Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa
File:                     0affa3ca-5e84-377e-8612-b0e2003b6f16.roa (raw, json)
Hash identifier:          BYv2WpWoLxfij/4W9uTujeGbHKFewMztnW13g4NBU9s=
Subject key identifier:   1C:AC:6C:6D:63:60:85:68:3D:B2:47:49:D5:6F:C7:91:91:EC:E1:5F
Certificate issuer:       /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Certificate serial:       010D0C9F4328584B84E772E8D80B0D13E83E4B00
Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        208.79.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:72:e8:d8:0b:0d:13:e8:3e:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=b52319e0-34d7-4133-a6e1-135abfc0fd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:53:53:c4:7e:cf:a1:bb:80:4f:fc:be:7b:
                    34:32:22:bf:7c:02:09:e4:2a:77:a0:ad:88:04:65:
                    af:a6:39:51:cc:bf:77:8f:2b:df:f3:7d:17:6b:de:
                    2e:c0:67:d1:67:f8:dd:53:60:c5:67:85:8f:b4:b8:
                    7c:95:63:1d:54:26:06:43:19:e0:10:a9:06:5a:9d:
                    28:35:8f:7d:22:28:e0:8f:a8:55:6f:f6:28:04:21:
                    9a:27:16:1b:83:16:25:5d:13:a8:94:09:3c:db:41:
                    ed:2c:c6:c8:19:8c:e2:7d:51:1d:d7:77:83:c9:d7:
                    73:d7:74:5c:85:ba:94:a3:87:3c:fe:53:00:00:21:
                    3d:af:2f:5e:52:78:40:32:5a:3c:9d:41:61:88:86:
                    b3:51:af:12:76:e4:cd:4e:f8:91:1c:9b:dc:f7:a7:
                    dd:05:db:de:e7:b4:be:c6:56:02:e5:1c:45:d2:00:
                    c0:27:df:39:d4:37:0f:cc:4a:8f:83:33:d1:6e:ef:
                    2f:3e:2d:fc:75:ae:5d:18:cd:44:21:ed:e1:83:84:
                    4e:db:53:07:a8:ae:61:4d:1b:1f:cd:ba:0b:0a:be:
                    3e:82:c1:9e:82:00:71:7b:41:40:72:73:95:87:31:
                    0d:08:5a:b4:85:50:8f:ce:02:a0:98:61:ee:b1:c7:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AC:6C:6D:63:60:85:68:3D:B2:47:49:D5:6F:C7:91:91:EC:E1:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl

            X509v3 Authority Key Identifier:
                keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:25:b6:d1:64:1a:07:79:ea:5a:b3:fb:34:5f:b0:85:b8:30:
         8c:ea:79:e7:d7:09:a7:26:16:57:dc:7a:87:ca:27:6b:9e:b2:
         55:ff:41:79:2e:ea:7e:2a:89:31:a8:b4:78:29:a9:73:ad:d7:
         2a:26:21:85:57:32:cb:66:92:8b:77:d2:0d:39:e6:d6:d5:0f:
         e0:ce:3c:dd:d9:d9:ee:bf:30:b1:af:73:e9:66:72:07:5e:0b:
         8d:f6:50:78:47:d4:41:5f:f7:72:aa:85:21:20:c2:33:26:4d:
         76:f0:a4:97:7c:00:8a:d0:51:ce:db:6c:f9:61:56:e5:20:ea:
         07:c2:c1:26:20:a4:5c:ec:4e:0e:48:e9:2c:e4:de:98:b5:30:
         56:4d:62:41:e5:49:eb:8f:92:f0:f8:8b:4e:ba:2c:d5:f6:e9:
         f8:ca:50:c3:76:16:31:18:60:8f:cd:df:1e:63:ea:a2:84:e8:
         32:12:15:d2:47:9e:e2:3b:7c:bc:ba:4d:a1:6f:c2:11:ef:ae:
         fb:3d:f7:b6:31:c9:0c:6e:81:61:65:cd:2a:8d:4c:05:86:f3:
         98:9c:6c:1e:86:2d:1d:e4:0a:0a:03:39:e6:f8:3e:84:c9:09:
         fc:e0:53:88:bd:27:be:30:50:ff:a5:97:39:24:e1:cd:a0:7a:
         4a:61:57:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53Lo2AsNE+g+SwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3
NjVkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
YjUyMzE5ZTAtMzRkNy00MTMzLWE2ZTEtMTM1YWJmYzBmZDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseBTU8R+z6G7gE/8vns0MiK/fAIJ5Cp3oK2I
BGWvpjlRzL93jyvf830Xa94uwGfRZ/jdU2DFZ4WPtLh8lWMdVCYGQxngEKkGWp0o
NY99Iijgj6hVb/YoBCGaJxYbgxYlXROolAk820HtLMbIGYzifVEd13eDyddz13Rc
hbqUo4c8/lMAACE9ry9eUnhAMlo8nUFhiIazUa8SduTNTviRHJvc96fdBdve57S+
xlYC5RxF0gDAJ9851DcPzEqPgzPRbu8vPi38da5dGM1EIe3hg4RO21MHqK5hTRsf
zboLCr4+gsGeggBxe0FAcnOVhzENCFq0hVCPzgKgmGHuscdkXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBysbG1jYIVoPbJHSdVvx5GR7OFfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0
ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvMGFmZmEzY2EtNWU4NC0z
NzdlLTg2MTItYjBlMjAwM2I2ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi
NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk
NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk
NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM8lttFkGgd56lqz+zRfsIW4MIzqeefXCacmFlfceofKJ2ueslX/QXku
6n4qiTGotHgpqXOt1yomIYVXMstmkot30g055tbVD+DOPN3Z2e6/MLGvc+lmcgde
C432UHhH1EFf93KqhSEgwjMmTXbwpJd8AIrQUc7bbPlhVuUg6gfCwSYgpFzsTg5I
6Szk3pi1MFZNYkHlSeuPkvD4i066LNX26fjKUMN2FjEYYI/N3x5j6qKE6DISFdJH
nuI7fLy6TaFvwhHvrvs997YxyQxugWFlzSqNTAWG85icbB6GLR3kCgoDOeb4PoTJ
CfzgU4i9J74wUP+llzkk4c2gekphV7g=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:57 2025 by rpki-client