Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa
File:                     190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa (raw, json)
Hash identifier:          RnuzvefYu6tasN/PKTM+mhErujQkx+AeLxHBETX2ZFA=
Subject key identifier:   41:45:C5:33:D2:06:0A:D8:C7:1C:CE:B8:B2:B0:50:BE:1D:EA:AD:CB
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584B8BE21C795EC9C396F3435580
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     3807
IP address blocks:        207.196.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:1c:79:5e:c9:c3:96:f3:43:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=0560f654-dd0f-4710-bf24-930524bde98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:0f:40:99:35:fa:dd:7a:ca:10:b2:5c:e0:
                    a1:b2:7a:a6:dc:76:70:91:1c:2a:6a:ca:30:0d:98:
                    c4:57:b4:e1:5d:56:17:a9:dc:b3:80:92:c7:03:ab:
                    31:0d:0d:81:cb:d9:ee:b4:bd:9f:72:fd:66:e2:bb:
                    00:64:86:ee:4a:1b:48:44:66:d8:8e:fa:aa:9b:dd:
                    b9:ba:77:6d:a1:59:41:f8:a3:dc:c0:28:74:a0:27:
                    09:18:9e:78:d6:42:ce:ae:13:57:ed:94:75:20:33:
                    1f:44:42:9c:3f:77:cd:bc:4f:36:e7:55:05:30:4f:
                    bc:1d:58:09:9c:90:de:e4:82:7a:e4:00:b1:d8:14:
                    b8:c4:d0:a7:2f:f1:a3:bf:46:86:97:e8:78:cf:a3:
                    7b:f2:d0:35:d9:da:4e:7d:a7:93:ef:b7:af:a4:10:
                    68:82:62:07:b6:9f:99:ac:33:7d:90:9a:23:f6:00:
                    ed:87:fd:c1:43:7f:55:2f:7b:53:33:1e:ed:eb:38:
                    f8:8a:50:8b:c4:82:89:be:a6:73:a6:6f:b6:99:6f:
                    60:07:c5:e7:76:bd:61:f5:85:91:e7:8d:99:7d:39:
                    d4:cb:e9:9e:c2:31:89:0c:9e:d6:28:98:78:d4:62:
                    8d:2e:fa:9c:11:6c:5f:81:59:7e:ab:fd:83:44:f5:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:45:C5:33:D2:06:0A:D8:C7:1C:CE:B8:B2:B0:50:BE:1D:EA:AD:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e5:63:84:eb:f6:79:a0:e1:79:5c:94:24:ce:1f:1d:10:72:
         80:75:33:82:7a:1e:3e:b3:67:5b:e1:fe:37:20:8c:ed:25:56:
         a5:03:ff:37:a2:80:61:da:f3:d7:8c:1c:1c:b4:e7:99:22:87:
         03:ae:74:08:54:04:66:81:55:7c:3b:7a:53:86:c1:a4:58:9a:
         8f:c7:02:4a:4a:b6:fa:8b:51:0a:c0:4e:42:24:a0:39:82:7d:
         9f:91:59:e6:99:c3:8f:e1:39:70:da:b2:38:8d:33:ba:00:39:
         26:47:e5:bb:39:9f:89:47:51:a3:67:29:b8:14:6a:0d:0f:2b:
         d3:78:2f:80:f9:9f:c7:0c:1c:af:b2:ef:5c:ae:78:ab:b2:95:
         b6:cc:96:55:4c:37:f2:19:8a:0a:71:2d:65:ce:e2:fc:bd:5c:
         79:0f:d1:d6:6c:b4:ab:6a:72:64:b9:08:09:c8:b2:f3:ce:e5:
         de:ea:01:db:5d:e0:e4:90:81:0e:7b:73:b4:97:5a:01:51:d7:
         3f:e9:36:ea:c9:65:29:9f:6c:5e:6e:4e:12:cb:2d:e4:4d:38:
         7c:e9:40:21:d9:66:c7:83:ab:c7:ef:27:60:3b:ed:82:f5:b1:
         0d:9c:db:ca:3c:a7:77:f5:82:91:c2:62:f7:40:ad:f4:e9:22:
         b0:fa:73:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hx5XsnDlvNDVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0
MTA3MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
MDU2MGY2NTQtZGQwZi00NzEwLWJmMjQtOTMwNTI0YmRlOThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns8PQJk1+t16yhCyXOChsnqm3HZwkRwqasow
DZjEV7ThXVYXqdyzgJLHA6sxDQ2By9nutL2fcv1m4rsAZIbuShtIRGbYjvqqm925
undtoVlB+KPcwCh0oCcJGJ541kLOrhNX7ZR1IDMfREKcP3fNvE8251UFME+8HVgJ
nJDe5IJ65ACx2BS4xNCnL/Gjv0aGl+h4z6N78tA12dpOfaeT77evpBBogmIHtp+Z
rDN9kJoj9gDth/3BQ39VL3tTMx7t6zj4ilCLxIKJvqZzpm+2mW9gB8Xndr1h9YWR
542ZfTnUy+mewjGJDJ7WKJh41GKNLvqcEWxfgVl+q/2DRPXlkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFFxTPSBgrYxxzOuLKwUL4d6q3LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj
N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvMTkwZGExNWUtYzA2YS0z
ZWI5LTg3YzUtOWQ4ZmQ2MDRhNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0
MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz
NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3
ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8SeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTlY4Tr9nmg4XlclCTOHx0QcoB1M4J6Hj6zZ1vh/jcgjO0lVqUD/zei
gGHa89eMHBy055kihwOudAhUBGaBVXw7elOGwaRYmo/HAkpKtvqLUQrATkIkoDmC
fZ+RWeaZw4/hOXDasjiNM7oAOSZH5bs5n4lHUaNnKbgUag0PK9N4L4D5n8cMHK+y
71yueKuylbbMllVMN/IZigpxLWXO4vy9XHkP0dZstKtqcmS5CAnIsvPO5d7qAdtd
4OSQgQ57c7SXWgFR1z/pNurJZSmfbF5uThLLLeRNOHzpQCHZZseDq8fvJ2A77YL1
sQ2c28o8p3f1gpHCYvdArfTpIrD6cxg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:57 2025 by rpki-client