Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa
File:                     31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa (raw, json)
Hash identifier:          sUuhv04huRWbZNfDlIU4WZTqscXaJ/nMxGBMTahLP28=
Subject key identifier:   71:B0:EC:D9:C8:42:D6:E6:D1:18:4B:95:ED:2F:82:77:84:8C:F7:92
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F4328584AFC1C1117E72C7555700B89F0
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     15204
IP address blocks:        75.102.160.0/19 maxlen: 19
                          75.102.160.0/24 maxlen: 24
                          75.102.161.0/24 maxlen: 24
                          75.102.162.0/24 maxlen: 24
                          75.102.163.0/24 maxlen: 24
                          75.102.164.0/24 maxlen: 24
                          75.102.165.0/24 maxlen: 24
                          75.102.166.0/24 maxlen: 24
                          75.102.167.0/24 maxlen: 24
                          75.102.168.0/24 maxlen: 24
                          75.102.169.0/24 maxlen: 24
                          75.102.170.0/24 maxlen: 24
                          75.102.171.0/24 maxlen: 24
                          75.102.172.0/24 maxlen: 24
                          75.102.173.0/24 maxlen: 24
                          75.102.174.0/23 maxlen: 23
                          75.102.174.0/24 maxlen: 24
                          75.102.175.0/24 maxlen: 24
                          75.102.176.0/22 maxlen: 22
                          75.102.176.0/24 maxlen: 24
                          75.102.177.0/24 maxlen: 24
                          75.102.178.0/24 maxlen: 24
                          75.102.179.0/24 maxlen: 24
                          75.102.180.0/22 maxlen: 22
                          75.102.180.0/24 maxlen: 24
                          75.102.181.0/24 maxlen: 24
                          75.102.182.0/24 maxlen: 24
                          75.102.183.0/24 maxlen: 24
                          75.102.184.0/23 maxlen: 23
                          75.102.184.0/24 maxlen: 24
                          75.102.185.0/24 maxlen: 24
                          75.102.186.0/23 maxlen: 23
                          75.102.186.0/24 maxlen: 24
                          75.102.187.0/24 maxlen: 24
                          75.102.188.0/22 maxlen: 22
                          75.102.188.0/24 maxlen: 24
                          75.102.189.0/24 maxlen: 24
                          75.102.190.0/24 maxlen: 24
                          75.102.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:11:17:e7:2c:75:55:70:0b:89:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=7fde1d4b-758e-44c7-9d49-097e0ef8e781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:d6:bd:58:92:e2:e6:f4:31:7c:c1:cf:7a:
                    a9:cd:03:87:b5:d7:3c:0e:d2:7f:40:a4:78:b6:b8:
                    63:e3:9a:44:d6:ca:1c:5a:c2:84:56:6d:c1:29:fb:
                    f1:16:c8:1f:d2:64:1d:ba:5f:07:96:aa:69:89:82:
                    bb:8e:50:95:82:c6:b5:3d:c7:0c:e1:04:a6:ed:cb:
                    64:63:a2:4f:8a:a7:3f:ae:44:7d:1e:c4:48:f4:db:
                    dd:75:30:95:21:b8:7e:fb:17:a2:be:f2:6f:80:03:
                    e3:03:b5:ce:9b:98:b0:83:9c:2b:9a:11:c4:82:25:
                    50:bb:b9:4f:ce:cb:d2:05:fe:97:dc:cf:59:c7:1e:
                    d2:0e:6a:1b:c8:ff:76:0c:01:03:c7:94:38:93:6f:
                    04:5b:a3:ee:b8:a3:38:fc:55:0e:30:f8:6b:ba:60:
                    97:e0:77:89:91:67:3d:68:2f:9f:53:50:d7:7a:60:
                    b5:58:2e:d7:26:87:13:c7:6a:ad:43:4d:81:56:98:
                    51:99:2a:32:69:b5:d4:ee:71:28:43:60:53:b4:10:
                    8a:59:48:08:e7:52:19:ba:64:7c:f9:9f:da:9a:73:
                    4f:0f:07:4a:bd:dd:a7:03:29:7d:22:3a:d6:ee:91:
                    e5:f4:d4:d9:29:e6:f4:f8:7e:ce:31:ba:e7:1e:34:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B0:EC:D9:C8:42:D6:E6:D1:18:4B:95:ED:2F:82:77:84:8C:F7:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:39:a0:7a:2f:6f:41:82:2e:23:e3:11:db:bd:25:b4:b1:aa:
         5c:b3:07:2b:5c:ca:16:06:b8:2b:09:07:de:04:42:05:26:9e:
         17:6a:80:53:d1:aa:75:9e:75:0b:6f:04:7a:49:92:f0:79:9e:
         a6:9f:99:db:68:96:b6:b6:ca:21:bf:b5:77:fa:c9:a7:01:50:
         b2:19:82:ea:ed:5c:32:4c:e8:ed:c8:57:96:37:0a:c2:2e:0a:
         25:eb:4f:72:06:6f:d0:2a:a3:4c:b8:a6:c0:00:7f:bb:70:60:
         44:3b:87:10:b6:92:4b:a3:f2:49:ad:29:64:e4:36:bd:38:94:
         a3:e8:ad:ff:f2:5f:ef:f7:2d:e7:3d:7d:07:3d:0c:dd:a6:76:
         a0:6f:b1:7f:9d:df:f1:8e:b7:41:f6:67:a0:ca:68:9f:9d:6d:
         0d:7e:1a:1c:13:26:4c:73:e9:e1:76:b2:d4:5d:c8:a9:01:0c:
         e6:bc:0b:e5:70:69:90:35:5b:68:d5:a8:6a:88:ed:28:fa:2b:
         5b:f3:d1:ed:55:a5:45:9f:91:8f:f9:32:0e:a1:95:62:77:e2:
         93:4e:a1:7a:4c:6e:46:53:ca:61:65:17:60:83:5b:37:ed:52:
         9e:40:4e:fe:32:ee:94:23:23:4f:b0:0b:a6:c2:05:c8:1b:12:
         48:6d:03:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBEX5yx1VXALifAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4
MDM1MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
N2ZkZTFkNGItNzU4ZS00NGM3LTlkNDktMDk3ZTBlZjhlNzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS3WvViS4ub0MXzBz3qpzQOHtdc8DtJ/QKR4
trhj45pE1socWsKEVm3BKfvxFsgf0mQdul8HlqppiYK7jlCVgsa1PccM4QSm7ctk
Y6JPiqc/rkR9HsRI9NvddTCVIbh++xeivvJvgAPjA7XOm5iwg5wrmhHEgiVQu7lP
zsvSBf6X3M9Zxx7SDmobyP92DAEDx5Q4k28EW6PuuKM4/FUOMPhrumCX4HeJkWc9
aC+fU1DXemC1WC7XJocTx2qtQ02BVphRmSoyabXU7nEoQ2BTtBCKWUgI51IZumR8
+Z/amnNPDwdKvd2nAyl9IjrW7pHl9NTZKeb0+H7OMbrnHjSQkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGw7NnIQtbm0RhLle0vgneEjPeSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj
NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvMzFiNjQ3N2MtN2JmMS0z
YWI3LTljNTktMGNlMzNmMDIyZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz
YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk
ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4
ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS2agMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJw5oHovb0GCLiPjEdu9JbSxqlyzBytcyhYGuCsJB94EQgUmnhdqgFPR
qnWedQtvBHpJkvB5nqafmdtolra2yiG/tXf6yacBULIZgurtXDJM6O3IV5Y3CsIu
CiXrT3IGb9Aqo0y4psAAf7twYEQ7hxC2kkuj8kmtKWTkNr04lKPorf/yX+/3Lec9
fQc9DN2mdqBvsX+d3/GOt0H2Z6DKaJ+dbQ1+GhwTJkxz6eF2stRdyKkBDOa8C+Vw
aZA1W2jVqGqI7Sj6K1vz0e1VpUWfkY/5Mg6hlWJ34pNOoXpMbkZTymFlF2CDWzft
Up5ATv4y7pQjI0+wC6bCBcgbEkhtAyQ=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:40 2025 by rpki-client