Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d8d5192f-d1d7-3948-b69c-113cd296c428.roa
File:                     d8d5192f-d1d7-3948-b69c-113cd296c428.roa (raw, json)
Hash identifier:          6HeeoCHIzQHqo6ierQAngT7EvHcZYbJzmXCjggxlRZI=
Subject key identifier:   F4:C2:FB:99:8A:C0:CE:A6:73:CA:21:A5:90:61:8E:52:EF:94:78:D8
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584B0FA6BD9922BFB575ED4BD580
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d8d5192f-d1d7-3948-b69c-113cd296c428.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     19901
IP address blocks:        208.160.191.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:bd:99:22:bf:b5:75:ed:4b:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=5b2dcccf-fae1-4305-b2f9-39c9b0b2e966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:70:24:87:94:c1:94:b6:f5:58:e9:cc:7a:52:
                    5f:90:17:11:6f:e7:fa:47:3d:43:52:a2:4d:28:90:
                    e4:6d:4b:82:3c:ab:78:6d:9a:27:28:f2:b3:44:6f:
                    27:d1:78:b8:05:e9:6c:24:17:8e:4f:1d:73:43:ff:
                    3e:87:6a:2f:e4:93:68:d5:e9:1b:02:6b:82:c9:98:
                    21:54:62:fe:15:fa:e0:94:e8:b9:9d:2e:a6:e4:9b:
                    fb:5c:a2:6f:e8:60:16:3c:2a:c9:fb:be:31:91:b5:
                    0d:4a:40:56:27:b4:4d:11:7a:39:27:1c:8a:ba:5e:
                    8c:30:49:b5:69:44:34:90:10:57:4b:94:b4:8a:e9:
                    08:6c:b8:b3:7c:5f:11:f6:a3:9c:1f:ed:ed:d2:fa:
                    a3:41:71:98:4c:20:fa:4f:e2:d9:b9:03:c5:8a:61:
                    fd:bb:30:06:34:f8:ef:8f:70:6f:bd:97:2c:8e:19:
                    cc:db:1a:9f:41:d0:1d:8e:c6:7e:f6:5c:7e:8a:14:
                    27:e4:4a:63:fa:ca:94:b5:6e:fe:cc:bd:8a:0b:69:
                    44:78:7f:ff:a8:f2:3c:e3:dc:76:6b:76:d3:51:e8:
                    b2:b5:37:98:e3:de:67:ab:b8:0a:8b:49:19:ea:c3:
                    42:2b:b5:d1:cc:d4:9d:bf:1a:c8:34:68:96:0f:f3:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C2:FB:99:8A:C0:CE:A6:73:CA:21:A5:90:61:8E:52:EF:94:78:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d8d5192f-d1d7-3948-b69c-113cd296c428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.160.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:9d:58:1d:e1:0e:73:50:fd:d6:75:af:fa:d0:5b:83:7b:00:
         b5:44:de:c5:00:36:83:1e:24:95:f1:94:0c:c8:26:e3:01:80:
         a0:40:41:1e:37:fb:fc:17:84:b7:96:42:27:53:47:0d:77:77:
         dc:d5:3c:b4:6d:8f:c5:07:6a:e3:cd:07:ee:68:d4:61:ae:d7:
         05:09:b2:13:61:60:7b:60:eb:94:c3:d2:7c:a0:ac:73:76:8c:
         5a:fa:3e:9c:ec:7d:43:88:27:50:27:3a:98:bd:21:81:70:f0:
         27:88:a4:a7:0a:7b:db:6e:0e:a8:eb:b4:15:51:b4:80:07:0b:
         6c:72:60:f9:6c:26:93:95:0d:40:d3:a4:b0:ce:19:86:59:89:
         b0:4e:1b:ed:e0:8e:4f:42:69:23:ed:d7:c1:7e:5b:fe:91:80:
         5d:de:4a:7f:c7:6b:4a:37:22:8e:ac:27:38:72:48:bb:3c:d0:
         76:7d:29:2d:a9:8b:31:86:99:79:bb:b6:ec:ea:82:29:9d:23:
         5a:63:be:e1:16:26:f6:93:bd:fd:ed:4c:e5:5a:c3:84:8d:03:
         8e:f2:16:be:66:ac:01:be:d0:a9:b7:ad:46:78:97:ac:92:76:
         35:d5:ce:e4:15:e1:55:fc:11:a4:45:66:0e:b4:56:48:37:01:
         f4:7d:36:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpr2ZIr+1de1L1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk
NWIyZGNjY2YtZmFlMS00MzA1LWIyZjktMzljOWIwYjJlOTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXAkh5TBlLb1WOnMelJfkBcRb+f6Rz1DUqJN
KJDkbUuCPKt4bZonKPKzRG8n0Xi4BelsJBeOTx1zQ/8+h2ov5JNo1ekbAmuCyZgh
VGL+FfrglOi5nS6m5Jv7XKJv6GAWPCrJ+74xkbUNSkBWJ7RNEXo5JxyKul6MMEm1
aUQ0kBBXS5S0iukIbLizfF8R9qOcH+3t0vqjQXGYTCD6T+LZuQPFimH9uzAGNPjv
j3BvvZcsjhnM2xqfQdAdjsZ+9lx+ihQn5Epj+sqUtW7+zL2KC2lEeH//qPI849x2
a3bTUeiytTeY495nq7gKi0kZ6sNCK7XRzNSdvxrINGiWD/M6YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTC+5mKwM6mc8ohpZBhjlLvlHjYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvZDhkNTE5MmYtZDFkNy0z
OTQ4LWI2OWMtMTEzY2QyOTZjNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0KC/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmdWB3hDnNQ/dZ1r/rQW4N7ALVE3sUANoMeJJXxlAzIJuMBgKBAQR43
+/wXhLeWQidTRw13d9zVPLRtj8UHauPNB+5o1GGu1wUJshNhYHtg65TD0nygrHN2
jFr6PpzsfUOIJ1AnOpi9IYFw8CeIpKcKe9tuDqjrtBVRtIAHC2xyYPlsJpOVDUDT
pLDOGYZZibBOG+3gjk9CaSPt18F+W/6RgF3eSn/Ha0o3Io6sJzhySLs80HZ9KS2p
izGGmXm7tuzqgimdI1pjvuEWJvaTvf3tTOVaw4SNA47yFr5mrAG+0Km3rUZ4l6yS
djXVzuQV4VX8EaRFZg60Vkg3AfR9NjM=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:59:55 2025 by rpki-client