Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/4ea61964-aa82-36b1-aede-b57b4dacfd09.roa
File:                     4ea61964-aa82-36b1-aede-b57b4dacfd09.roa (raw, json)
Hash identifier:          sdKJih3nVFOY9LTv7Ly1mZUHdE/MHkryErV2Z2w3GT0=
Subject key identifier:   31:84:07:B6:FC:ED:3C:34:20:05:4F:A7:C0:2B:44:05:3A:3B:C0:3F
Certificate issuer:       /CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
Certificate serial:       010D0C9F4328584B79BCC6578229413415352F40
Authority key identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/4ea61964-aa82-36b1-aede-b57b4dacfd09.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     32505
IP address blocks:        199.180.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c6:57:82:29:41:34:15:35:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=c1b0ffe1-7332-4093-be23-6f49898e58d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:09:56:fe:89:dd:b0:dd:26:d9:39:a2:99:
                    c2:9e:ff:25:89:0f:b4:d9:4c:4c:12:78:70:29:bc:
                    7a:80:7d:cf:bb:af:9f:26:a4:fa:e2:64:b8:4b:3d:
                    9c:1c:27:59:dd:54:d5:ec:9c:87:15:f6:d0:d9:33:
                    18:f0:8a:ac:a1:b7:ee:62:82:4f:1b:ce:f5:78:28:
                    57:9c:ff:00:13:81:fd:ef:08:60:f0:6d:39:5b:89:
                    d4:bf:9e:48:44:9c:8b:df:a0:65:9c:56:55:6a:09:
                    b4:e5:65:ce:50:f6:58:c2:9f:d5:8c:d2:9f:b7:e3:
                    7f:65:ed:8d:c5:8b:e8:88:c9:cb:30:55:8f:f0:56:
                    05:fa:ac:11:06:ba:1d:43:28:a8:51:07:4c:b2:7a:
                    44:7d:55:b7:77:e1:98:d7:80:b6:4e:6b:ee:0f:e1:
                    e9:ec:f9:08:f0:f4:f4:21:df:e7:d6:92:5d:b7:14:
                    53:de:1d:45:4f:c8:7f:b5:31:a0:46:69:b8:7b:ea:
                    4d:0b:27:16:67:26:5b:ff:00:d4:37:f8:87:8d:6c:
                    fb:8a:8e:81:db:a7:3f:e9:7d:8d:87:aa:54:a0:af:
                    f0:38:d9:8d:1f:6a:5f:35:cf:c6:97:22:c8:f5:d3:
                    2c:ba:72:fc:3a:d1:be:1e:9d:5e:fc:af:c3:d5:a5:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:84:07:B6:FC:ED:3C:34:20:05:4F:A7:C0:2B:44:05:3A:3B:C0:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/4ea61964-aa82-36b1-aede-b57b4dacfd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl

            X509v3 Authority Key Identifier:
                keyid:81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:91:c1:2b:ec:9b:27:84:e7:7c:1a:1e:5b:ab:02:ed:91:
         ad:a5:6d:0d:79:52:2e:7d:36:3a:4f:95:89:ea:38:d3:a7:60:
         f3:61:e4:51:60:5f:84:de:ee:54:00:8c:94:11:61:5b:16:c0:
         a8:dc:e2:50:00:0c:fd:a7:4e:aa:44:f1:ff:3f:27:5e:4b:05:
         e7:28:7e:c4:2b:07:92:0d:30:45:e6:5f:fe:af:5a:d1:6f:c0:
         22:46:14:c7:8d:d9:c5:bc:70:56:89:2b:95:d3:ad:fc:3d:3b:
         b4:ef:10:0a:ed:32:e8:88:06:b1:30:2b:a0:49:b6:0d:2e:39:
         4e:29:41:1c:f9:0b:37:44:e1:ad:09:be:86:79:e0:5c:78:62:
         d1:e0:e3:1d:cf:70:97:2b:99:b1:e7:9b:a9:2f:68:2e:8a:76:
         b6:5a:2d:94:a4:11:47:2a:b9:e4:5d:f7:2c:08:e9:87:4d:75:
         f4:e6:0e:e6:ea:2a:14:46:a4:c4:ac:7e:ac:8e:0c:99:23:3d:
         d9:f3:8c:b8:3d:cb:82:0a:7e:28:45:dc:28:ed:7c:ea:ef:32:
         d4:72:42:69:6c:70:ab:a8:6a:54:30:f3:1c:1a:4b:20:3e:f6:
         86:86:3f:b6:93:0e:1b:b5:73:58:21:f3:bf:c6:53:21:01:17:
         e1:e5:e6:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMZXgilBNBU1L0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTFlYzZlZjctZjc2MC00MmNkLWExZjMtYzZjMDM5M2Iy
NTE3MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
YzFiMGZmZTEtNzMzMi00MDkzLWJlMjMtNmY0OTg5OGU1OGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt94JVv6J3bDdJtk5opnCnv8liQ+02UxMEnhw
Kbx6gH3Pu6+fJqT64mS4Sz2cHCdZ3VTV7JyHFfbQ2TMY8IqsobfuYoJPG871eChX
nP8AE4H97whg8G05W4nUv55IRJyL36BlnFZVagm05WXOUPZYwp/VjNKft+N/Ze2N
xYvoiMnLMFWP8FYF+qwRBrodQyioUQdMsnpEfVW3d+GY14C2TmvuD+Hp7PkI8PT0
Id/n1pJdtxRT3h1FT8h/tTGgRmm4e+pNCycWZyZb/wDUN/iHjWz7io6B26c/6X2N
h6pUoK/wONmNH2pfNc/GlyLI9dMsunL8OtG+Hp1e/K/D1aW5FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGEB7b87Tw0IAVPp8ArRAU6O8A/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMWVj
NmVmNy1mNzYwLTQyY2QtYTFmMy1jNmMwMzkzYjI1MTcvNGVhNjE5NjQtYWE4Mi0z
NmIxLWFlZGUtYjU3YjRkYWNmZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTFlYzZlZjctZjc2MC00MmNkLWEx
ZjMtYzZjMDM5M2IyNTE3L2UxZWM2ZWY3LWY3NjAtNDJjZC1hMWYzLWM2YzAzOTNi
MjUxNy5jcmwwHwYDVR0jBBgwFoAUgdFN6cPkqEwQoUqJbqPK4yu+vgAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMWVjNmVmNy1mNzYwLTQyY2QtYTFmMy1jNmMw
MzkzYjI1MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7S+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbmkcEr7JsnhOd8Gh5bqwLtka2lbQ15Ui59NjpPlYnqONOnYPNh5FFg
X4Te7lQAjJQRYVsWwKjc4lAADP2nTqpE8f8/J15LBecofsQrB5INMEXmX/6vWtFv
wCJGFMeN2cW8cFaJK5XTrfw9O7TvEArtMuiIBrEwK6BJtg0uOU4pQRz5CzdE4a0J
voZ54Fx4YtHg4x3PcJcrmbHnm6kvaC6KdrZaLZSkEUcqueRd9ywI6YdNdfTmDubq
KhRGpMSsfqyODJkjPdnzjLg9y4IKfihF3CjtfOrvMtRyQmlscKuoalQw8xwaSyA+
9oaGP7aTDhu1c1gh87/GUyEBF+Hl5vw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:04 2025 by rpki-client