Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/bd08393c-45f4-32bc-aeef-2679261fb921.roa
File:                     bd08393c-45f4-32bc-aeef-2679261fb921.roa (raw, json)
Hash identifier:          dGJoPibIiJBBMIOQp9N3zF0s/lUQXTOVZdBShtjxq7o=
Subject key identifier:   7D:FD:27:49:D3:28:DD:F3:8B:E0:CE:A9:4C:13:34:26:30:43:7C:CE
Certificate issuer:       /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Certificate serial:       010D0C9F4328584B2496C61385602B44387BEE80
Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/bd08393c-45f4-32bc-aeef-2679261fb921.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     14333
IP address blocks:        208.72.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:c6:13:85:60:2b:44:38:7b:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=5bcdbe0c-a62b-4c19-a754-98029c5213d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:5b:ea:1f:ee:eb:c8:c4:a6:4b:ac:e7:39:
                    12:16:39:ab:9e:9b:be:0d:b4:5b:be:04:cb:0a:fa:
                    fa:f5:a9:de:8f:19:db:46:92:1b:ce:b2:ed:c0:9e:
                    c1:95:de:85:7d:a7:ab:3c:96:45:fc:85:29:f9:72:
                    f9:73:a9:ef:c8:46:f3:f8:18:7a:a0:8a:38:b1:22:
                    b1:eb:2b:36:96:af:6c:dd:5d:a7:12:92:f4:0a:e6:
                    82:e2:9f:3b:fe:25:0c:2e:a9:02:bc:62:71:54:80:
                    d5:bc:02:c0:fc:83:75:42:9e:c0:ae:e5:57:04:6d:
                    70:c0:00:84:4b:c7:c8:30:9d:06:f8:30:f3:03:9d:
                    38:7b:52:0f:e3:6e:da:09:38:98:6d:9b:14:8e:ae:
                    9f:17:15:bb:dd:e1:29:02:6e:a8:5f:6c:29:48:e5:
                    de:bb:cb:8e:82:6c:76:18:02:5e:64:75:18:e3:cb:
                    a4:61:df:07:39:c7:24:ee:50:5a:a3:e2:92:24:9b:
                    34:5f:d0:24:4c:86:19:01:04:08:19:6b:50:11:aa:
                    9d:b9:16:47:2f:0d:12:88:0e:ff:58:13:24:94:14:
                    f5:3d:c1:8b:62:25:44:17:0e:07:1f:bf:83:36:d6:
                    04:13:65:f8:98:2d:de:a3:89:b9:87:5d:bc:6c:55:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FD:27:49:D3:28:DD:F3:8B:E0:CE:A9:4C:13:34:26:30:43:7C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/bd08393c-45f4-32bc-aeef-2679261fb921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl

            X509v3 Authority Key Identifier:
                keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:e0:df:3f:4c:7a:e9:18:6e:b3:57:e0:7b:e5:cb:0a:37:a6:
         bc:61:c0:8b:3d:6f:c6:77:6f:6f:42:9a:85:ec:ca:6e:a1:d5:
         83:c2:2c:e7:e7:f3:85:6c:0c:e5:5a:be:6d:b8:fe:f9:6f:12:
         22:be:77:b9:ea:81:ac:dd:8c:3e:da:8e:f5:de:2f:1e:d2:47:
         33:df:75:d2:4d:18:3b:4d:b0:3a:fb:1d:34:15:56:0c:69:ac:
         54:9e:5c:0b:f4:60:58:6c:de:5f:a7:ea:aa:13:97:28:f8:35:
         0b:eb:17:f2:2b:14:5e:0f:e4:f3:d7:34:5a:50:4d:71:a7:4a:
         9b:40:da:49:c4:c8:8c:94:20:ed:20:e9:33:14:3b:01:b9:8b:
         a8:84:f0:10:0d:c6:0e:45:df:25:70:87:05:52:de:17:23:a2:
         be:13:82:86:bd:03:f4:ca:b1:81:11:e8:d0:28:16:a9:29:a3:
         21:4a:b5:8f:4f:45:44:27:d1:b3:4c:f4:d3:5c:ae:5c:e4:cb:
         a1:09:40:5a:c2:2d:8e:14:cb:af:7e:c8:e6:ec:1f:47:fd:31:
         c0:59:5e:42:d1:43:80:ef:9e:40:df:89:0d:09:31:fe:0e:8d:
         70:b6:10:4b:a8:06:12:70:02:1d:83:50:07:23:41:71:d8:ac:
         f7:9e:30:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsYThWArRDh77oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGYyN2M5MzQtZWJjNi00NGE0LWJiYTAtYTAzY2M0NjUz
MzRiMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
NWJjZGJlMGMtYTYyYi00YzE5LWE3NTQtOTgwMjljNTIxM2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhtb6h/u68jEpkus5zkSFjmrnpu+DbRbvgTL
Cvr69anejxnbRpIbzrLtwJ7Bld6FfaerPJZF/IUp+XL5c6nvyEbz+Bh6oIo4sSKx
6ys2lq9s3V2nEpL0CuaC4p87/iUMLqkCvGJxVIDVvALA/IN1Qp7AruVXBG1wwACE
S8fIMJ0G+DDzA504e1IP427aCTiYbZsUjq6fFxW73eEpAm6oX2wpSOXeu8uOgmx2
GAJeZHUY48ukYd8HOcck7lBao+KSJJs0X9AkTIYZAQQIGWtQEaqduRZHLw0SiA7/
WBMklBT1PcGLYiVEFw4HH7+DNtYEE2X4mC3eo4m5h128bFVfYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH39J0nTKN3zi+DOqUwTNCYwQ3zOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3
YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNjYzQ2NTMzNGIvYmQwODM5M2MtNDVmNC0z
MmJjLWFlZWYtMjY3OTI2MWZiOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGYyN2M5MzQtZWJjNi00NGE0LWJi
YTAtYTAzY2M0NjUzMzRiLzhmMjdjOTM0LWViYzYtNDRhNC1iYmEwLWEwM2NjNDY1
MzM0Yi5jcmwwHwYDVR0jBBgwFoAU4bkaPPumXs0F9g4Sq6n1oxOo8WkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNj
YzQ2NTMzNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EhoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMPg3z9MeukYbrNX4Hvlywo3prxhwIs9b8Z3b29CmoXsym6h1YPCLOfn
84VsDOVavm24/vlvEiK+d7nqgazdjD7ajvXeLx7SRzPfddJNGDtNsDr7HTQVVgxp
rFSeXAv0YFhs3l+n6qoTlyj4NQvrF/IrFF4P5PPXNFpQTXGnSptA2knEyIyUIO0g
6TMUOwG5i6iE8BANxg5F3yVwhwVS3hcjor4Tgoa9A/TKsYER6NAoFqkpoyFKtY9P
RUQn0bNM9NNcrlzky6EJQFrCLY4Uy69+yObsH0f9McBZXkLRQ4DvnkDfiQ0JMf4O
jXC2EEuoBhJwAh2DUAcjQXHYrPeeMOI=
-----END CERTIFICATE-----
Generated at Sat Oct 11 15:00:16 2025 by rpki-client