Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa
File:                     e48c52b2-2e37-3655-95b9-536384cb2c6d.roa (raw, json)
Hash identifier:          ngtMp1PJ8LHt10CAlaTw9ZpJMU/CiyJrZveiwy71+Gc=
Subject key identifier:   D6:8F:6D:22:79:18:8D:47:6B:46:A0:8F:04:41:2B:EF:F8:69:BD:DF
Certificate issuer:       /CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3
Certificate serial:       010D0C9F4328584AF7EBE6B6C760AACE1D929680
Authority key identifier: 85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        207.241.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:e6:b6:c7:60:aa:ce:1d:92:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=b8182370-8255-421e-8925-3fea9ddd1205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:6a:9e:cd:6c:39:f9:69:b3:9a:61:0b:89:
                    9d:71:e4:00:77:61:cf:ae:24:bb:c3:55:3f:1f:cc:
                    1d:fe:0c:19:46:d5:ba:6b:22:6f:80:2d:d2:25:9c:
                    46:3c:71:81:ca:ac:e1:c9:07:bf:8d:cc:10:d7:be:
                    9b:4d:5c:7b:7e:07:7b:e3:cb:e0:ed:c4:88:cc:52:
                    42:b5:b2:a0:24:82:04:dd:a3:90:71:11:2c:d2:8a:
                    93:55:6c:36:86:47:3e:4e:a4:de:10:18:ad:cc:79:
                    10:b3:a5:eb:0b:67:12:3d:2a:00:8d:61:52:ce:0c:
                    5e:5e:1b:6e:cf:2b:b9:67:22:d0:d4:17:49:2c:dd:
                    2e:22:a9:cb:04:b7:69:60:9f:89:ae:b2:77:ef:67:
                    0c:5e:b8:66:27:6a:7c:87:5a:25:42:2b:e4:8e:c8:
                    ea:c0:de:81:93:57:ac:55:4a:48:02:eb:6b:af:3c:
                    f3:39:e9:f5:b0:78:2a:2d:dd:03:41:93:07:0e:b6:
                    71:f6:9b:23:93:01:84:76:a5:8d:f3:6b:5a:b3:ca:
                    fc:b5:2a:51:65:00:7e:f7:a0:20:04:8c:e1:5a:58:
                    54:ac:2a:f6:9b:38:c4:59:6a:fe:28:c3:57:cc:40:
                    3f:1e:34:0a:c5:88:90:7a:c0:2d:f0:b2:56:f7:b3:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8F:6D:22:79:18:8D:47:6B:46:A0:8F:04:41:2B:EF:F8:69:BD:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl

            X509v3 Authority Key Identifier:
                keyid:85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:11:d1:09:98:6c:15:74:db:2c:a6:5c:8b:ef:2c:3e:52:3f:
         f2:fa:03:9c:08:ae:00:39:6e:b0:a2:8a:1c:c8:e0:7c:dc:3b:
         9c:a6:10:c6:c4:42:62:e3:b6:e1:6e:ff:d2:ec:53:0c:19:07:
         a5:fb:9f:4e:aa:72:73:e2:dd:f5:5c:8c:eb:ef:f8:cb:59:e6:
         09:03:eb:58:02:11:d0:d2:d7:bc:10:5d:85:bb:39:7d:4c:62:
         9f:c9:41:13:04:ab:2d:50:64:ca:b3:a6:4c:4a:cf:85:fc:fd:
         33:92:02:22:7c:d1:ab:9e:59:dd:a0:11:67:13:87:02:f5:8b:
         c3:df:18:43:ca:89:7d:c8:8c:d2:8d:7b:2f:8a:23:af:e4:5d:
         9d:1f:36:94:88:f1:5f:e9:6b:91:88:a6:9c:ff:23:58:1a:b7:
         39:2e:e0:84:af:b1:08:b5:c5:88:30:4d:41:5d:1e:c3:2e:5e:
         8b:9b:d1:78:ea:ec:86:1c:db:22:48:26:d9:91:ff:c3:87:73:
         44:e4:bf:cd:e7:33:69:ae:39:2a:95:89:b2:84:62:cd:25:42:
         45:78:98:72:a2:fc:cf:e9:b4:f9:2f:8e:43:f8:cd:7d:b6:cc:
         d5:51:c0:9c:51:c2:a6:94:9b:9e:b5:d1:93:b7:2c:3a:2a:5a:
         32:d5:15:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+a2x2Cqzh2SloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RkNWM1NzgtMjYxMi00YjFhLThjNGEtYzEyYmM3YzNh
MWUzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk
YjgxODIzNzAtODI1NS00MjFlLTg5MjUtM2ZlYTlkZGQxMjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgexqns1sOflps5phC4mdceQAd2HPriS7w1U/
H8wd/gwZRtW6ayJvgC3SJZxGPHGByqzhyQe/jcwQ176bTVx7fgd748vg7cSIzFJC
tbKgJIIE3aOQcREs0oqTVWw2hkc+TqTeEBitzHkQs6XrC2cSPSoAjWFSzgxeXhtu
zyu5ZyLQ1BdJLN0uIqnLBLdpYJ+JrrJ372cMXrhmJ2p8h1olQivkjsjqwN6Bk1es
VUpIAutrrzzzOen1sHgqLd0DQZMHDrZx9psjkwGEdqWN82tas8r8tSpRZQB+96Ag
BIzhWlhUrCr2mzjEWWr+KMNXzEA/HjQKxYiQesAt8LJW97OjnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNaPbSJ5GI1Ha0agjwRBK+/4ab3fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jZGQ1
YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJiYzdjM2ExZTMvZTQ4YzUyYjItMmUzNy0z
NjU1LTk1YjktNTM2Mzg0Y2IyYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2RkNWM1NzgtMjYxMi00YjFhLThj
NGEtYzEyYmM3YzNhMWUzL2NkZDVjNTc4LTI2MTItNGIxYS04YzRhLWMxMmJjN2Mz
YTFlMy5jcmwwHwYDVR0jBBgwFoAUhextxeuP/SLDojXkGqYZ8gtvPRUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jZGQ1YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJi
YzdjM2ExZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz/GQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADoR0QmYbBV02yymXIvvLD5SP/L6A5wIrgA5brCiihzI4HzcO5ymEMbE
QmLjtuFu/9LsUwwZB6X7n06qcnPi3fVcjOvv+MtZ5gkD61gCEdDS17wQXYW7OX1M
Yp/JQRMEqy1QZMqzpkxKz4X8/TOSAiJ80aueWd2gEWcThwL1i8PfGEPKiX3IjNKN
ey+KI6/kXZ0fNpSI8V/pa5GIppz/I1gatzku4ISvsQi1xYgwTUFdHsMuXoub0Xjq
7IYc2yJIJtmR/8OHc0Tkv83nM2muOSqVibKEYs0lQkV4mHKi/M/ptPkvjkP4zX22
zNVRwJxRwqaUm5610ZO3LDoqWjLVFSQ=
-----END CERTIFICATE-----
Generated at Thu Oct 9 06:18:27 2025 by rpki-client