Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa
File:                     92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa (raw, json)
Hash identifier:          YOVCnj0uFCrkM2jS14soTKhxsuoIZ9dCkQYZUWM1FlY=
Subject key identifier:   3B:DD:D2:31:F6:AB:94:E4:72:17:EF:10:11:82:AC:F9:8C:4C:F5:10
Certificate issuer:       /CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5
Certificate serial:       010D0C9F4328584B2A2C3A2F1ECEEC43798C0320
Authority key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     25813
IP address blocks:        192.252.0.0/21 maxlen: 24
                          207.231.176.0/20 maxlen: 24
                          208.65.4.0/22 maxlen: 24
                          216.9.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:3a:2f:1e:ce:ec:43:79:8c:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=cdcd1df9-efde-4b51-b2fc-20b74bdfa5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:f1:51:fa:f9:81:83:a5:15:90:6a:64:0f:
                    c8:be:ce:6e:7a:ca:12:54:f1:fe:fb:db:bc:61:d5:
                    ec:30:ec:1c:8e:e0:15:f7:e6:fd:bc:3b:34:87:19:
                    12:4c:85:ce:62:c2:58:28:dc:da:0a:69:6a:ee:bf:
                    02:77:1d:28:88:be:7f:9c:a2:9a:7a:95:e6:8e:79:
                    b9:b6:30:eb:5e:bb:f7:6f:5b:75:79:68:26:e0:d2:
                    a6:50:1b:9d:83:e4:40:34:92:db:39:b8:0a:53:55:
                    99:ce:f9:17:0a:73:c3:19:c3:59:fa:55:ce:80:bc:
                    0a:3f:75:a9:6f:61:44:e6:ef:5d:de:84:92:dc:ea:
                    6f:36:21:99:60:1e:71:3f:bd:89:0a:e4:21:62:51:
                    d3:3e:99:ca:54:40:2a:e1:1e:27:95:ce:bd:b9:66:
                    f2:16:70:9a:d6:c2:4a:c0:ac:7b:ab:df:30:0a:8b:
                    a8:04:49:8d:9a:43:8d:9f:81:9b:16:7f:d0:68:ba:
                    e7:6d:9a:fe:7b:87:d1:b7:10:d1:97:ca:22:ab:a9:
                    64:b7:ba:8a:d4:30:62:9d:6e:a6:eb:09:4c:88:1d:
                    f2:ca:bf:27:6f:88:43:24:c8:5c:9f:13:99:f5:4e:
                    64:32:34:a2:2c:54:c1:ff:3c:1a:8f:86:fb:8f:8f:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DD:D2:31:F6:AB:94:E4:72:17:EF:10:11:82:AC:F9:8C:4C:F5:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl

            X509v3 Authority Key Identifier:
                keyid:8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.252.0.0/21
                  207.231.176.0/20
                  208.65.4.0/22
                  216.9.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:d7:60:4e:6e:50:e7:d5:ba:19:aa:8f:3a:24:7a:cb:b6:
         81:18:84:5b:e9:01:bd:01:30:10:57:68:33:f6:04:65:69:9a:
         b1:e8:e8:49:e6:0e:38:63:7f:aa:fc:c2:21:f4:46:77:a1:d1:
         1c:8e:b1:cd:ab:85:9a:c8:35:03:13:19:ba:60:80:8d:88:dd:
         69:41:49:78:8c:75:0c:39:c9:a6:fb:bc:dd:76:2d:46:b0:bc:
         ee:9b:9d:a8:93:0d:a3:ab:71:6d:5a:50:74:d0:82:8b:c6:01:
         3b:d6:dc:a8:8e:6e:91:0e:47:8c:49:69:05:6c:b4:4c:57:b1:
         63:53:37:18:36:d9:c9:9e:dc:f8:14:6a:ff:be:95:31:df:57:
         b2:e4:d5:19:89:32:c6:84:d2:39:8c:41:61:bc:10:27:c2:5d:
         fe:4a:8f:cf:d6:10:59:bd:6c:59:1e:7b:bb:00:56:49:f5:98:
         9e:10:f6:cf:5c:a6:a7:7f:d1:78:23:d6:d2:e3:94:52:e5:45:
         c2:e1:a9:39:45:bf:7b:21:ca:3f:1b:09:c2:1f:04:7c:a4:23:
         0f:f0:f2:f0:15:cd:11:b0:05:63:cf:1d:dd:38:a8:48:ce:6b:
         18:28:ae:c5:51:83:98:61:71:f5:db:f4:b6:a3:3c:ec:91:4c:
         cb:1d:a8:e5
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEsqLDovHs7sQ3mMAyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJjOTQ1OTItNzNlOS00NTJlLWFkODgtYWFmYzhlM2Vl
N2E1MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
Y2RjZDFkZjktZWZkZS00YjUxLWIyZmMtMjBiNzRiZGZhNWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBTxUfr5gYOlFZBqZA/Ivs5uesoSVPH++9u8
YdXsMOwcjuAV9+b9vDs0hxkSTIXOYsJYKNzaCmlq7r8Cdx0oiL5/nKKaepXmjnm5
tjDrXrv3b1t1eWgm4NKmUBudg+RANJLbObgKU1WZzvkXCnPDGcNZ+lXOgLwKP3Wp
b2FE5u9d3oSS3OpvNiGZYB5xP72JCuQhYlHTPpnKVEAq4R4nlc69uWbyFnCa1sJK
wKx7q98wCouoBEmNmkONn4GbFn/QaLrnbZr+e4fRtxDRl8oiq6lkt7qK1DBinW6m
6wlMiB3yyr8nb4hDJMhcnxOZ9U5kMjSiLFTB/zwaj4b7j49jzwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFDvd0jH2q5TkchfvEBGCrPmMTPUQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMmM5
NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUzZWU3YTUvOTJlZTZhZDktMTFhYi0z
MTM2LTgxYTItODIwNGQ0MmMwZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjJjOTQ1OTItNzNlOS00NTJlLWFk
ODgtYWFmYzhlM2VlN2E1L2IyYzk0NTkyLTczZTktNDUyZS1hZDg4LWFhZmM4ZTNl
ZTdhNS5jcmwwHwYDVR0jBBgwFoAUi1izm4Qm8HXsOYvA8T1AHv13TxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZj
OGUzZWU3YTUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDwPwAAwQE
z+ewAwQC0EEEAwQE2AlwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH4x12BOblDn1boZqo86JHrLtoEYhFvp
Ab0BMBBXaDP2BGVpmrHo6EnmDjhjf6r8wiH0Rneh0RyOsc2rhZrINQMTGbpggI2I
3WlBSXiMdQw5yab7vN12LUawvO6bnaiTDaOrcW1aUHTQgovGATvW3KiObpEOR4xJ
aQVstExXsWNTNxg22cme3PgUav++lTHfV7Lk1RmJMsaE0jmMQWG8ECfCXf5Kj8/W
EFm9bFkee7sAVkn1mJ4Q9s9cpqd/0Xgj1tLjlFLlRcLhqTlFv3shyj8bCcIfBHyk
Iw/w8vAVzRGwBWPPHd04qEjOaxgorsVRg5hhcfXb9LajPOyRTMsdqOU=
-----END CERTIFICATE-----
Generated at Mon Sep 15 07:58:54 2025 by rpki-client