Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76457cd3-594a-33ac-aea3-55ba62b5bde6.roa
File:                     76457cd3-594a-33ac-aea3-55ba62b5bde6.roa (raw, json)
Hash identifier:          GHG6F9iS9Lh7Lqo2xDq2C/ZsCDulOS2Uu2NUCLyCTEk=
Subject key identifier:   10:C3:95:83:72:6D:8D:73:61:C5:04:04:D8:F4:6C:4F:32:86:35:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE03122096FAB69EDE4A3CE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76457cd3-594a-33ac-aea3-55ba62b5bde6.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        184.25.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:22:09:6f:ab:69:ed:e4:a3:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=82c4c5f7-49ae-4513-b802-e6e79ef589e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:39:b8:6b:70:93:e4:16:26:92:e5:84:39:
                    76:5c:0d:25:d9:ca:34:69:db:78:65:09:22:8e:78:
                    14:04:16:e3:4c:0d:d8:ee:dc:a1:30:80:c2:fb:e0:
                    55:88:34:0b:99:2a:12:bd:8c:b7:24:43:17:59:16:
                    7b:4f:5e:92:95:ca:ed:70:61:f0:5a:d8:41:ec:b8:
                    24:97:4d:c5:e7:39:77:3b:80:6f:2f:5f:09:68:3e:
                    6b:bc:6f:cd:89:6b:b3:1f:6d:92:1c:01:69:e3:03:
                    7a:72:59:f6:52:6b:c4:f7:64:65:c3:e9:79:52:fe:
                    f4:8b:ef:c8:2f:35:5f:be:84:6f:f7:0c:bb:a9:4e:
                    e4:34:96:4c:61:01:d7:b8:f7:63:00:0f:48:41:ba:
                    40:82:29:0d:05:33:2e:ac:03:ef:3f:54:de:85:a9:
                    3c:94:6b:2a:52:40:4c:52:ef:7a:42:12:f9:1b:43:
                    e1:10:b6:8b:2c:ab:61:96:bb:9a:59:76:49:63:a8:
                    c7:16:68:37:17:d7:14:66:3d:60:2b:43:ce:96:04:
                    f4:7d:7d:05:d7:6d:40:7a:86:f6:72:d1:74:c4:06:
                    8b:cc:31:53:b5:96:b5:23:b8:59:38:42:7b:aa:9d:
                    e2:6d:ca:3a:0c:41:9e:b3:70:fb:68:7a:5a:05:9a:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C3:95:83:72:6D:8D:73:61:C5:04:04:D8:F4:6C:4F:32:86:35:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76457cd3-594a-33ac-aea3-55ba62b5bde6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1a:a8:c5:42:6f:31:f4:db:e3:4f:26:5c:5e:17:81:2a:c0:
         ce:49:6c:42:51:42:da:79:65:a3:c1:6a:c2:b1:45:c4:69:ab:
         1b:5c:69:8c:3d:bb:52:7f:82:3b:7c:3f:66:4c:6d:16:b1:a4:
         04:2f:c1:07:52:76:33:fc:5f:f6:3c:60:89:9c:f7:5e:89:71:
         71:d4:a5:42:44:dc:75:35:ef:da:8f:55:cf:a5:d6:be:ba:9f:
         11:42:41:08:bb:28:32:2e:90:f3:53:f2:02:63:30:e6:dd:68:
         77:fc:64:be:66:99:34:33:15:9a:6b:88:65:45:96:3f:33:b8:
         bb:81:db:02:20:79:92:40:3a:ab:96:bf:95:a8:9a:ed:ad:f3:
         cb:f8:83:77:42:98:96:c5:9c:55:64:98:06:6f:31:98:55:0e:
         b8:b1:02:c6:2d:6b:5d:4c:67:83:08:39:8a:62:c8:de:78:ad:
         9c:e1:da:ea:2c:93:b8:c8:64:c1:fe:09:6e:e7:51:ea:2a:c1:
         69:71:b7:06:c7:ed:d7:05:1f:06:0c:48:e0:26:2a:20:98:21:
         db:6b:76:ed:fd:6a:83:43:19:c3:8f:c8:e2:06:1e:d9:b3:7e:
         1b:ec:48:59:16:62:13:50:4f:30:13:07:0d:c8:ac:43:aa:90:
         78:66:6a:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMSIJb6tp7eSjzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
ODJjNGM1ZjctNDlhZS00NTEzLWI4MDItZTZlNzllZjU4OWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCM5uGtwk+QWJpLlhDl2XA0l2co0adt4ZQki
jngUBBbjTA3Y7tyhMIDC++BViDQLmSoSvYy3JEMXWRZ7T16SlcrtcGHwWthB7Lgk
l03F5zl3O4BvL18JaD5rvG/NiWuzH22SHAFp4wN6cln2UmvE92Rlw+l5Uv70i+/I
LzVfvoRv9wy7qU7kNJZMYQHXuPdjAA9IQbpAgikNBTMurAPvP1Tehak8lGsqUkBM
Uu96QhL5G0PhELaLLKthlruaWXZJY6jHFmg3F9cUZj1gK0POlgT0fX0F121Aeob2
ctF0xAaLzDFTtZa1I7hZOEJ7qp3ibco6DEGes3D7aHpaBZqCrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDDlYNybY1zYcUEBNj0bE8yhjUOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzY0NTdjZDMtNTk0YS0z
M2FjLWFlYTMtNTViYTYyYjViZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBk6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAaqMVCbzH02+NPJlxeF4EqwM5JbEJRQtp5ZaPBasKxRcRpqxtcaYw9
u1J/gjt8P2ZMbRaxpAQvwQdSdjP8X/Y8YImc916JcXHUpUJE3HU179qPVc+l1r66
nxFCQQi7KDIukPNT8gJjMObdaHf8ZL5mmTQzFZpriGVFlj8zuLuB2wIgeZJAOquW
v5Womu2t88v4g3dCmJbFnFVkmAZvMZhVDrixAsYta11MZ4MIOYpiyN54rZzh2uos
k7jIZMH+CW7nUeoqwWlxtwbH7dcFHwYMSOAmKiCYIdtrdu39aoNDGcOPyOIGHtmz
fhvsSFkWYhNQTzATBw3IrEOqkHhmahM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:49 2025 by rpki-client