Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/1b562222-fd8e-31cf-97d3-15363f849741.roa
File:                     1b562222-fd8e-31cf-97d3-15363f849741.roa (raw, json)
Hash identifier:          36qxr/Qw2wUMR4K0Ya3uIfWKzdR+I8NBtD5LdbPdNps=
Subject key identifier:   23:F9:74:28:30:A3:4D:E9:30:15:77:2F:75:EF:E2:B0:42:6C:56:A4
Certificate issuer:       /CN=d51683a9-b5b7-4347-877e-9bc1487de10d
Certificate serial:       010D0C9F4328584B44B1B86E2ACF82AB87100D00
Authority key identifier: 51:AA:E5:91:FE:0F:F0:77:E6:E1:74:DA:BF:FB:13:24:75:A0:93:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/1b562222-fd8e-31cf-97d3-15363f849741.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     21925
IP address blocks:        104.245.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/d51683a9-b5b7-4347-877e-9bc1487de10d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/d51683a9-b5b7-4347-877e-9bc1487de10d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:b8:6e:2a:cf:82:ab:87:10:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51683a9-b5b7-4347-877e-9bc1487de10d
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=a4fdf6ff-9eda-49fe-8774-989152f137ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:89:be:93:b2:d0:05:23:b1:1f:90:24:a6:
                    24:98:2f:e2:49:ad:fb:ca:e2:6f:8b:2b:c2:f2:ad:
                    a2:48:4c:db:e3:b2:3e:25:53:40:59:7c:56:6f:37:
                    b1:04:af:4e:40:aa:c0:a1:1d:c8:ad:4a:12:70:83:
                    93:30:08:b3:1e:6b:b1:fb:74:a0:6c:67:c0:8d:e8:
                    02:e1:a0:b2:39:6c:77:66:2c:e8:05:ae:56:83:0b:
                    eb:8b:f9:62:60:d7:24:01:d8:1f:ca:3a:69:72:dd:
                    22:fc:d0:d2:7e:74:b3:31:c2:3a:3f:c5:b1:7a:ed:
                    bf:b8:77:c3:e0:f8:f9:07:b1:6a:bf:eb:9c:7a:86:
                    30:63:aa:2a:82:e3:40:af:ed:4d:28:15:ef:d0:4e:
                    e2:5d:8f:6e:7f:0a:47:e1:b0:cf:e4:6b:3c:b3:80:
                    fe:d5:d8:c3:bd:3b:0a:60:07:68:0a:d3:29:56:47:
                    01:97:76:26:86:7d:2e:b9:b9:66:24:f2:13:09:2b:
                    d7:e7:c8:ca:5e:c3:52:b1:d2:a4:10:ad:18:3c:2c:
                    11:d8:db:17:29:fc:af:d6:60:ec:75:b6:c9:68:22:
                    cf:1f:23:b1:68:c6:f1:10:57:06:cf:5b:d1:79:e9:
                    b7:4f:20:a4:a7:07:ee:07:06:af:a7:0d:38:a3:58:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F9:74:28:30:A3:4D:E9:30:15:77:2F:75:EF:E2:B0:42:6C:56:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/1b562222-fd8e-31cf-97d3-15363f849741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/d51683a9-b5b7-4347-877e-9bc1487de10d.crl

            X509v3 Authority Key Identifier:
                keyid:51:AA:E5:91:FE:0F:F0:77:E6:E1:74:DA:BF:FB:13:24:75:A0:93:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7c:cc:a2:47:96:5b:11:e9:03:0f:87:76:87:78:2f:5b:86:
         6c:2d:a6:87:94:95:eb:d9:ab:ad:5d:cf:d0:2e:18:46:eb:78:
         d9:6f:18:93:bb:89:ff:37:5d:66:00:70:27:dd:da:e2:ca:a0:
         74:d8:ab:5a:41:a2:d4:6e:e0:26:b1:58:7d:f1:33:d2:e4:bb:
         1a:09:db:76:86:16:87:49:70:0e:23:0d:94:cf:a6:08:71:8e:
         23:9a:b9:3f:33:4d:51:d3:9e:d4:28:ed:56:75:6f:00:4f:1c:
         b4:16:30:a8:3d:3d:ea:1a:50:1c:43:8e:d3:6d:5d:be:85:45:
         66:13:4f:f3:29:1b:60:3e:3c:42:0c:45:a4:e3:8f:13:d3:0c:
         03:20:88:27:ec:71:38:ba:b9:48:87:77:86:ec:c8:43:0b:96:
         9a:c5:69:36:a0:82:6a:19:5f:b9:ae:0f:5e:6f:81:b2:a6:5b:
         62:a6:7b:ce:be:80:87:22:7d:96:f6:4b:60:4c:2b:ca:80:39:
         fb:25:91:62:7e:c9:b2:61:29:05:af:70:c5:4d:82:c3:cd:3a:
         c6:c6:f4:f4:0f:57:ac:57:29:ff:ef:65:d8:e4:3c:08:d9:fc:
         20:b7:94:5c:a0:78:dc:82:42:87:91:a0:e6:b0:87:1e:f0:51:
         55:3b:1f:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbhuKs+Cq4cQDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDUxNjgzYTktYjViNy00MzQ3LTg3N2UtOWJjMTQ4N2Rl
MTBkMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk
YTRmZGY2ZmYtOWVkYS00OWZlLTg3NzQtOTg5MTUyZjEzN2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NWJvpOy0AUjsR+QJKYkmC/iSa37yuJviyvC
8q2iSEzb47I+JVNAWXxWbzexBK9OQKrAoR3IrUoScIOTMAizHmux+3SgbGfAjegC
4aCyOWx3ZizoBa5Wgwvri/liYNckAdgfyjppct0i/NDSfnSzMcI6P8Wxeu2/uHfD
4Pj5B7Fqv+uceoYwY6oqguNAr+1NKBXv0E7iXY9ufwpH4bDP5Gs8s4D+1djDvTsK
YAdoCtMpVkcBl3Ymhn0uublmJPITCSvX58jKXsNSsdKkEK0YPCwR2NsXKfyv1mDs
dbbJaCLPHyOxaMbxEFcGz1vReem3TyCkpwfuBwavpw04o1gFcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCP5dCgwo03pMBV3L3Xv4rBCbFakMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTE2
ODNhOS1iNWI3LTQzNDctODc3ZS05YmMxNDg3ZGUxMGQvMWI1NjIyMjItZmQ4ZS0z
MWNmLTk3ZDMtMTUzNjNmODQ5NzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDUxNjgzYTktYjViNy00MzQ3LTg3
N2UtOWJjMTQ4N2RlMTBkL2Q1MTY4M2E5LWI1YjctNDM0Ny04NzdlLTliYzE0ODdk
ZTEwZC5jcmwwHwYDVR0jBBgwFoAUUarlkf4P8Hfm4XTav/sTJHWgkzgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kNTE2ODNhOS1iNWI3LTQzNDctODc3ZS05YmMx
NDg3ZGUxMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPVDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIx8zKJHllsR6QMPh3aHeC9bhmwtpoeUlevZq61dz9AuGEbreNlvGJO7
if83XWYAcCfd2uLKoHTYq1pBotRu4CaxWH3xM9LkuxoJ23aGFodJcA4jDZTPpghx
jiOauT8zTVHTntQo7VZ1bwBPHLQWMKg9PeoaUBxDjtNtXb6FRWYTT/MpG2A+PEIM
RaTjjxPTDAMgiCfscTi6uUiHd4bsyEMLlprFaTaggmoZX7muD15vgbKmW2Kme86+
gIcifZb2S2BMK8qAOfslkWJ+ybJhKQWvcMVNgsPNOsbG9PQPV6xXKf/vZdjkPAjZ
/CC3lFygeNyCQoeRoOawhx7wUVU7H9g=
-----END CERTIFICATE-----
Generated at Fri Oct 10 23:52:22 2025 by rpki-client