Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e293468d-cdac-3962-8d4c-0e8fb1431a70.roa
File:                     e293468d-cdac-3962-8d4c-0e8fb1431a70.roa (raw, json)
Hash identifier:          XFWTLKMA5nIfaII0O1yd/iDOeCdY5KAZPaUA/aJG/W8=
Subject key identifier:   03:0A:63:8E:86:DC:C1:00:60:98:30:56:8A:EF:31:3F:75:1D:46:9D
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584B758C9931DCA49D979BB2AF00
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e293468d-cdac-3962-8d4c-0e8fb1431a70.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     397422
IP address blocks:        67.59.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:99:31:dc:a4:9d:97:9b:b2:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=66a1b4dd-5ea4-4084-955a-ee5c4fce0789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:b2:3e:1b:3a:e7:63:09:32:d6:6d:f6:88:
                    29:e8:34:bb:09:8e:bc:14:e8:fa:5d:5c:e2:92:e4:
                    e5:b4:06:04:f8:12:5d:67:5e:19:09:99:25:3e:59:
                    7d:19:45:7b:91:7a:2d:43:3a:d9:72:23:af:ee:4b:
                    15:a0:85:73:9d:1d:e5:e4:4d:ab:6f:8b:96:3e:c2:
                    e3:80:0b:51:f3:7f:b7:40:fc:06:83:1d:0e:cf:29:
                    51:8a:6a:c7:ff:2f:4b:2e:d9:95:8f:ad:3d:e8:f8:
                    e6:31:1c:11:b5:99:3c:39:d0:d9:5f:c6:a3:a1:9e:
                    79:8c:ce:05:0f:bb:18:fe:a9:a7:83:dd:db:b2:59:
                    02:7c:06:3c:ba:87:be:ce:40:38:2d:4b:79:0e:e5:
                    30:71:59:d6:49:d6:95:e6:d0:a4:33:fe:5e:b8:a6:
                    e8:2b:40:59:10:06:0b:5c:56:e8:99:c2:35:69:0a:
                    25:22:47:18:e2:3e:40:69:95:8d:41:6b:18:44:c9:
                    4b:c1:b2:8b:86:23:78:c0:6a:50:b3:43:ee:f8:86:
                    28:b4:f0:8d:fe:97:85:95:cc:27:52:ca:c0:cf:04:
                    e6:68:a9:93:83:8a:c8:b8:1d:c9:a2:f9:8c:27:33:
                    ba:a3:66:fd:74:72:10:1d:99:64:c9:73:24:5b:e6:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0A:63:8E:86:DC:C1:00:60:98:30:56:8A:EF:31:3F:75:1D:46:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e293468d-cdac-3962-8d4c-0e8fb1431a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:95:f3:ca:f1:d9:07:37:47:e1:05:be:c2:da:d1:62:4e:43:
         3d:5a:72:87:e3:95:63:7d:34:60:d3:fa:19:be:97:a9:b4:71:
         7b:b4:15:90:2e:65:c4:82:f1:ea:d8:5a:0f:d7:c7:58:a8:3c:
         da:9d:25:0b:f1:67:ec:88:ad:17:0b:53:c3:9a:13:17:02:19:
         e2:83:50:9d:b8:f5:d4:80:83:24:61:c4:1b:20:6f:72:dd:51:
         8f:d6:9d:62:a2:13:5a:ee:0f:00:e9:06:5e:64:ba:da:4d:81:
         08:33:b1:cc:06:e6:30:13:a6:a8:f5:c1:64:de:87:69:98:d1:
         6e:e4:99:ef:43:8e:b0:38:83:24:44:32:b4:51:17:23:f4:6e:
         1b:a5:8d:b0:aa:58:4c:a0:55:19:41:63:24:94:95:7b:a8:79:
         01:3b:dc:3e:68:c5:a2:c2:93:ac:f4:e2:d4:2c:5c:57:84:8b:
         e3:ea:52:7a:79:42:3d:10:f5:81:06:90:29:5d:46:4a:b4:32:
         a1:7f:c8:a3:c2:34:be:25:c2:1a:8f:25:b0:8d:98:f9:96:eb:
         89:03:3d:17:8c:64:b3:ae:00:9c:fa:1a:a3:ce:93:44:e6:88:
         4c:10:39:c3:c3:ba:c0:ef:bc:9f:d7:94:80:63:a6:e8:08:db:
         a1:c7:97:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJkx3KSdl5uyrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz
ZmY0MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk
NjZhMWI0ZGQtNWVhNC00MDg0LTk1NWEtZWU1YzRmY2UwNzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPWyPhs652MJMtZt9ogp6DS7CY68FOj6XVzi
kuTltAYE+BJdZ14ZCZklPll9GUV7kXotQzrZciOv7ksVoIVznR3l5E2rb4uWPsLj
gAtR83+3QPwGgx0OzylRimrH/y9LLtmVj6096PjmMRwRtZk8OdDZX8ajoZ55jM4F
D7sY/qmng93bslkCfAY8uoe+zkA4LUt5DuUwcVnWSdaV5tCkM/5euKboK0BZEAYL
XFbomcI1aQolIkcY4j5AaZWNQWsYRMlLwbKLhiN4wGpQs0Pu+IYotPCN/peFlcwn
UsrAzwTmaKmTg4rIuB3JovmMJzO6o2b9dHIQHZlkyXMkW+ZSLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMKY46G3MEAYJgwVorvMT91HUadMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3
MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvZTI5MzQ2OGQtY2RhYy0z
OTYyLThkNGMtMGU4ZmIxNDMxYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl
ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl
M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx
MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQztTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWV88rx2Qc3R+EFvsLa0WJOQz1acofjlWN9NGDT+hm+l6m0cXu0FZAu
ZcSC8erYWg/Xx1ioPNqdJQvxZ+yIrRcLU8OaExcCGeKDUJ249dSAgyRhxBsgb3Ld
UY/WnWKiE1ruDwDpBl5kutpNgQgzscwG5jATpqj1wWTeh2mY0W7kme9DjrA4gyRE
MrRRFyP0bhuljbCqWEygVRlBYySUlXuoeQE73D5oxaLCk6z04tQsXFeEi+PqUnp5
Qj0Q9YEGkCldRkq0MqF/yKPCNL4lwhqPJbCNmPmW64kDPReMZLOuAJz6GqPOk0Tm
iEwQOcPDusDvvJ/XlIBjpugI26HHl6k=
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:50:02 2025 by rpki-client