Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3200161c-c67c-3c1e-b3de-1a94680c4bb9.roa
File:                     3200161c-c67c-3c1e-b3de-1a94680c4bb9.roa (raw, json)
Hash identifier:          fOFktwm/T4/tLUwFeKz9+smHWqcj/K0xCFUe0PtYvc0=
Subject key identifier:   E4:26:72:69:BC:55:F3:9D:79:04:4C:53:D3:0E:4A:1A:0F:F5:3F:49
Certificate issuer:       /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
Certificate serial:       010D0C9F4328584AEC2D712E3041C18393E983D0
Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3200161c-c67c-3c1e-b3de-1a94680c4bb9.roa
Signing time:             Wed 20 Aug 2025 18:11:32 +0000
ROA not before:           Wed 20 Aug 2025 18:11:32 +0000
ROA not after:            Tue 18 Nov 2025 19:11:32 +0000
asID:                     161
IP address blocks:        192.91.66.0/24 maxlen: 24
                          192.91.75.0/24 maxlen: 24
                          192.91.101.0/24 maxlen: 24
                          192.94.92.0/24 maxlen: 24
                          198.47.19.0/24 maxlen: 24
                          198.47.20.0/24 maxlen: 24
                          198.47.21.0/24 maxlen: 24
                          198.47.23.0/24 maxlen: 24
                          198.47.26.0/24 maxlen: 24
                          198.47.27.0/24 maxlen: 24
                          198.47.28.0/24 maxlen: 24
                          198.47.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:2d:71:2e:30:41:c1:83:93:e9:83:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
        Validity
            Not Before: Aug 20 18:11:32 2025 GMT
            Not After : Nov 18 19:11:32 2025 GMT
        Subject: CN=65c40463-11fb-4846-b240-25d04a97a7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8f:4c:fb:01:47:dd:50:0e:ee:d2:4f:12:4f:
                    46:b0:13:e2:81:dd:48:2e:f2:02:83:ad:21:c1:7b:
                    25:85:74:92:84:82:ce:76:11:e7:c3:b6:29:9d:fa:
                    cc:f5:9d:37:a5:3c:32:43:15:d8:a2:38:dc:c6:0f:
                    61:86:50:6b:b7:b1:86:dc:2e:cd:0a:af:a3:0f:14:
                    e7:3a:82:66:68:44:d3:29:b6:6c:b3:76:67:c9:3e:
                    cb:25:d0:87:7d:99:44:24:0d:50:84:7f:87:ca:c7:
                    05:db:97:93:50:c9:bd:8a:94:79:96:c1:ad:87:5d:
                    0b:79:4d:ce:8d:60:2f:ce:da:8e:94:b6:ae:a5:cd:
                    82:f4:5d:f3:74:3f:a9:71:96:a4:05:00:d4:c6:e9:
                    d6:6c:90:39:63:81:36:15:bd:df:c2:6b:e2:12:65:
                    53:55:d0:d3:d6:60:39:de:5c:b6:6a:dd:7f:9f:5e:
                    0c:67:3e:4a:84:79:da:57:1d:89:ae:2d:86:12:e9:
                    91:bf:32:c4:5f:c9:0c:73:fa:ee:d7:3d:90:24:7d:
                    9a:4a:8a:62:76:18:01:0f:67:98:e3:3a:0a:f9:8f:
                    5c:a2:25:d9:19:eb:27:fb:ca:66:80:ba:39:70:4c:
                    5c:27:b2:fb:2d:f7:59:02:b5:e6:41:2c:8c:b8:22:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:26:72:69:BC:55:F3:9D:79:04:4C:53:D3:0E:4A:1A:0F:F5:3F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3200161c-c67c-3c1e-b3de-1a94680c4bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl

            X509v3 Authority Key Identifier:
                keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.91.66.0/24
                  192.91.75.0/24
                  192.91.101.0/24
                  192.94.92.0/24
                  198.47.19.0-198.47.21.255
                  198.47.23.0/24
                  198.47.26.0-198.47.29.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ab:71:57:17:44:bb:b8:df:7e:6b:48:f9:61:43:c2:44:8c:
         26:f2:70:a5:3d:2b:c8:3e:81:b6:6a:89:2e:94:61:ce:c8:67:
         b1:b7:09:cc:48:f1:da:19:87:da:56:62:7a:1e:68:2e:3c:01:
         b9:fd:83:1a:21:08:aa:bd:96:f9:48:a6:59:c6:6f:de:93:c9:
         68:f6:f5:19:40:b1:a5:cf:e4:c5:ee:70:32:80:08:60:42:89:
         b2:23:ae:5b:bd:3e:ec:76:f0:a7:ea:86:dd:85:e6:2f:83:59:
         04:d4:e9:c5:df:12:88:6f:37:df:e6:60:e3:02:ed:e9:f3:aa:
         40:20:7a:27:25:de:d2:ab:41:8a:4c:f4:a7:80:1c:13:2d:42:
         1a:c4:84:8c:45:4e:18:a6:d4:0a:8c:f1:b7:2b:fa:fe:0c:17:
         12:43:86:77:19:73:85:fd:e6:ad:f1:fa:f6:6b:27:20:4f:53:
         0a:dc:d4:60:15:b0:32:24:88:4c:09:c5:64:74:d7:17:98:6c:
         ff:0f:43:2e:cd:c1:1a:cc:5e:5f:dc:96:8b:8a:39:c3:f9:ed:
         eb:f3:ac:78:68:d0:1e:ff:e0:17:28:60:77:be:e6:b9:fd:8d:
         b8:57:be:df:cd:ed:90:21:24:3f:43:1b:1c:72:fb:36:8a:56:
         ee:5f:b8:4c
-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWErsLXEuMEHBg5Ppg9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk
NzhlMB4XDTI1MDgyMDE4MTEzMloXDTI1MTExODE5MTEzMlowLzEtMCsGA1UEAxMk
NjVjNDA0NjMtMTFmYi00ODQ2LWIyNDAtMjVkMDRhOTdhN2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY9M+wFH3VAO7tJPEk9GsBPigd1ILvICg60h
wXslhXSShILOdhHnw7YpnfrM9Z03pTwyQxXYojjcxg9hhlBrt7GG3C7NCq+jDxTn
OoJmaETTKbZss3ZnyT7LJdCHfZlEJA1QhH+HyscF25eTUMm9ipR5lsGth10LeU3O
jWAvztqOlLaupc2C9F3zdD+pcZakBQDUxunWbJA5Y4E2Fb3fwmviEmVTVdDT1mA5
3ly2at1/n14MZz5KhHnaVx2Jri2GEumRvzLEX8kMc/ru1z2QJH2aSopidhgBD2eY
4zoK+Y9coiXZGesn+8pmgLo5cExcJ7L7LfdZArXmQSyMuCIu+wIDAQABo4IDiTCC
A4UwHQYDVR0OBBYEFOQmcmm8VfOdeQRMU9MOShoP9T9JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy
MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvMzIwMDE2MWMtYzY3Yy0z
YzFlLWIzZGUtMWE5NDY4MGM0YmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk
MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy
ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk
MTBhMmQ3OGUuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAwFtCAwQA
wFtLAwQAwFtlAwQAwF5cMAwDBADGLxMDBAHGLxQDBADGLxcwDAMEAcYvGgMEAcYv
HDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQA8q3FXF0S7uN9+a0j5YUPCRIwm8nClPSvIPoG2aokulGHOyGex
twnMSPHaGYfaVmJ6HmguPAG5/YMaIQiqvZb5SKZZxm/ek8lo9vUZQLGlz+TF7nAy
gAhgQomyI65bvT7sdvCn6obdheYvg1kE1OnF3xKIbzff5mDjAu3p86pAIHonJd7S
q0GKTPSngBwTLUIaxISMRU4YptQKjPG3K/r+DBcSQ4Z3GXOF/eat8fr2aycgT1MK
3NRgFbAyJIhMCcVkdNcXmGz/D0MuzcEazF5f3JaLijnD+e3r86x4aNAe/+AXKGB3
vua5/Y24V77fze2QISQ/Qxsccvs2ilbuX7hM
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:52:05 2025 by rpki-client