Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d7dc447-a606-377e-a09c-e239c744710b.roa
File:                     7d7dc447-a606-377e-a09c-e239c744710b.roa (raw, json)
Hash identifier:          sb2pCGb4xMOaJQQKf9E3yWIdHJptXBE13XVZ1SdX/cM=
Subject key identifier:   2D:5F:17:7A:64:47:87:53:90:62:25:CC:C0:AD:C7:37:36:20:99:1B
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584BC53AF35EC31EB5E2669EB180
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d7dc447-a606-377e-a09c-e239c744710b.roa
Signing time:             Thu 06 Nov 2025 14:00:41 +0000
ROA not before:           Thu 06 Nov 2025 14:00:41 +0000
ROA not after:            Wed 04 Feb 2026 14:00:41 +0000
asID:                     14061
IP address blocks:        165.232.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:3a:f3:5e:c3:1e:b5:e2:66:9e:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Nov  6 14:00:41 2025 GMT
            Not After : Feb  4 14:00:41 2026 GMT
        Subject: CN=272a9482-1cf9-42c5-ba24-5a2a7fd691dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:eb:7e:1c:56:a3:ad:02:91:78:c6:f7:68:91:
                    ad:03:84:0a:22:41:90:18:58:e4:eb:f0:63:bd:b0:
                    d1:fc:9e:46:4e:f2:90:23:ec:6a:b6:08:e2:a4:ff:
                    1c:e7:e8:09:55:50:75:4c:6b:09:58:b9:3c:57:e0:
                    18:25:1f:aa:51:8d:8b:2b:e7:ee:be:75:0b:ea:2e:
                    51:a2:1d:a2:57:74:35:3e:2a:8d:47:d5:b3:8e:88:
                    84:23:51:cf:bd:87:18:80:c3:91:2b:81:71:1f:79:
                    af:f6:50:d3:7b:82:35:38:b8:ea:a1:1b:b3:42:f7:
                    a6:d6:cc:e8:d4:9a:f0:93:c5:65:6b:97:c8:a2:15:
                    6d:28:47:96:0a:a5:9d:c3:66:25:43:4b:65:1c:a6:
                    81:ca:0c:21:00:b4:cb:fd:26:6a:f7:22:85:f3:cf:
                    89:31:c5:33:66:b1:b5:b8:a3:42:e0:42:5a:cb:6a:
                    59:84:43:1c:b5:5a:40:89:29:20:f2:c0:b4:0e:af:
                    e8:8d:09:54:d2:1e:ad:40:2f:a5:1f:27:9c:6b:85:
                    61:c4:6f:25:1f:c5:99:0b:c7:95:26:0e:cc:71:64:
                    51:07:9b:ae:ee:23:ca:dd:69:e7:53:98:85:c1:15:
                    0c:e3:90:ac:cc:18:70:93:e7:e4:a5:a8:84:7b:f7:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5F:17:7A:64:47:87:53:90:62:25:CC:C0:AD:C7:37:36:20:99:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d7dc447-a606-377e-a09c-e239c744710b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.232.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:3b:2b:39:ea:8c:28:87:0d:dd:8c:b9:68:77:49:2b:b4:
         14:5d:0a:4d:f7:8f:71:50:4e:86:cd:4e:49:87:70:6f:c0:71:
         6f:fb:08:01:3f:f9:79:4f:bd:ac:01:60:7f:f4:5b:3c:ec:7d:
         7c:6c:93:d2:81:29:0a:9b:f9:28:a5:a3:5b:7b:ac:51:54:2b:
         88:ff:65:4e:7c:d6:65:7a:7e:00:23:a2:f9:5b:ac:de:9b:c0:
         36:cf:c0:dc:72:e6:bd:b7:77:d3:85:d0:a7:45:e1:67:29:75:
         d4:b2:b6:69:41:dd:bf:7a:94:f7:8d:1d:3f:58:1c:22:20:52:
         1b:04:ed:e7:3d:78:9c:5b:4e:50:9c:98:44:96:e4:08:6f:1a:
         b5:79:54:35:9e:fb:92:86:08:7a:c1:d6:3c:e9:84:07:b1:d5:
         a4:1a:2c:02:48:f7:7d:15:06:df:59:e8:be:ea:0c:a4:27:8f:
         15:f2:53:bc:f2:fb:55:0d:e1:b7:d1:a2:26:6d:d2:a4:36:d1:
         81:64:51:30:22:69:c0:cd:4b:ec:11:b2:21:37:ee:32:20:28:
         06:28:56:14:04:b2:d5:e6:85:aa:53:7a:70:ab:34:a3:c6:bc:
         9f:ae:c8:88:e4:c8:0b:a5:3e:1d:ce:1e:89:65:34:17:ae:ae:
         a3:5e:8f:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOvNewx614maesYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MjcyYTk0ODItMWNmOS00MmM1LWJhMjQtNWEyYTdmZDY5MWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOt+HFajrQKReMb3aJGtA4QKIkGQGFjk6/Bj
vbDR/J5GTvKQI+xqtgjipP8c5+gJVVB1TGsJWLk8V+AYJR+qUY2LK+fuvnUL6i5R
oh2iV3Q1PiqNR9WzjoiEI1HPvYcYgMORK4FxH3mv9lDTe4I1OLjqoRuzQvem1szo
1Jrwk8Vla5fIohVtKEeWCqWdw2YlQ0tlHKaBygwhALTL/SZq9yKF88+JMcUzZrG1
uKNC4EJay2pZhEMctVpAiSkg8sC0Dq/ojQlU0h6tQC+lHyeca4VhxG8lH8WZC8eV
Jg7McWRRB5uu7iPK3WnnU5iFwRUM45CszBhwk+fkpaiEe/fAmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1fF3pkR4dTkGIlzMCtxzc2IJkbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvN2Q3ZGM0NDctYTYwNi0z
NzdlLWEwOWMtZTIzOWM3NDQ3MTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFpeggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/DOys56owohw3djLlod0krtBRdCk33j3FQTobNTkmHcG/AcW/7CAE/
+XlPvawBYH/0WzzsfXxsk9KBKQqb+Silo1t7rFFUK4j/ZU581mV6fgAjovlbrN6b
wDbPwNxy5r23d9OF0KdF4WcpddSytmlB3b96lPeNHT9YHCIgUhsE7ec9eJxbTlCc
mESW5AhvGrV5VDWe+5KGCHrB1jzphAex1aQaLAJI930VBt9Z6L7qDKQnjxXyU7zy
+1UN4bfRoiZt0qQ20YFkUTAiacDNS+wRsiE37jIgKAYoVhQEstXmhapTenCrNKPG
vJ+uyIjkyAulPh3OHollNBeurqNejyM=
-----END CERTIFICATE-----
Generated at Fri Nov 7 02:28:53 2025 by rpki-client