Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/a423aacd-f3e2-3b98-8564-b312c78391e3.roa
File:                     a423aacd-f3e2-3b98-8564-b312c78391e3.roa (raw, json)
Hash identifier:          XGeWNpW0fF2WyHgSrqEkMFQZITJVkD2ytr4KTk1owXQ=
Subject key identifier:   7A:D7:75:A0:1A:1A:48:25:7D:B9:7E:8F:E7:41:45:69:1D:F9:80:99
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F4328584B2066D6DCAFC0705122DCAE80
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/a423aacd-f3e2-3b98-8564-b312c78391e3.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     26914
IP address blocks:        166.93.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d6:dc:af:c0:70:51:22:dc:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=b0433400-0d9c-4754-9a39-46deae4ed4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:8c:36:f0:df:39:b7:ff:79:60:fc:37:01:
                    14:9f:11:a4:1c:08:72:46:50:4b:5c:5e:03:28:82:
                    3a:09:79:da:fd:42:8c:8c:00:c1:9a:3a:af:aa:dd:
                    53:3e:f4:04:1c:b1:80:d0:6d:cc:c8:9a:4e:66:0c:
                    f2:01:68:ff:fd:48:83:7c:63:b8:b5:bc:64:49:af:
                    dc:3c:9b:04:59:18:02:b8:87:e9:77:44:29:c6:28:
                    6f:0b:ae:2e:aa:ed:59:1e:f9:34:d6:80:46:ea:cd:
                    f3:55:36:85:a1:7a:52:fe:43:47:66:ea:5b:93:47:
                    cd:38:d6:cd:30:6b:dd:21:dc:fc:2f:55:b7:cb:d6:
                    a2:47:1f:50:31:b5:68:40:15:31:69:19:e0:78:37:
                    92:68:30:bb:70:05:e3:fd:e2:c3:6a:e2:7c:db:0a:
                    b6:6b:47:97:6c:87:b4:39:db:33:5a:1b:39:89:6c:
                    fc:28:44:ca:16:d2:19:ef:57:80:94:4e:a2:b3:7c:
                    fb:3c:6a:f5:85:b4:28:3a:bc:a2:1c:bf:99:51:c1:
                    17:7a:2f:f7:32:59:70:bf:d0:ad:40:62:51:38:d6:
                    2e:a2:f9:30:40:a6:c7:88:c2:af:a1:8e:73:55:35:
                    a2:88:cd:62:4d:e7:a8:0e:c7:b5:b7:d3:b5:d8:a1:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D7:75:A0:1A:1A:48:25:7D:B9:7E:8F:E7:41:45:69:1D:F9:80:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/a423aacd-f3e2-3b98-8564-b312c78391e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.93.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:85:42:76:38:f9:8e:0c:ce:ad:a9:16:6f:b9:ce:ae:2b:b5:
         5a:68:02:fd:de:75:d9:db:9a:7a:63:fc:b1:3e:58:17:bb:e9:
         9f:7c:13:ab:d4:cf:2a:91:45:c3:ac:e5:3f:2c:af:7e:7c:f4:
         48:e9:62:49:12:30:c3:29:ec:64:99:f0:4e:fc:fe:e6:84:4f:
         09:0f:6f:f4:53:40:44:8a:3a:67:8c:b8:d3:bd:85:08:75:bb:
         75:04:78:c8:b5:42:82:85:65:58:55:00:ef:c5:36:cd:67:b3:
         e7:4e:d4:d3:a0:94:14:64:ed:a6:b9:05:3e:2f:97:b0:50:a4:
         df:76:9e:95:94:22:9f:39:45:c8:51:9c:79:db:b2:88:b1:c3:
         1d:55:8e:90:aa:af:df:e2:ce:4c:0b:ad:f3:4a:af:cd:9b:6f:
         33:4b:cb:38:3e:ef:f9:0d:f5:82:0f:80:35:e6:5a:a4:80:06:
         3e:4b:0f:b4:06:a8:7d:aa:ed:8c:ef:c7:01:fa:ea:fe:ee:8a:
         60:66:47:73:8f:39:c4:fd:86:c3:56:d2:e1:ad:3c:ac:e6:b2:
         f7:06:7d:e9:22:4a:e9:71:41:68:27:ad:43:27:58:08:c8:c4:
         7b:81:75:8c:d9:e2:d8:c6:69:d5:91:d3:b7:00:62:b3:2d:d8:
         2b:15:6e:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtbcr8BwUSLcroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWM3MDUzYWItMDczNi00M2JiLWJkZmMtMDE2OWFlOTBi
ODBkMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk
YjA0MzM0MDAtMGQ5Yy00NzU0LTlhMzktNDZkZWFlNGVkNGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgaMNvDfObf/eWD8NwEUnxGkHAhyRlBLXF4D
KII6CXna/UKMjADBmjqvqt1TPvQEHLGA0G3MyJpOZgzyAWj//UiDfGO4tbxkSa/c
PJsEWRgCuIfpd0QpxihvC64uqu1ZHvk01oBG6s3zVTaFoXpS/kNHZupbk0fNONbN
MGvdIdz8L1W3y9aiRx9QMbVoQBUxaRngeDeSaDC7cAXj/eLDauJ82wq2a0eXbIe0
OdszWhs5iWz8KETKFtIZ71eAlE6is3z7PGr1hbQoOryiHL+ZUcEXei/3Mllwv9Ct
QGJRONYuovkwQKbHiMKvoY5zVTWiiM1iTeeoDse1t9O12KEuFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHrXdaAaGkglfbl+j+dBRWkd+YCZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lYzcw
NTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5YWU5MGI4MGQvYTQyM2FhY2QtZjNlMi0z
Yjk4LTg1NjQtYjMxMmM3ODM5MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWM3MDUzYWItMDczNi00M2JiLWJk
ZmMtMDE2OWFlOTBiODBkL2VjNzA1M2FiLTA3MzYtNDNiYi1iZGZjLTAxNjlhZTkw
YjgwZC5jcmwwHwYDVR0jBBgwFoAU3pcubt/PvchrC3xOqzpSG2XulSwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lYzcwNTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5
YWU5MGI4MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApl2PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmFQnY4+Y4Mzq2pFm+5zq4rtVpoAv3eddnbmnpj/LE+WBe76Z98E6vU
zyqRRcOs5T8sr3589EjpYkkSMMMp7GSZ8E78/uaETwkPb/RTQESKOmeMuNO9hQh1
u3UEeMi1QoKFZVhVAO/FNs1ns+dO1NOglBRk7aa5BT4vl7BQpN92npWUIp85RchR
nHnbsoixwx1VjpCqr9/izkwLrfNKr82bbzNLyzg+7/kN9YIPgDXmWqSABj5LD7QG
qH2q7YzvxwH66v7uimBmR3OPOcT9hsNW0uGtPKzmsvcGfekiSulxQWgnrUMnWAjI
xHuBdYzZ4tjGadWR07cAYrMt2CsVbh8=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:08 2025 by rpki-client