Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/3e967bc0-2abf-3ecf-8a86-afd82320bfba.roa
File:                     3e967bc0-2abf-3ecf-8a86-afd82320bfba.roa (raw, json)
Hash identifier:          MN1+KyORwVt+msgIwVqGrW3paqtKXdgNOAs22jXx8Rk=
Subject key identifier:   4E:1A:4F:D9:A8:C2:C7:8E:F2:B0:C8:BD:34:AF:7E:79:A3:5E:0A:03
Certificate issuer:       /CN=cb3c1858-774e-412f-8f35-dbceb0979782
Certificate serial:       010D0C9F4328584AFF21BEE57C8C42D2F1A6BE40
Authority key identifier: B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/3e967bc0-2abf-3ecf-8a86-afd82320bfba.roa
Signing time:             Wed 27 Aug 2025 14:59:53 +0000
ROA not before:           Wed 27 Aug 2025 14:59:53 +0000
ROA not after:            Tue 25 Nov 2025 15:59:53 +0000
asID:                     23118
IP address blocks:        69.36.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:21:be:e5:7c:8c:42:d2:f1:a6:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3c1858-774e-412f-8f35-dbceb0979782
        Validity
            Not Before: Aug 27 14:59:53 2025 GMT
            Not After : Nov 25 15:59:53 2025 GMT
        Subject: CN=32f4339e-1d8b-47ce-b127-9c74376ab8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:6a:1a:49:7a:94:9e:34:1f:6b:09:eb:3b:
                    f7:2e:13:1c:29:9b:8f:01:29:29:3e:b6:40:3d:a8:
                    31:2e:00:8b:2f:57:22:99:66:39:3d:75:ca:72:81:
                    fd:33:a2:71:c4:a4:6c:41:56:51:45:b0:5f:13:f0:
                    c7:12:8f:95:fd:9c:6a:f5:1e:ef:b2:13:8a:12:7a:
                    9b:4a:75:14:d0:d7:0d:7f:47:68:ba:1b:68:c7:d1:
                    13:7c:45:40:87:b2:6a:8b:74:70:77:cd:1b:9b:f2:
                    0f:1b:7c:02:d6:49:59:91:33:9c:70:c6:87:cf:46:
                    ff:c1:d9:43:68:fb:7a:5f:c8:b8:eb:24:bc:0b:22:
                    c5:89:3e:27:ec:2b:b7:0b:9d:ad:87:cf:59:04:e8:
                    ba:83:77:d7:ec:24:1a:8f:b4:37:9f:ae:34:21:72:
                    43:0a:29:36:e9:7f:31:c7:1b:1d:ba:36:bf:b5:37:
                    d9:3c:d3:3a:5f:50:5e:15:91:0b:57:aa:9b:70:e4:
                    61:fc:4c:34:ba:f8:81:7f:a5:2e:cb:d7:09:f6:12:
                    57:4f:aa:92:96:40:f4:17:f9:19:a1:62:e9:81:e5:
                    46:cf:c9:3c:1e:aa:67:b0:1d:da:54:8c:c4:a2:cc:
                    c8:02:9a:f9:bc:4f:96:df:1e:88:16:ee:19:20:57:
                    10:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1A:4F:D9:A8:C2:C7:8E:F2:B0:C8:BD:34:AF:7E:79:A3:5E:0A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/3e967bc0-2abf-3ecf-8a86-afd82320bfba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl

            X509v3 Authority Key Identifier:
                keyid:B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f2:79:c0:82:9b:7b:1a:f9:c5:be:d7:4a:ca:b4:28:35:a5:
         53:39:c7:f8:1a:eb:91:6e:7b:30:d6:04:9b:90:30:b3:f3:08:
         f8:f3:c8:ee:5d:13:57:60:ba:f0:93:7a:06:f1:89:47:ff:61:
         18:20:f2:c4:df:21:2e:74:93:80:86:55:c2:79:37:42:22:a8:
         1a:e0:b2:61:9b:4e:db:ae:eb:ba:8c:77:e8:de:73:d1:ca:94:
         ac:0c:84:ae:30:4f:47:c7:a0:12:2b:28:cb:06:e7:26:20:84:
         a7:0d:c0:dc:58:9f:11:42:be:6d:08:4e:87:de:7f:11:cd:ce:
         57:48:d0:b6:44:64:89:a3:db:61:6d:90:be:2e:d9:84:47:33:
         24:0b:7a:c9:a9:5b:8d:8e:6f:2c:a3:25:14:af:35:51:fd:50:
         fd:80:20:64:aa:8b:1d:34:15:1f:49:a9:8d:60:0d:ed:3b:7c:
         1d:b6:3e:7a:e6:a5:d0:b1:67:49:03:d7:8e:18:54:23:ac:c9:
         e7:1a:be:30:9c:c8:e4:29:a3:e7:77:39:9f:3f:68:bb:da:a9:
         b8:7d:f0:30:43:45:a2:ae:54:1d:78:2e:ca:2b:52:dc:96:53:
         14:81:e9:1f:fb:8a:bf:6e:92:21:74:03:41:df:a8:06:98:bd:
         d1:52:ee:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/Ib7lfIxC0vGmvkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYzE4NTgtNzc0ZS00MTJmLThmMzUtZGJjZWIwOTc5
NzgyMB4XDTI1MDgyNzE0NTk1M1oXDTI1MTEyNTE1NTk1M1owLzEtMCsGA1UEAxMk
MzJmNDMzOWUtMWQ4Yi00N2NlLWIxMjctOWM3NDM3NmFiOGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMhqGkl6lJ40H2sJ6zv3LhMcKZuPASkpPrZA
PagxLgCLL1cimWY5PXXKcoH9M6JxxKRsQVZRRbBfE/DHEo+V/Zxq9R7vshOKEnqb
SnUU0NcNf0douhtox9ETfEVAh7Jqi3Rwd80bm/IPG3wC1klZkTOccMaHz0b/wdlD
aPt6X8i46yS8CyLFiT4n7Cu3C52th89ZBOi6g3fX7CQaj7Q3n640IXJDCik26X8x
xxsduja/tTfZPNM6X1BeFZELV6qbcORh/Ew0uviBf6Uuy9cJ9hJXT6qSlkD0F/kZ
oWLpgeVGz8k8HqpnsB3aVIzEoszIApr5vE+W3x6IFu4ZIFcQFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE4aT9mowseO8rDIvTSvfnmjXgoDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjNj
MTg1OC03NzRlLTQxMmYtOGYzNS1kYmNlYjA5Nzk3ODIvM2U5NjdiYzAtMmFiZi0z
ZWNmLThhODYtYWZkODIzMjBiZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2IzYzE4NTgtNzc0ZS00MTJmLThm
MzUtZGJjZWIwOTc5NzgyL2NiM2MxODU4LTc3NGUtNDEyZi04ZjM1LWRiY2ViMDk3
OTc4Mi5jcmwwHwYDVR0jBBgwFoAUsxchefvHIXUBMemhKCKmwsqNtjwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYjNjMTg1OC03NzRlLTQxMmYtOGYzNS1kYmNl
YjA5Nzk3ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSTYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTyecCCm3sa+cW+10rKtCg1pVM5x/ga65FuezDWBJuQMLPzCPjzyO5d
E1dguvCTegbxiUf/YRgg8sTfIS50k4CGVcJ5N0IiqBrgsmGbTtuu67qMd+jec9HK
lKwMhK4wT0fHoBIrKMsG5yYghKcNwNxYnxFCvm0ITofefxHNzldI0LZEZImj22Ft
kL4u2YRHMyQLesmpW42ObyyjJRSvNVH9UP2AIGSqix00FR9JqY1gDe07fB22Pnrm
pdCxZ0kD144YVCOsyecavjCcyOQpo+d3OZ8/aLvaqbh98DBDRaKuVB14LsorUtyW
UxSB6R/7ir9ukiF0A0HfqAaYvdFS7u4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:24:13 2025 by rpki-client