Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4f62f1f0-c8f2-3a59-b859-b5e75fba118c.roa
File:                     4f62f1f0-c8f2-3a59-b859-b5e75fba118c.roa (raw, json)
Hash identifier:          4yRFvomT7Ydh4efMPT3y/FjAI5k21ld/DwGMBJwQ0R8=
Subject key identifier:   A7:B7:03:12:08:4D:C3:12:A8:A5:10:9F:FF:08:C8:CA:50:F2:1C:07
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B233195ADB1B5F66E504FC680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4f62f1f0-c8f2-3a59-b859-b5e75fba118c.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        108.177.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:95:ad:b1:b5:f6:6e:50:4f:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=29c5aa3b-20aa-44e3-b530-57e2a3f9ef66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:c2:dc:8c:57:b3:31:47:f9:30:da:d8:74:
                    5f:d1:00:19:b8:a7:66:f8:7f:bc:89:eb:a4:f4:33:
                    8e:15:7d:21:2e:75:c8:dd:27:12:0b:54:01:81:25:
                    6d:8c:1b:c1:eb:5a:ff:52:81:bc:65:66:ac:4c:83:
                    b6:7f:a8:32:ed:d3:c7:ad:f7:d5:be:83:4e:a8:55:
                    54:20:bb:67:2c:e9:de:82:b2:10:e8:ed:b0:a8:e8:
                    ca:8e:47:75:d3:48:e6:12:de:06:26:5c:7f:68:86:
                    51:8e:36:e0:26:1d:67:13:0a:47:e6:1c:90:42:68:
                    b5:43:1b:1a:9a:d0:ea:31:87:75:5f:46:4d:36:44:
                    59:5f:6e:39:f7:f3:4c:6f:49:00:bd:2e:99:8f:a7:
                    2c:b7:37:63:23:ab:10:69:71:8d:80:fb:f9:7a:a2:
                    99:00:f2:f7:e1:f5:6b:3a:79:b4:c3:9c:d1:25:44:
                    d3:ee:1f:2c:10:86:e0:72:c8:1e:2e:56:8c:95:89:
                    94:69:ee:68:fc:24:88:a1:9f:86:ac:b9:99:a5:45:
                    d9:87:a9:25:5c:3b:35:e8:e8:af:19:4f:75:ef:f6:
                    92:eb:76:88:21:ae:c0:36:81:71:13:90:b1:c1:74:
                    45:60:60:50:b9:64:7f:30:95:42:d6:23:68:ff:c8:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B7:03:12:08:4D:C3:12:A8:A5:10:9F:FF:08:C8:CA:50:F2:1C:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4f62f1f0-c8f2-3a59-b859-b5e75fba118c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d2:4f:ab:ba:93:5b:92:bd:21:d0:a3:d8:e6:b5:b8:76:64:
         40:1f:4c:78:c6:34:da:33:88:27:cd:62:69:48:df:88:52:09:
         da:67:cb:26:b3:23:06:30:ec:5e:70:ea:58:78:3d:2f:1d:85:
         cc:97:1c:4f:a7:fa:2e:34:f4:42:81:e6:ce:d2:8a:7f:94:e8:
         1d:6c:1e:fd:50:1e:8f:cd:da:79:b9:eb:1b:c6:ba:1e:b5:fd:
         ad:58:67:bb:72:2e:f4:44:da:d8:af:e4:62:4c:53:5b:51:20:
         c3:34:e1:be:6d:5c:fd:f5:c0:d8:9a:6b:c6:d6:3b:45:f1:e8:
         fb:21:e2:33:eb:ff:fc:cb:c4:28:be:8f:36:ba:3d:c8:bd:fa:
         dc:ad:71:9c:d6:ca:db:23:5c:fe:95:e0:d2:46:bf:76:1f:52:
         85:19:bc:87:6d:ac:4a:dc:9c:50:4f:bc:b3:24:92:3d:e9:f4:
         9b:74:f8:92:06:fd:1a:7a:f4:ec:01:c9:59:61:37:27:7d:b1:
         28:05:18:de:24:d0:1d:a0:e5:e4:d6:06:be:de:73:57:1c:f1:
         b4:83:10:89:a4:1a:db:db:cd:b0:c8:b9:e6:8a:eb:39:31:10:
         87:b5:cc:6d:e2:0c:4c:9f:3f:40:25:4d:bc:01:4d:3a:9b:25:
         6d:38:a0:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZWtsbX2blBPxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
MjljNWFhM2ItMjBhYS00NGUzLWI1MzAtNTdlMmEzZjllZjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArifC3IxXszFH+TDa2HRf0QAZuKdm+H+8ieuk
9DOOFX0hLnXI3ScSC1QBgSVtjBvB61r/UoG8ZWasTIO2f6gy7dPHrffVvoNOqFVU
ILtnLOnegrIQ6O2wqOjKjkd100jmEt4GJlx/aIZRjjbgJh1nEwpH5hyQQmi1Qxsa
mtDqMYd1X0ZNNkRZX2459/NMb0kAvS6Zj6cstzdjI6sQaXGNgPv5eqKZAPL34fVr
Onm0w5zRJUTT7h8sEIbgcsgeLlaMlYmUae5o/CSIoZ+GrLmZpUXZh6klXDs16Oiv
GU917/aS63aIIa7ANoFxE5CxwXRFYGBQuWR/MJVC1iNo/8i2/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKe3AxIITcMSqKUQn/8IyMpQ8hwHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGY2MmYxZjAtYzhmMi0z
YTU5LWI4NTktYjVlNzVmYmExMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALST6u6k1uSvSHQo9jmtbh2ZEAfTHjGNNoziCfNYmlI34hSCdpnyyaz
IwYw7F5w6lh4PS8dhcyXHE+n+i409EKB5s7Sin+U6B1sHv1QHo/N2nm56xvGuh61
/a1YZ7tyLvRE2tiv5GJMU1tRIMM04b5tXP31wNiaa8bWO0Xx6Psh4jPr//zLxCi+
jza6Pci9+tytcZzWytsjXP6V4NJGv3YfUoUZvIdtrErcnFBPvLMkkj3p9Jt0+JIG
/Rp69OwByVlhNyd9sSgFGN4k0B2g5eTWBr7ec1cc8bSDEImkGtvbzbDIueaK6zkx
EIe1zG3iDEyfP0AlTbwBTTqbJW04oEw=
-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:04 2025 by rpki-client