Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa
File:                     8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa (raw, json)
Hash identifier:          Na9expUng7Gaw8dzJJA1l23fhikQFvDaCtgrfaMwOcU=
Subject key identifier:   E4:04:8A:18:1D:0B:6E:DC:3B:BC:60:1E:D4:4B:78:71:3A:4B:88:B6
Certificate issuer:       /CN=a29a724c-0ef8-416c-bb2c-359a0122375e
Certificate serial:       010D0C9F4328584B004BEE6D4645F77665A9FE80
Authority key identifier: E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     40676
IP address blocks:        206.168.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:ee:6d:46:45:f7:76:65:a9:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29a724c-0ef8-416c-bb2c-359a0122375e
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=0214b450-ed29-4c1b-9f84-c7e32aaf9281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:37:7d:eb:54:9d:94:01:2e:b6:17:27:7c:
                    53:24:74:83:31:55:f9:bf:64:44:d5:84:20:ab:9e:
                    d0:dc:d8:25:ac:f0:00:cc:da:f0:2e:40:c1:a6:e8:
                    fe:a3:de:67:82:d4:20:17:fb:8c:97:de:bb:7f:74:
                    a7:1b:07:72:9a:19:4e:6f:a4:c5:33:8d:bf:48:cf:
                    80:c1:23:3a:9f:a5:b7:3b:9f:a2:88:3f:5e:27:9f:
                    0c:17:10:62:61:15:28:99:5d:3b:09:25:d8:5f:ed:
                    94:9a:31:c4:39:25:28:50:cd:f5:9a:b1:52:96:fa:
                    49:fb:52:b3:0b:4d:15:a2:80:c6:f8:7c:ad:01:5c:
                    58:f6:56:d5:a0:99:18:52:cc:fa:37:8f:eb:c8:77:
                    1b:99:81:ce:bc:49:60:b6:55:b5:38:c3:a2:56:d9:
                    eb:fd:e4:50:22:93:52:b3:2a:8f:a7:f0:29:06:2f:
                    f4:20:96:0e:70:02:1c:c8:ae:d3:dc:4a:fa:df:9d:
                    0d:12:3c:35:05:4f:42:1e:66:46:3b:35:08:60:73:
                    5c:1e:5e:0c:c0:5e:79:f5:91:3a:0b:86:32:9c:42:
                    a1:6d:8d:8d:a6:05:7d:c8:6c:46:77:38:42:c6:a0:
                    ff:7d:6b:de:59:ff:62:14:0b:3d:b3:dc:34:5c:72:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:04:8A:18:1D:0B:6E:DC:3B:BC:60:1E:D4:4B:78:71:3A:4B:88:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.crl

            X509v3 Authority Key Identifier:
                keyid:E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7e:0c:a9:7b:65:d4:a6:f1:28:ef:0f:c3:ee:23:ab:d5:9f:
         5e:9b:74:b5:bd:e5:0c:70:3e:28:d4:48:70:8d:07:3b:ff:cd:
         87:c8:67:bb:7b:aa:ea:90:54:a6:4d:ab:2d:ed:5c:24:97:81:
         d3:80:af:32:61:2c:4a:23:51:27:76:1c:ea:d8:2f:d6:88:f4:
         10:c1:76:12:86:7a:13:1c:c9:a6:b9:c4:66:f9:52:4e:5f:5c:
         d3:80:8e:85:b2:63:a8:10:5b:d1:1f:d4:68:b2:fc:c3:af:92:
         cf:21:31:16:9a:8f:34:fd:a5:f6:c7:6d:f1:20:fe:1f:df:b5:
         2b:c5:e6:e3:1b:b9:44:e5:75:f0:fa:14:1a:2d:25:4f:94:d4:
         97:bf:33:95:57:bf:e9:4b:d3:f8:c5:2c:c3:f1:ff:db:56:c7:
         ef:0f:dd:83:db:16:55:da:ea:0d:3d:36:36:9d:56:4a:2c:31:
         70:b1:c7:72:fd:33:9a:1f:4a:4b:c8:ce:98:7f:c4:08:bd:b1:
         8f:01:f8:2e:fa:5c:d7:a5:90:0e:4d:b5:ed:a1:e3:22:4a:b1:
         24:93:b2:b5:cd:ee:e1:47:55:a0:84:49:ba:e6:57:a7:39:5c:
         28:2d:59:33:38:7e:f5:39:6c:38:04:c0:8f:26:22:11:b9:87:
         46:c3:32:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+5tRkX3dmWp/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTI5YTcyNGMtMGVmOC00MTZjLWJiMmMtMzU5YTAxMjIz
NzVlMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
MDIxNGI0NTAtZWQyOS00YzFiLTlmODQtYzdlMzJhYWY5MjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxE3fetUnZQBLrYXJ3xTJHSDMVX5v2RE1YQg
q57Q3NglrPAAzNrwLkDBpuj+o95ngtQgF/uMl967f3SnGwdymhlOb6TFM42/SM+A
wSM6n6W3O5+iiD9eJ58MFxBiYRUomV07CSXYX+2UmjHEOSUoUM31mrFSlvpJ+1Kz
C00VooDG+HytAVxY9lbVoJkYUsz6N4/ryHcbmYHOvElgtlW1OMOiVtnr/eRQIpNS
syqPp/ApBi/0IJYOcAIcyK7T3Er6350NEjw1BU9CHmZGOzUIYHNcHl4MwF559ZE6
C4YynEKhbY2NpgV9yGxGdzhCxqD/fWveWf9iFAs9s9w0XHIKwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOQEihgdC27cO7xgHtRLeHE6S4i2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjlh
NzI0Yy0wZWY4LTQxNmMtYmIyYy0zNTlhMDEyMjM3NWUvODU4N2E5NDYtNGM5ZS0z
YTRjLTkyZDYtNmQ5ZTQ5MWYyNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTI5YTcyNGMtMGVmOC00MTZjLWJi
MmMtMzU5YTAxMjIzNzVlL2EyOWE3MjRjLTBlZjgtNDE2Yy1iYjJjLTM1OWEwMTIy
Mzc1ZS5jcmwwHwYDVR0jBBgwFoAU4tGxHBySEApJXuagmu0kotxwWLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMjlhNzI0Yy0wZWY4LTQxNmMtYmIyYy0zNTlh
MDEyMjM3NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqj8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADB+DKl7ZdSm8SjvD8PuI6vVn16bdLW95QxwPijUSHCNBzv/zYfIZ7t7
quqQVKZNqy3tXCSXgdOArzJhLEojUSd2HOrYL9aI9BDBdhKGehMcyaa5xGb5Uk5f
XNOAjoWyY6gQW9Ef1Giy/MOvks8hMRaajzT9pfbHbfEg/h/ftSvF5uMbuUTldfD6
FBotJU+U1Je/M5VXv+lL0/jFLMPx/9tWx+8P3YPbFlXa6g09NjadVkosMXCxx3L9
M5ofSkvIzph/xAi9sY8B+C76XNelkA5Nte2h4yJKsSSTsrXN7uFHVaCESbrmV6c5
XCgtWTM4fvU5bDgEwI8mIhG5h0bDMmc=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:44 2025 by rpki-client