivJV5hzHMDLOv9T6/4KnUBcbOv92
vgdjLDhsaBLC9w/JI0wed4YcpGT2n+N1RreQxc/k6pGGrl4gdElFTYl0pdJ+ScHF
UOzt+wC3HQW2avcdRd+V0MTetmFZ3zDalrJlEtVn/x5O2u+NcfUJCVl2i2LxsgaQ
99Q0pr4X5OZ04VYmKRgXNMmlku7m8MNFFYbOtEgVYVYO/ZyLSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJDSWmA1LJwqWiXemwuOfGAuousMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMThh
ZmE3MC01NjFkLTRkYjktYTE2Ny0yNWNkOTRhNDA5YjQvMzEyNzQxZGYtMmQzZS0z
MGE0LTk2YzAtNTkyODE3ZmVjMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjE4YWZhNzAtNTYxZC00ZGI5LWEx
NjctMjVjZDk0YTQwOWI0L2IxOGFmYTcwLTU2MWQtNGRiOS1hMTY3LTI1Y2Q5NGE0
MDliNC5jcmwwHwYDVR0jBBgwFoAUivM3Utvlhj0YB/liZNFFxvuh00swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMThhZmE3MC01NjFkLTRkYjktYTE2Ny0yNWNk
OTRhNDA5YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtz/mIFyMSQlfPKnupLSm5FArm/7L9qd0fQ/qbHS2QMnitwluVoN+DY
GMc2VF2LnZuCUcLp/1yT0dTpI7+xORUhxTbuNGWSkYOXiLf1ieWAAiPnD4wUelu9
DQ3FqBk4yrN6QuridbBBmZpm9XG/YIIYj7raWobltfXwHzfNB+VaZOMDQ/c9dgr7
/jwkGhrusSePdgQ+tBaVktP1VTTDWeOmEWW7jdMBiqkO2Xy78Mvqb3Rb31hOS0Si
lVItthgsKvl2Ldx36LNdkDgJYWB96QhWaJX0YTOqFBvjU4P8Krzy4lVSoixkrv9+
eApmWIbVLKOOlHtyVxDlaVSSK3Wwrdg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:46 2025 by rpki-client