Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/65b7c6e4-0bb3-3236-a054-02b4ed12b9d5.roa
File:                     65b7c6e4-0bb3-3236-a054-02b4ed12b9d5.roa (raw, json)
Hash identifier:          dKTTd4+AQzXGspe1XKvStAskkh3pIaHTMDBJViiy9qE=
Subject key identifier:   77:8F:7F:D0:D2:9B:F3:AA:0A:DF:1E:3B:23:7E:ED:1D:0D:33:2E:75
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F4328584B1AD184C22A8E651852F1CB80
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/65b7c6e4-0bb3-3236-a054-02b4ed12b9d5.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        198.187.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:84:c2:2a:8e:65:18:52:f1:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=266a5469-a92f-4b1b-98bb-e6a2d03e4875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:06:a3:2d:55:e9:21:c2:f3:5e:3f:71:2d:
                    3d:03:9f:7f:58:3f:c4:e2:11:cc:92:29:38:fb:b1:
                    1b:5d:be:1d:3d:15:08:52:92:d6:14:17:bd:43:91:
                    9d:32:96:03:53:01:7a:49:a6:a9:88:a7:35:86:a6:
                    8c:5a:28:19:88:85:36:76:3b:f8:38:d8:3f:7a:84:
                    3b:70:ec:f3:a3:bb:23:de:5b:fb:e6:20:db:1d:cc:
                    4d:34:f0:80:fc:38:b5:b1:e3:b8:8f:29:a2:88:9e:
                    fc:27:c0:0e:c1:5b:3c:78:1f:eb:17:cc:ef:3d:e5:
                    9a:21:6f:dd:22:9f:4e:5e:33:12:2b:4b:9b:f6:85:
                    8c:fe:29:7b:b6:5a:fc:eb:a0:ae:34:d5:a9:02:75:
                    b9:f1:98:38:b8:cf:d8:61:78:ae:2a:b6:0d:f8:92:
                    5c:dc:e2:32:26:47:03:b2:da:a4:c3:b4:fc:e8:44:
                    94:ee:f6:72:ef:08:04:52:92:ec:2c:1b:6d:d4:ee:
                    53:40:95:f0:b7:42:5f:63:c4:4e:84:62:4b:5c:33:
                    00:1f:56:6c:0e:9e:35:22:dc:fe:f8:b0:71:de:b9:
                    22:7c:2d:8f:65:56:1b:61:2f:03:ad:d7:60:46:6a:
                    ae:b9:8a:c2:8e:21:6c:3c:fb:14:9b:c2:ce:e4:54:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8F:7F:D0:D2:9B:F3:AA:0A:DF:1E:3B:23:7E:ED:1D:0D:33:2E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/65b7c6e4-0bb3-3236-a054-02b4ed12b9d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f1:20:3d:ce:4f:cc:6b:8e:24:12:a5:e1:44:03:43:ff:15:
         16:ff:ec:b2:35:a1:03:16:ec:5f:9f:58:3e:2e:dc:54:61:90:
         b5:7f:ce:30:83:8b:16:1c:09:85:c4:e8:1e:3c:59:0d:74:33:
         2a:8f:57:4c:49:3c:76:d3:b9:7e:56:67:c4:5b:f3:a6:03:23:
         5c:ce:93:03:21:ce:87:62:d1:ca:1c:b5:9e:60:91:6f:e6:48:
         54:6d:2a:1d:ec:bf:9e:d4:c4:4a:09:63:26:9b:e3:64:f1:61:
         ac:54:d0:3a:39:97:b2:5a:72:bf:1c:83:c2:6d:dc:8f:1a:61:
         61:cf:f3:00:4f:c7:3c:85:8c:6f:68:e1:21:26:e6:37:99:6f:
         17:9b:9e:d4:f0:73:41:d6:0d:20:19:18:d1:ea:47:3d:8a:38:
         b6:b6:4e:d0:e5:ae:3f:fd:74:af:51:bb:f2:0b:a3:67:a1:56:
         5e:2b:9e:e0:fc:1e:e9:2f:a2:1b:85:86:88:9d:65:e8:1a:68:
         9a:9e:92:f8:6f:8f:b5:aa:43:6c:1d:ed:ae:16:11:59:4a:50:
         fb:1e:98:08:37:8b:2c:77:9f:62:62:a4:85:d8:1d:67:59:39:
         85:9e:e6:10:42:d5:d4:4d:dd:19:94:0d:2f:71:8b:46:25:6f:
         6f:f1:af:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YTCKo5lGFLxy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1ZDUzMGUtMDU4Yy00YWNkLWJlYjgtMDFhOGQwZmY0
MWViMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
MjY2YTU0NjktYTkyZi00YjFiLTk4YmItZTZhMmQwM2U0ODc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqMGoy1V6SHC814/cS09A59/WD/E4hHMkik4
+7EbXb4dPRUIUpLWFBe9Q5GdMpYDUwF6SaapiKc1hqaMWigZiIU2djv4ONg/eoQ7
cOzzo7sj3lv75iDbHcxNNPCA/Di1seO4jymiiJ78J8AOwVs8eB/rF8zvPeWaIW/d
Ip9OXjMSK0ub9oWM/il7tlr866CuNNWpAnW58Zg4uM/YYXiuKrYN+JJc3OIyJkcD
stqkw7T86ESU7vZy7wgEUpLsLBtt1O5TQJXwt0JfY8ROhGJLXDMAH1ZsDp41Itz+
+LBx3rkifC2PZVYbYS8DrddgRmquuYrCjiFsPPsUm8LO5FTN3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHePf9DSm/OqCt8eOyN+7R0NMy51MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MDVk
NTMwZS0wNThjLTRhY2QtYmViOC0wMWE4ZDBmZjQxZWIvNjViN2M2ZTQtMGJiMy0z
MjM2LWEwNTQtMDJiNGVkMTJiOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTA1ZDUzMGUtMDU4Yy00YWNkLWJl
YjgtMDFhOGQwZmY0MWViLzkwNWQ1MzBlLTA1OGMtNGFjZC1iZWI4LTAxYThkMGZm
NDFlYi5jcmwwHwYDVR0jBBgwFoAUrtmkdO5svJwRfW497MACbTVIj9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MDVkNTMwZS0wNThjLTRhY2QtYmViOC0wMWE4
ZDBmZjQxZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrvfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/xID3OT8xrjiQSpeFEA0P/FRb/7LI1oQMW7F+fWD4u3FRhkLV/zjCD
ixYcCYXE6B48WQ10MyqPV0xJPHbTuX5WZ8Rb86YDI1zOkwMhzodi0coctZ5gkW/m
SFRtKh3sv57UxEoJYyab42TxYaxU0Do5l7Jacr8cg8Jt3I8aYWHP8wBPxzyFjG9o
4SEm5jeZbxebntTwc0HWDSAZGNHqRz2KOLa2TtDlrj/9dK9Ru/ILo2ehVl4rnuD8
HukvohuFhoidZegaaJqekvhvj7WqQ2wd7a4WEVlKUPsemAg3iyx3n2JipIXYHWdZ
OYWe5hBC1dRN3RmUDS9xi0Ylb2/xr2U=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:30:41 2025 by rpki-client