Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ecd6fa4c-5337-37ae-bac2-daf19bf676a1.roa
File:                     ecd6fa4c-5337-37ae-bac2-daf19bf676a1.roa (raw, json)
Hash identifier:          yspjWfooKm42oMn2T7nRXMZR0P2pCBeDUvNmCzSVE2c=
Subject key identifier:   E0:DE:8B:1D:93:8B:DB:D6:38:C6:99:5B:F9:F8:15:51:34:A2:82:E8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B328C6331A298EC3B69BE9100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ecd6fa4c-5337-37ae-bac2-daf19bf676a1.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     11404
IP address blocks:        142.111.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:63:31:a2:98:ec:3b:69:be:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=0e19b8ac-f44a-49d7-b961-33be0bbe685d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:76:dd:58:32:0e:1e:87:63:7c:96:a2:3a:
                    f1:d6:c9:17:37:cf:b4:1d:d3:b2:b4:58:0c:22:a4:
                    b1:12:52:f4:6b:b1:78:a5:58:af:1e:30:fe:24:87:
                    fc:95:74:85:e7:5c:91:13:08:83:07:ea:d5:96:4b:
                    16:95:d3:9b:fa:07:7b:2e:b4:3d:31:26:ed:03:fa:
                    4e:f5:4c:63:46:53:a1:1a:1b:1f:08:fa:af:4c:3f:
                    7c:a4:16:d8:7c:15:42:3c:77:75:0f:af:cd:e4:2b:
                    6b:c0:57:8d:82:df:c9:c8:42:91:dc:5c:26:f3:5f:
                    d2:36:60:e3:69:13:b5:81:ee:e6:a2:7b:31:c9:0a:
                    88:46:e9:f4:85:ba:96:62:86:8e:81:92:f0:65:52:
                    28:b6:a2:2b:a8:8b:9f:b9:bd:55:db:06:95:ff:b2:
                    1b:63:41:66:47:49:da:cc:4f:89:2a:81:c5:b4:7f:
                    f8:98:21:62:9c:9e:48:9f:89:97:8f:7d:bb:b7:20:
                    54:58:d4:ef:c4:3f:56:00:a4:d0:dc:2a:c3:5d:47:
                    d0:f5:0a:50:16:bb:48:58:78:b0:aa:8f:63:d0:07:
                    9b:17:71:87:c6:b3:cb:5a:42:26:58:93:57:a9:e0:
                    d9:ba:5a:51:5f:36:23:16:d1:84:b4:40:34:2a:3a:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DE:8B:1D:93:8B:DB:D6:38:C6:99:5B:F9:F8:15:51:34:A2:82:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ecd6fa4c-5337-37ae-bac2-daf19bf676a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:5f:50:8d:60:06:35:fc:bf:01:8b:e5:5e:cc:17:03:ff:
         cb:e9:94:9d:fe:16:29:66:b8:6a:74:0c:ca:69:d0:16:17:65:
         d1:c4:73:85:63:15:cf:0d:6a:ae:af:ed:35:05:7d:fd:88:4a:
         00:02:3a:87:ab:7a:77:b9:5a:5d:e3:41:48:2a:76:81:e1:d9:
         1b:66:ec:53:ec:c8:76:87:fa:a9:1c:43:ee:20:9d:1d:dd:7b:
         2f:63:7c:fc:b2:66:05:e9:e0:a2:8d:b0:cf:0a:06:ba:14:4d:
         63:54:10:e7:4d:2c:ab:84:bc:b0:4c:30:f5:21:63:cf:1d:de:
         fe:df:c9:d5:a8:f2:18:61:f1:0c:0c:02:f2:0a:df:a3:d5:c5:
         19:2e:0b:40:5f:49:4c:a4:41:3f:df:07:e0:2c:c1:f5:a4:d4:
         d4:e0:04:9f:47:14:55:79:49:ba:27:09:26:91:f0:e9:a3:a3:
         43:7e:27:0a:bc:a6:0e:78:ed:c2:5b:65:38:20:eb:cb:60:5e:
         20:b2:2b:bb:4b:32:ac:b7:46:41:2a:24:27:12:4a:1e:f8:aa:
         6e:7c:43:17:61:69:5f:3d:16:0d:a3:bb:ba:c2:11:be:48:e9:
         92:09:52:13:06:ae:74:b4:18:a4:de:9c:60:24:bd:45:c5:3c:
         6c:0d:95:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGMxopjsO2m+kQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
MGUxOWI4YWMtZjQ0YS00OWQ3LWI5NjEtMzNiZTBiYmU2ODVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFx23VgyDh6HY3yWojrx1skXN8+0HdOytFgM
IqSxElL0a7F4pVivHjD+JIf8lXSF51yREwiDB+rVlksWldOb+gd7LrQ9MSbtA/pO
9UxjRlOhGhsfCPqvTD98pBbYfBVCPHd1D6/N5CtrwFeNgt/JyEKR3Fwm81/SNmDj
aRO1ge7monsxyQqIRun0hbqWYoaOgZLwZVIotqIrqIufub1V2waV/7IbY0FmR0na
zE+JKoHFtH/4mCFinJ5In4mXj327tyBUWNTvxD9WAKTQ3CrDXUfQ9QpQFrtIWHiw
qo9j0AebF3GHxrPLWkImWJNXqeDZulpRXzYjFtGEtEA0KjptNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODeix2Ti9vWOMaZW/n4FVE0ooLoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWNkNmZhNGMtNTMzNy0z
N2FlLWJhYzItZGFmMTliZjY3NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHDQX1CNYAY1/L8Bi+VezBcD/8vplJ3+FilmuGp0DMpp0BYXZdHEc4Vj
Fc8Naq6v7TUFff2ISgACOoerene5Wl3jQUgqdoHh2Rtm7FPsyHaH+qkcQ+4gnR3d
ey9jfPyyZgXp4KKNsM8KBroUTWNUEOdNLKuEvLBMMPUhY88d3v7fydWo8hhh8QwM
AvIK36PVxRkuC0BfSUykQT/fB+AswfWk1NTgBJ9HFFV5SbonCSaR8Omjo0N+Jwq8
pg547cJbZTgg68tgXiCyK7tLMqy3RkEqJCcSSh74qm58QxdhaV89Fg2ju7rCEb5I
6ZIJUhMGrnS0GKTenGAkvUXFPGwNlX4=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:46:40 2025 by rpki-client