Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/ce31831d-092c-3dc4-9afc-9b58bfbb092f.roa
File:                     ce31831d-092c-3dc4-9afc-9b58bfbb092f.roa (raw, json)
Hash identifier:          gqTb/RfPyvLqmoku2uqVgpcCY9IsQuApiT1aKnpeBBQ=
Subject key identifier:   C5:7C:46:F9:AF:05:1C:2E:0B:63:F0:4B:93:BB:37:A1:3D:68:0F:F6
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584B1AD18B955A66DDB65B1B8480
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/ce31831d-092c-3dc4-9afc-9b58bfbb092f.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     7992
IP address blocks:        205.196.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:8b:95:5a:66:dd:b6:5b:1b:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=244ed049-2b03-4bb0-a7df-dcdc8f3a3801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:66:29:d2:c7:4d:b8:3e:10:14:51:52:70:b7:
                    42:b7:32:70:ed:dd:74:5d:c3:46:91:aa:17:98:97:
                    f0:2b:78:33:3d:1d:95:5f:cc:86:53:c8:39:b0:a1:
                    66:62:bc:6e:06:b9:cf:ad:ff:b7:b4:1f:ab:d1:47:
                    a2:d4:c4:3a:fa:3d:41:7e:a6:90:f8:1b:50:96:49:
                    48:72:04:e9:d1:b7:cf:14:34:dd:30:2a:4f:4e:0f:
                    7b:b3:af:5a:c3:09:a3:81:9c:10:33:c3:fa:f4:24:
                    d8:93:8e:b1:42:3b:db:fb:c7:3e:8a:6c:50:b0:96:
                    20:9c:bc:61:ba:af:8b:04:74:f2:f0:5d:7d:eb:53:
                    57:a5:c8:b4:3e:2b:59:1f:90:a1:5f:f0:85:01:10:
                    30:60:4d:52:57:a4:59:dc:8c:47:f6:b3:9c:03:d6:
                    a6:67:97:9c:4a:7c:c2:ce:2b:f4:17:37:13:6f:09:
                    b0:f0:71:60:ff:a8:78:a1:e7:c1:79:47:b2:be:22:
                    e9:5c:5b:0a:b6:51:d9:5d:46:05:96:27:97:f1:12:
                    03:ef:f2:82:0d:df:eb:f5:a2:49:d0:85:69:0d:37:
                    f9:11:0f:df:5d:eb:b4:6f:82:7b:68:82:a5:75:b7:
                    b8:de:a1:d2:72:2e:9b:73:fd:2c:12:89:8a:f2:23:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7C:46:F9:AF:05:1C:2E:0B:63:F0:4B:93:BB:37:A1:3D:68:0F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/ce31831d-092c-3dc4-9afc-9b58bfbb092f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:5b:0e:9a:34:f4:0a:09:73:21:b4:82:ab:57:32:8b:9e:
         f4:4c:a2:e5:d0:18:c1:11:b3:a9:96:bd:89:bf:70:da:2e:5b:
         b9:1b:6d:0c:b1:47:cf:8f:ee:00:3a:30:98:63:07:da:15:66:
         ed:53:f5:2c:f4:36:1e:38:50:2f:d1:d8:2c:66:0b:71:27:be:
         84:c1:40:cb:fd:94:c5:f7:5b:a0:cb:8a:8b:09:41:04:b5:15:
         41:ac:4f:99:76:21:45:dc:8c:d2:0a:18:eb:90:69:e7:49:d0:
         53:56:7b:0b:73:23:d1:47:12:d7:9f:91:ce:a1:77:3d:81:97:
         61:f1:16:c4:70:6f:33:bb:96:bc:17:2f:ae:8b:db:f3:4a:d6:
         0c:cf:e7:28:f8:81:d3:1f:7d:51:88:62:7a:cc:36:b7:a8:fc:
         a5:0b:1a:07:ae:69:be:f7:9b:7b:4f:ac:c6:88:5f:54:c5:95:
         c9:77:44:02:f1:4c:5a:de:ec:70:35:40:7a:f4:36:bc:da:8d:
         2e:4e:78:29:5c:ae:51:b8:8c:41:ed:d6:05:51:e3:d0:e2:a5:
         e9:34:a2:a1:39:ed:85:d0:51:60:70:3b:b5:c4:74:b3:aa:01:
         cb:cf:9b:64:0f:31:5f:18:36:50:89:12:0c:09:84:86:88:2e:
         8e:c6:96:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YuVWmbdtlsbhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm
Zjk4MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
MjQ0ZWQwNDktMmIwMy00YmIwLWE3ZGYtZGNkYzhmM2EzODAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Yp0sdNuD4QFFFScLdCtzJw7d10XcNGkaoX
mJfwK3gzPR2VX8yGU8g5sKFmYrxuBrnPrf+3tB+r0Uei1MQ6+j1BfqaQ+BtQlklI
cgTp0bfPFDTdMCpPTg97s69awwmjgZwQM8P69CTYk46xQjvb+8c+imxQsJYgnLxh
uq+LBHTy8F1961NXpci0PitZH5ChX/CFARAwYE1SV6RZ3IxH9rOcA9amZ5ecSnzC
ziv0FzcTbwmw8HFg/6h4oefBeUeyviLpXFsKtlHZXUYFlieX8RID7/KCDd/r9aJJ
0IVpDTf5EQ/fXeu0b4J7aIKldbe43qHSci6bc/0sEomK8iPkywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMV8RvmvBRwuC2PwS5O7N6E9aA/2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy
ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvY2UzMTgzMWQtMDkyYy0z
ZGM0LTlhZmMtOWI1OGJmYmIwOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1
ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3
ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5
OThjN2ZmOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzcQgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuPWw6aNPQKCXMhtIKrVzKLnvRMouXQGMERs6mWvYm/cNouW7kbbQyx
R8+P7gA6MJhjB9oVZu1T9Sz0Nh44UC/R2CxmC3EnvoTBQMv9lMX3W6DLiosJQQS1
FUGsT5l2IUXcjNIKGOuQaedJ0FNWewtzI9FHEtefkc6hdz2Bl2HxFsRwbzO7lrwX
L66L2/NK1gzP5yj4gdMffVGIYnrMNreo/KULGgeuab73m3tPrMaIX1TFlcl3RALx
TFre7HA1QHr0NrzajS5OeClcrlG4jEHt1gVR49Dipek0oqE57YXQUWBwO7XEdLOq
AcvPm2QPMV8YNlCJEgwJhIaILo7Gls4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 14:06:24 2025 by rpki-client