Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ace27dfb-a3fe-3164-a35b-f6a6323690a5.roa
File:                     ace27dfb-a3fe-3164-a35b-f6a6323690a5.roa (raw, json)
Hash identifier:          S834RoVlMpNFKbxtDw9KT2zKS7bmXO61P6/SVUYRZBo=
Subject key identifier:   1C:F4:B6:B9:79:7F:6B:3C:2B:B4:3A:A3:9A:B1:D6:DD:E2:D0:C4:1D
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584B21CC2E544CEDBFDD1ECF7B40
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ace27dfb-a3fe-3164-a35b-f6a6323690a5.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     12083
IP address blocks:        24.35.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:2e:54:4c:ed:bf:dd:1e:cf:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=dc2e1653-0b69-4fe1-a89c-f65c4ba69750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:7d:a5:4a:c9:7b:df:1c:0e:79:c2:2c:d6:
                    6b:88:dd:9f:f5:25:43:98:2a:84:3e:ff:c0:30:98:
                    57:80:57:f0:2a:d1:f5:74:64:cd:7b:63:58:09:5f:
                    25:65:55:07:5f:07:88:2b:96:94:ab:47:0d:64:3d:
                    a6:b0:47:ee:af:a9:ca:c7:19:d3:18:4b:8e:36:61:
                    6e:1c:a5:94:82:da:ea:c3:39:1b:47:be:02:1b:01:
                    55:38:57:ff:0c:f3:ca:0c:44:01:94:98:32:13:86:
                    98:8c:d6:69:d8:72:d7:a0:ed:dd:06:f1:5e:b6:38:
                    d3:e0:e9:fe:74:8c:68:e5:68:33:f2:fd:b2:2f:57:
                    ca:64:d4:de:6f:50:f0:68:3b:12:8a:6b:d3:77:d6:
                    60:4f:7d:5b:d2:73:26:8b:ef:cf:7b:09:dd:44:6e:
                    b8:fc:66:46:44:23:ed:b1:3d:d8:d9:32:6e:34:8f:
                    8a:f4:97:71:70:82:da:b6:4f:83:2f:82:82:bf:30:
                    93:78:56:02:72:09:35:ee:3d:a8:4c:98:30:dc:11:
                    43:a1:e0:4c:6e:fb:42:86:3f:f9:44:68:a0:9b:43:
                    0f:c8:27:31:05:6a:8b:57:22:7d:dd:2d:71:f4:dc:
                    e1:b7:79:8c:6e:e2:2f:36:20:48:b4:bc:f1:20:f6:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F4:B6:B9:79:7F:6B:3C:2B:B4:3A:A3:9A:B1:D6:DD:E2:D0:C4:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ace27dfb-a3fe-3164-a35b-f6a6323690a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.35.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b0:7c:7c:96:b1:d8:a6:2b:52:a3:80:c9:0f:1d:65:7e:69:
         41:6f:62:b4:31:8d:0c:22:cd:dc:8a:b9:46:68:58:b6:16:b2:
         f5:2f:a4:69:5e:52:39:4e:7d:46:a2:0a:3f:e2:77:7a:4e:15:
         56:b9:99:da:95:76:ef:2c:e4:10:29:58:f3:04:b4:e1:c9:23:
         94:ad:73:21:53:3b:1c:f3:9d:c4:54:58:0f:0c:5f:71:99:93:
         ab:26:85:d3:c6:b8:24:a3:68:ed:f2:20:b8:53:00:5f:3e:69:
         a3:fe:c2:1c:4e:aa:f1:98:0e:73:04:f9:4b:ad:3e:75:04:4f:
         31:dc:4a:fb:da:a5:c4:19:13:67:08:a8:97:aa:21:32:32:88:
         56:92:8e:e3:d7:20:c9:26:1f:66:68:bd:8a:37:92:08:5e:be:
         23:4b:f1:de:c2:04:83:ed:46:ff:35:f6:17:a0:52:e3:99:64:
         9f:d3:5e:30:c1:24:69:e1:d5:e1:27:dc:d6:7f:4a:57:07:7f:
         95:89:7f:2c:cd:8e:7b:44:79:5f:28:ae:43:31:82:35:90:87:
         00:65:6b:bf:33:c2:f5:54:31:6e:96:12:67:ab:f5:c0:5f:46:
         7b:f8:46:4d:74:62:2c:cb:f5:11:05:1f:f4:b1:36:ca:1c:40:
         de:23:05:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzC5UTO2/3R7Pe0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
ZGMyZTE2NTMtMGI2OS00ZmUxLWE4OWMtZjY1YzRiYTY5NzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYx9pUrJe98cDnnCLNZriN2f9SVDmCqEPv/A
MJhXgFfwKtH1dGTNe2NYCV8lZVUHXweIK5aUq0cNZD2msEfur6nKxxnTGEuONmFu
HKWUgtrqwzkbR74CGwFVOFf/DPPKDEQBlJgyE4aYjNZp2HLXoO3dBvFetjjT4On+
dIxo5Wgz8v2yL1fKZNTeb1DwaDsSimvTd9ZgT31b0nMmi+/PewndRG64/GZGRCPt
sT3Y2TJuNI+K9JdxcILatk+DL4KCvzCTeFYCcgk17j2oTJgw3BFDoeBMbvtChj/5
RGigm0MPyCcxBWqLVyJ93S1x9Nzht3mMbuIvNiBItLzxIPZpRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBz0trl5f2s8K7Q6o5qx1t3i0MQdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYWNlMjdkZmItYTNmZS0z
MTY0LWEzNWItZjZhNjMyMzY5MGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGCMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuwfHyWsdimK1KjgMkPHWV+aUFvYrQxjQwizdyKuUZoWLYWsvUvpGle
UjlOfUaiCj/id3pOFVa5mdqVdu8s5BApWPMEtOHJI5StcyFTOxzzncRUWA8MX3GZ
k6smhdPGuCSjaO3yILhTAF8+aaP+whxOqvGYDnME+UutPnUETzHcSvvapcQZE2cI
qJeqITIyiFaSjuPXIMkmH2ZovYo3kgheviNL8d7CBIPtRv819hegUuOZZJ/TXjDB
JGnh1eEn3NZ/SlcHf5WJfyzNjntEeV8orkMxgjWQhwBla78zwvVUMW6WEmer9cBf
Rnv4Rk10YizL9REFH/SxNsocQN4jBXE=
-----END CERTIFICATE-----
Generated at Sat Oct 11 16:00:11 2025 by rpki-client