Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa
File:                     3e608f82-082e-3625-8820-3883ef973c0c.roa (raw, json)
Hash identifier:          O8eiVTh+n4bqsuIZ6HA6YGNJ/Q46yWKap37n2U5NTpg=
Subject key identifier:   3D:92:62:F9:1B:B4:15:D7:24:23:AE:23:BB:DC:A9:FB:EB:8E:74:33
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B5B074A78A7FB46606BE7B940
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     13445
IP address blocks:        170.72.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:4a:78:a7:fb:46:60:6b:e7:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=9db595ae-f11c-443c-8632-be01d049cb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:95:88:43:59:fd:fc:c5:37:3e:dd:12:86:
                    18:90:47:9a:eb:7b:87:d9:54:ed:c1:03:65:67:f0:
                    86:56:a2:ee:6a:8c:e2:7b:6d:1b:97:ed:68:42:e6:
                    57:da:ec:53:3d:cf:5b:1e:2c:9d:57:e5:57:e8:af:
                    3a:07:7b:eb:64:03:d7:11:5d:a1:6b:4d:b9:f5:f5:
                    5e:4b:6e:9f:4c:53:da:e1:ca:bc:c7:b8:75:2c:84:
                    0a:fd:72:ce:a2:f0:35:dc:0c:8d:fb:1c:c5:70:8c:
                    f9:41:3d:bb:ba:3a:90:44:c1:8a:a4:8c:72:92:5a:
                    1d:cc:81:96:7d:88:8a:7c:0f:dd:ab:1c:a9:0c:1c:
                    ee:94:c0:45:8c:a7:80:ec:4c:6d:79:67:0a:74:8a:
                    24:ed:b4:df:4e:2e:9d:d1:0b:c4:d2:3a:44:58:6e:
                    33:63:f6:6e:2a:98:91:fb:9f:c3:50:de:cc:a9:06:
                    76:03:7a:10:38:ba:e7:51:67:e2:29:4a:a7:7c:bb:
                    27:2e:76:46:b9:dd:49:a2:7f:98:bc:87:eb:b5:23:
                    30:33:37:d6:20:ff:4d:ce:f0:07:52:3e:13:7e:3a:
                    0f:50:31:8a:a4:34:dc:5a:6f:fa:80:68:d6:6b:6a:
                    f6:4a:5b:a9:2e:2b:e1:27:68:bb:f6:8e:cd:cb:dc:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:92:62:F9:1B:B4:15:D7:24:23:AE:23:BB:DC:A9:FB:EB:8E:74:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.72.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:29:da:f4:03:97:40:c4:a1:98:f1:9a:47:1b:a1:8d:5f:
         c7:98:4f:9c:da:38:7d:b9:d6:90:0c:6a:76:31:dd:f5:2d:81:
         f4:4a:4c:6e:8e:53:e9:39:60:ec:22:aa:ca:96:71:7b:8d:bc:
         6e:6e:18:d4:a3:08:00:38:22:93:61:c4:12:07:8b:d5:4c:47:
         01:17:40:ab:51:09:61:fa:85:4e:f5:b6:42:c8:d1:14:36:95:
         1f:4d:a1:d9:46:8c:88:73:fc:45:6c:c5:5e:1f:10:69:b6:6d:
         1b:e7:ed:67:28:7c:af:0e:b5:56:ac:35:a8:4d:25:41:6b:92:
         d1:f2:64:b1:16:e6:bc:7c:57:26:a9:66:04:8b:6b:87:be:b1:
         93:cd:78:79:92:90:1b:ab:c0:3a:85:ab:f9:3c:ef:6c:90:5f:
         cc:35:78:2e:6c:06:47:0e:95:4a:65:6d:29:89:cf:37:42:9d:
         12:b5:94:09:22:e3:9b:8e:f3:af:7b:8c:ff:fa:b3:1f:b4:28:
         88:44:97:08:6a:be:77:f0:e7:c7:7f:0b:b9:5c:4f:69:09:78:
         35:17:f2:02:3b:d1:da:b4:75:b5:fa:79:e0:a9:d1:fb:e1:56:
         9f:f7:89:28:37:c1:24:50:95:78:48:0f:48:a4:5c:b9:b9:6d:
         9a:47:05:ee
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtbB0p4p/tGYGvnuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
OWRiNTk1YWUtZjExYy00NDNjLTg2MzItYmUwMWQwNDljYjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/eViENZ/fzFNz7dEoYYkEea63uH2VTtwQNl
Z/CGVqLuaozie20bl+1oQuZX2uxTPc9bHiydV+VX6K86B3vrZAPXEV2ha0259fVe
S26fTFPa4cq8x7h1LIQK/XLOovA13AyN+xzFcIz5QT27ujqQRMGKpIxyklodzIGW
fYiKfA/dqxypDBzulMBFjKeA7ExteWcKdIok7bTfTi6d0QvE0jpEWG4zY/ZuKpiR
+5/DUN7MqQZ2A3oQOLrnUWfiKUqnfLsnLnZGud1Jon+YvIfrtSMwMzfWIP9NzvAH
Uj4TfjoPUDGKpDTcWm/6gGjWa2r2SlupLivhJ2i79o7Ny9winwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD2SYvkbtBXXJCOuI7vcqfvrjnQzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvM2U2MDhmODItMDgyZS0z
NjI1LTg4MjAtMzg4M2VmOTczYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqkgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAegp2vQDl0DEoZjxmkcboY1fx5hPnNo4fbnWkAxqdjHd9S2B9EpMbo5T
6Tlg7CKqypZxe428bm4Y1KMIADgik2HEEgeL1UxHARdAq1EJYfqFTvW2QsjRFDaV
H02h2UaMiHP8RWzFXh8QabZtG+ftZyh8rw61Vqw1qE0lQWuS0fJksRbmvHxXJqlm
BItrh76xk814eZKQG6vAOoWr+TzvbJBfzDV4LmwGRw6VSmVtKYnPN0KdErWUCSLj
m47zr3uM//qzH7QoiESXCGq+d/Dnx38LuVxPaQl4NRfyAjvR2rR1tfp54KnR++FW
n/eJKDfBJFCVeEgPSKRcubltmkcF7g==
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:49:29 2025 by rpki-client