Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/67d08315-be33-31ec-8f60-ad77e5ab1a41.roa
File:                     67d08315-be33-31ec-8f60-ad77e5ab1a41.roa (raw, json)
Hash identifier:          GpiITIWgiOK3fIHO0ltcBWziTZJtnFSBVl+TolPzTyI=
Subject key identifier:   E6:7F:64:E4:2C:74:DE:D4:6D:9C:CF:0D:B0:E8:E4:A7:91:2E:05:3B
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F4803BFF617DCC66D120
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/67d08315-be33-31ec-8f60-ad77e5ab1a41.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        151.101.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f4:80:3b:ff:61:7d:cc:66:d1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=f93294e9-5aa4-4c78-9318-d9d00c995568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:f8:63:8b:76:92:a2:50:db:f9:69:72:58:
                    d6:54:cf:dc:79:b4:1d:34:5b:b2:76:3f:9e:79:45:
                    f7:29:29:54:e8:99:d2:85:68:d3:08:8e:68:0d:1a:
                    e4:d9:c1:b7:dd:0f:36:47:4e:53:c5:e4:68:da:85:
                    b7:db:d7:eb:67:90:f9:15:44:ec:03:52:dc:21:27:
                    09:b7:4c:8f:b8:23:af:dd:78:1d:19:b1:a2:0b:69:
                    64:b9:a3:01:bf:9d:db:ee:d9:45:71:d4:53:ef:ad:
                    c1:64:de:96:49:62:bb:15:a7:95:f4:9c:cf:bc:2d:
                    7d:11:90:95:c8:90:2e:50:73:05:38:d2:59:a6:0a:
                    3f:7e:06:08:0c:40:d4:74:dd:33:e9:7d:6d:f5:71:
                    68:8f:a7:7a:fb:74:a0:e3:12:c1:e2:29:54:ab:13:
                    ad:12:08:ad:b9:06:33:fd:82:a8:73:3d:5a:4b:df:
                    45:c3:0e:94:62:d9:90:40:df:96:64:ff:30:d7:12:
                    cf:aa:1c:79:0d:90:f7:7d:5c:98:54:64:e5:6e:91:
                    94:90:13:29:c8:61:46:13:b9:07:62:1a:92:49:b3:
                    3f:41:e7:0c:37:e9:ec:73:d9:d6:19:0e:ee:44:61:
                    a7:0a:bf:00:37:21:e6:26:d5:a2:2f:65:13:47:d9:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7F:64:E4:2C:74:DE:D4:6D:9C:CF:0D:B0:E8:E4:A7:91:2E:05:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/67d08315-be33-31ec-8f60-ad77e5ab1a41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2f:a2:68:3b:e4:04:09:d4:97:85:17:d6:1b:a0:fc:5a:12:
         7b:16:5e:8c:b6:c3:cc:aa:54:65:10:04:30:d5:16:96:7c:2c:
         72:fd:c1:02:f3:7a:45:ef:03:d9:bf:d3:c3:52:33:4d:d6:29:
         1b:4a:c0:cb:92:cf:b5:5f:d6:2b:8e:1b:db:c0:62:ef:9d:1a:
         55:65:2c:bd:43:12:08:eb:88:e0:fb:00:2d:77:99:fd:8c:24:
         81:2c:1b:4b:de:f8:2d:c3:ad:80:60:23:75:53:e8:ca:47:df:
         0e:12:6f:1d:b0:a2:6b:b6:a0:2b:d6:a9:fe:25:74:ab:43:0e:
         1b:45:ac:c2:df:44:72:a8:5c:50:e4:75:ab:63:a8:ef:23:25:
         3b:ba:5a:db:17:1c:47:4d:fe:f8:9a:47:bd:e0:73:ef:1a:e9:
         f3:db:b9:fd:57:f2:7b:9c:19:29:14:be:a3:a9:3a:b1:a0:ef:
         85:8d:5a:41:27:ad:93:d5:43:ea:37:c7:c0:33:71:60:96:18:
         e2:5c:41:21:f4:ab:f2:f1:18:2e:e7:f3:03:d8:d6:8c:77:3f:
         20:74:70:9e:04:be:4a:d9:d6:02:40:8b:35:c6:95:73:f0:fc:
         0a:c5:e9:53:5f:6b:31:81:f6:e5:9c:04:b0:a8:c8:3c:42:7e:
         82:83:aa:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vSAO/9hfcxm0SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
ZjkzMjk0ZTktNWFhNC00Yzc4LTkzMTgtZDlkMDBjOTk1NTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix/4Y4t2kqJQ2/lpcljWVM/cebQdNFuydj+e
eUX3KSlU6JnShWjTCI5oDRrk2cG33Q82R05TxeRo2oW329frZ5D5FUTsA1LcIScJ
t0yPuCOv3XgdGbGiC2lkuaMBv53b7tlFcdRT763BZN6WSWK7FaeV9JzPvC19EZCV
yJAuUHMFONJZpgo/fgYIDEDUdN0z6X1t9XFoj6d6+3Sg4xLB4ilUqxOtEgituQYz
/YKocz1aS99Fww6UYtmQQN+WZP8w1xLPqhx5DZD3fVyYVGTlbpGUkBMpyGFGE7kH
YhqSSbM/QecMN+nsc9nWGQ7uRGGnCr8ANyHmJtWiL2UTR9lvbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZ/ZOQsdN7UbZzPDbDo5KeRLgU7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNjdkMDgzMTUtYmUzMy0z
MWVjLThmNjAtYWQ3N2U1YWIxYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2VoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwvomg75AQJ1JeFF9YboPxaEnsWXoy2w8yqVGUQBDDVFpZ8LHL9wQLz
ekXvA9m/08NSM03WKRtKwMuSz7Vf1iuOG9vAYu+dGlVlLL1DEgjriOD7AC13mf2M
JIEsG0ve+C3DrYBgI3VT6MpH3w4Sbx2womu2oCvWqf4ldKtDDhtFrMLfRHKoXFDk
datjqO8jJTu6WtsXHEdN/viaR73gc+8a6fPbuf1X8nucGSkUvqOpOrGg74WNWkEn
rZPVQ+o3x8AzcWCWGOJcQSH0q/LxGC7n8wPY1ox3PyB0cJ4EvkrZ1gJAizXGlXPw
/ArF6VNfazGB9uWcBLCoyDxCfoKDqgc=
-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:55 2025 by rpki-client