Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7873cee5-dca2-3643-b959-2ff1a6548ab5.roa
File:                     7873cee5-dca2-3643-b959-2ff1a6548ab5.roa (raw, json)
Hash identifier:          k+jcK79QVCRvZfuEMIxsrgFYJteitfkYtWnJ5sSz2Ok=
Subject key identifier:   E3:CC:28:CF:D8:5E:A8:E5:1C:5E:94:DB:69:9C:E0:97:1D:F2:4A:A4
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584B2A2C311D5449040D413C9700
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7873cee5-dca2-3643-b959-2ff1a6548ab5.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     398415
IP address blocks:        209.142.70.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:31:1d:54:49:04:0d:41:3c:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=f161de54-c78a-454c-92d9-c88cd4c7b5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dd:e1:cd:c1:53:ad:21:0e:75:24:5f:5b:a2:
                    f6:97:eb:0e:a9:19:b3:e3:b7:08:e9:87:37:41:b7:
                    e3:96:04:f8:62:1b:a8:01:80:b1:3d:a1:79:62:9b:
                    3c:85:9e:de:6f:a2:c2:eb:93:8a:ba:be:0b:1f:85:
                    47:d2:66:d3:1c:7d:68:2d:05:69:c9:91:b9:c9:f6:
                    58:07:0c:3a:22:ac:d3:9c:e3:c0:9b:96:8e:12:4f:
                    60:da:ba:00:fb:81:34:76:a4:cb:0f:3c:09:58:fb:
                    c3:02:ed:e0:07:55:93:cc:fa:60:da:97:04:ae:e9:
                    dd:88:8d:1b:a4:ab:c4:18:c5:64:9a:8d:27:27:79:
                    d9:eb:08:c9:40:58:ba:e5:3b:ca:a1:a6:51:eb:c3:
                    d7:9b:0e:57:ca:7b:29:1f:d1:2d:24:c8:88:35:22:
                    18:29:ee:e2:60:67:db:53:74:6d:d4:1d:c9:a7:14:
                    ea:ab:64:be:e0:a9:bd:c7:df:9d:38:00:f8:1c:85:
                    12:a7:27:bc:68:a4:2e:57:c5:99:39:bc:e1:40:cb:
                    06:38:d0:91:13:24:ca:98:e7:36:78:6b:d1:50:fd:
                    80:19:52:8a:5e:db:42:f5:bd:ac:86:98:26:f3:89:
                    e6:9e:d5:e0:2c:af:12:d0:c0:04:a3:4e:45:23:a4:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CC:28:CF:D8:5E:A8:E5:1C:5E:94:DB:69:9C:E0:97:1D:F2:4A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7873cee5-dca2-3643-b959-2ff1a6548ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:e3:55:5f:27:02:6f:5e:19:0d:cb:79:c8:47:95:3e:f3:
         83:0c:c6:c4:5d:41:7c:fb:ef:7c:65:79:b4:3f:df:34:e4:eb:
         15:02:11:0f:ed:ec:21:a0:1d:cc:b8:ad:2b:42:a0:5d:50:59:
         77:6a:cd:02:f3:0a:0f:a5:77:45:29:ae:67:c1:37:db:08:34:
         2b:eb:c9:c4:f0:af:09:16:aa:a0:ab:5b:c6:af:6d:ad:44:28:
         3d:77:2d:13:82:05:8c:8b:0e:49:6c:47:e6:0d:6f:90:99:09:
         e8:9f:4c:71:25:ab:e3:95:86:61:b1:a4:41:a2:88:59:a6:e7:
         3c:0a:3c:bc:f7:2e:45:7f:8e:8f:03:4d:b0:33:56:cd:80:6c:
         d0:18:cd:d8:e2:ba:85:e4:fa:4d:34:eb:35:a3:67:40:45:fa:
         c3:21:86:64:df:0d:4d:36:24:50:9f:31:2d:8c:4e:af:95:93:
         5e:83:48:8a:71:82:d3:11:7d:2a:93:d6:e5:c4:4b:f7:4d:e3:
         67:78:27:c7:cc:04:07:cb:4d:ac:cc:be:65:c8:ab:6c:39:52:
         9f:f3:17:6f:87:6b:a4:e4:f7:46:72:c2:c6:49:88:0f:67:55:
         de:28:5c:1b:fe:f7:74:d4:25:df:6f:e1:e8:da:f5:64:31:8c:
         c1:af:84:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDEdVEkEDUE8lwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy
MDBlMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZjE2MWRlNTQtYzc4YS00NTRjLTkyZDktYzg4Y2Q0YzdiNWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd3hzcFTrSEOdSRfW6L2l+sOqRmz47cI6Yc3
QbfjlgT4YhuoAYCxPaF5Yps8hZ7eb6LC65OKur4LH4VH0mbTHH1oLQVpyZG5yfZY
Bww6IqzTnOPAm5aOEk9g2roA+4E0dqTLDzwJWPvDAu3gB1WTzPpg2pcErundiI0b
pKvEGMVkmo0nJ3nZ6wjJQFi65TvKoaZR68PXmw5XynspH9EtJMiINSIYKe7iYGfb
U3Rt1B3JpxTqq2S+4Km9x9+dOAD4HIUSpye8aKQuV8WZObzhQMsGONCREyTKmOc2
eGvRUP2AGVKKXttC9b2shpgm84nmntXgLK8S0MAEo05FI6SE7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPMKM/YXqjlHF6U22mc4Jcd8kqkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5
Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvNzg3M2NlZTUtZGNhMi0z
NjQzLWI5NTktMmZmMWE2NTQ4YWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx
ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3
MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm
OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeO41VfJwJvXhkNy3nIR5U+84MMxsRdQXz773xlebQ/3zTk6xUCEQ/t
7CGgHcy4rStCoF1QWXdqzQLzCg+ld0UprmfBN9sINCvrycTwrwkWqqCrW8avba1E
KD13LROCBYyLDklsR+YNb5CZCeifTHElq+OVhmGxpEGiiFmm5zwKPLz3LkV/jo8D
TbAzVs2AbNAYzdjiuoXk+k006zWjZ0BF+sMhhmTfDU02JFCfMS2MTq+Vk16DSIpx
gtMRfSqT1uXES/dN42d4J8fMBAfLTazMvmXIq2w5Up/zF2+Ha6Tk90ZywsZJiA9n
Vd4oXBv+93TUJd9v4eja9WQxjMGvhGA=
-----END CERTIFICATE-----
Generated at Sat Oct 11 03:59:52 2025 by rpki-client