Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/f4427f9b-7b4d-3cae-a020-4c5e9dc61681.roa
File:                     f4427f9b-7b4d-3cae-a020-4c5e9dc61681.roa (raw, json)
Hash identifier:          2pbfWiVdqbre+3t5d71P/VsKfTasJjWGuUMsGnCoRvk=
Subject key identifier:   40:C5:43:21:0C:08:6D:C4:19:56:A1:0C:3A:5A:33:C1:B1:B8:3D:57
Certificate issuer:       /CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1
Certificate serial:       010D0C9F4328584B2E5C4C266BAAFEF2D6CD5980
Authority key identifier: 80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/f4427f9b-7b4d-3cae-a020-4c5e9dc61681.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     40676
IP address blocks:        205.236.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:4c:26:6b:aa:fe:f2:d6:cd:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=c6113352-c3bd-46b5-8607-9025ff7de444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:82:74:83:66:50:88:1d:51:fe:a0:04:d0:6d:
                    cb:3f:9e:90:87:1b:b3:29:b6:ab:00:4f:a8:ea:fd:
                    28:9a:8b:d6:7c:5b:e0:88:0a:ea:e7:5b:4f:89:f7:
                    58:1b:12:2d:3d:d1:a0:42:ec:fc:45:54:34:9f:1c:
                    c7:e8:b3:c0:db:dc:9e:f2:f0:70:9b:72:aa:c4:fa:
                    e9:d4:15:f9:c8:8d:4f:3f:91:7d:7d:6c:dd:74:51:
                    b8:2d:a5:5e:07:00:bd:5a:8f:58:86:3e:e5:5b:c5:
                    e5:bf:fd:7b:24:85:b1:f2:d4:f2:5d:1b:50:83:46:
                    ad:2d:d1:4a:6c:04:cb:9c:59:39:18:99:d2:40:e3:
                    67:76:f7:29:b1:ff:50:73:82:95:9a:00:ad:19:f3:
                    7c:8c:6a:dd:f5:64:6a:20:a7:66:66:d0:df:2e:1c:
                    1f:56:26:27:59:87:26:98:a8:4a:10:18:ed:57:78:
                    e0:fd:9e:31:b0:c4:3b:d1:92:03:cf:3f:a8:5e:75:
                    2c:14:6a:8b:c0:68:6f:cc:0b:27:a0:cb:20:7c:38:
                    3f:16:36:95:23:5d:ac:f2:4d:90:62:74:7b:cf:e4:
                    7e:68:df:60:8c:dc:01:ea:e9:8d:0a:93:40:53:d7:
                    88:bc:b1:9e:91:e2:80:42:b3:03:12:99:71:73:93:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:43:21:0C:08:6D:C4:19:56:A1:0C:3A:5A:33:C1:B1:B8:3D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/f4427f9b-7b4d-3cae-a020-4c5e9dc61681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl

            X509v3 Authority Key Identifier:
                keyid:80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:09:37:44:df:67:d4:db:06:2e:cf:05:a4:77:26:02:ae:2c:
         24:5f:3d:1b:4d:de:ba:ce:d9:2d:e8:44:b9:a5:db:2b:d4:d1:
         fa:c1:86:92:b7:4c:98:e1:aa:32:1c:f7:99:ed:30:66:e9:96:
         55:08:3c:75:f6:e4:2f:12:a1:9a:9c:ca:08:eb:fb:1b:3a:41:
         aa:91:7b:15:26:ca:e2:f7:bc:47:1c:2e:3d:f3:c8:e4:31:e2:
         c2:ab:a6:61:21:31:04:81:30:cc:33:4b:a5:28:c8:b1:76:2b:
         29:77:af:cc:b0:cc:41:1b:e9:f6:15:07:c9:6b:91:48:c3:3e:
         9a:e7:39:b2:63:85:c0:00:bb:02:31:af:ac:78:c1:15:e3:72:
         14:6f:0f:15:eb:9c:44:2b:78:74:d8:37:f3:d1:81:76:a5:49:
         f4:95:d7:2f:ca:89:d6:e3:28:ff:0e:aa:ad:6a:d1:bb:38:f9:
         a8:8a:01:6e:90:f8:05:ff:06:27:40:c1:cc:1c:36:d5:be:07:
         70:2f:76:9c:c6:64:99:d8:9e:1e:ad:cf:cc:63:9f:21:d2:32:
         1d:24:70:fe:b8:c2:70:b9:bf:62:17:0f:de:e7:48:4a:a1:68:
         e9:17:ed:2c:ef:cc:ea:a3:a8:d5:cc:8b:70:e9:11:09:30:dd:
         fc:f1:09:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEwma6r+8tbNWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QwMjJlNGQtYTJlYy00ZDE0LTkzNDItYTUwM2VjNjNj
YWMxMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
YzYxMTMzNTItYzNiZC00NmI1LTg2MDctOTAyNWZmN2RlNDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YJ0g2ZQiB1R/qAE0G3LP56QhxuzKbarAE+o
6v0omovWfFvgiArq51tPifdYGxItPdGgQuz8RVQ0nxzH6LPA29ye8vBwm3KqxPrp
1BX5yI1PP5F9fWzddFG4LaVeBwC9Wo9Yhj7lW8Xlv/17JIWx8tTyXRtQg0atLdFK
bATLnFk5GJnSQONndvcpsf9Qc4KVmgCtGfN8jGrd9WRqIKdmZtDfLhwfViYnWYcm
mKhKEBjtV3jg/Z4xsMQ70ZIDzz+oXnUsFGqLwGhvzAsnoMsgfDg/FjaVI12s8k2Q
YnR7z+R+aN9gjNwB6umNCpNAU9eIvLGekeKAQrMDEplxc5NcNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDFQyEMCG3EGVahDDpaM8GxuD1XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZDAy
MmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAzZWM2M2NhYzEvZjQ0MjdmOWItN2I0ZC0z
Y2FlLWEwMjAtNGM1ZTlkYzYxNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2QwMjJlNGQtYTJlYy00ZDE0LTkz
NDItYTUwM2VjNjNjYWMxLzNkMDIyZTRkLWEyZWMtNGQxNC05MzQyLWE1MDNlYzYz
Y2FjMS5jcmwwHwYDVR0jBBgwFoAUgHm9sfFWLm0kPO1+jBcQL6YwK8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zZDAyMmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAz
ZWM2M2NhYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzez2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0JN0TfZ9TbBi7PBaR3JgKuLCRfPRtN3rrO2S3oRLml2yvU0frBhpK3
TJjhqjIc95ntMGbpllUIPHX25C8SoZqcygjr+xs6QaqRexUmyuL3vEccLj3zyOQx
4sKrpmEhMQSBMMwzS6UoyLF2Kyl3r8ywzEEb6fYVB8lrkUjDPprnObJjhcAAuwIx
r6x4wRXjchRvDxXrnEQreHTYN/PRgXalSfSV1y/KidbjKP8Oqq1q0bs4+aiKAW6Q
+AX/BidAwcwcNtW+B3AvdpzGZJnYnh6tz8xjnyHSMh0kcP64wnC5v2IXD97nSEqh
aOkX7SzvzOqjqNXMi3DpEQkw3fzxCRo=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:01 2025 by rpki-client