Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0ddae3db-d178-37d2-bf7e-b5ce1764fe07.roa
File:                     0ddae3db-d178-37d2-bf7e-b5ce1764fe07.roa (raw, json)
Hash identifier:          lg/yTdbOULSyhDRSzH6yEC2DBNn/T4pXJkc/6b4TUr8=
Subject key identifier:   8A:B2:60:B9:2B:16:14:22:84:A1:8B:3F:26:75:9E:90:4D:D6:98:8D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B95A7A164C670D35D044B1100
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0ddae3db-d178-37d2-bf7e-b5ce1764fe07.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     54004
IP address blocks:        104.37.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:a1:64:c6:70:d3:5d:04:4b:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=cdc1ed4c-7ff2-476e-9e3f-b452484bb53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:19:d7:a7:71:31:de:d4:02:94:d6:0e:b8:f8:
                    b4:3f:bb:2c:5b:1d:09:43:6c:5a:fe:a7:cf:de:20:
                    50:1f:17:29:80:92:40:9a:9c:78:41:a8:c9:54:09:
                    c7:5d:0b:9a:95:51:01:f5:23:21:5d:cc:42:72:63:
                    bc:12:b2:e5:86:76:b0:c8:1c:f9:10:f3:14:6f:32:
                    04:b7:54:25:91:ee:b5:fd:7d:39:61:be:5f:a0:8e:
                    42:8b:ca:a4:c3:3f:1a:f8:b4:82:06:d9:e9:9a:76:
                    12:d2:50:e6:49:97:9c:6d:97:03:75:5c:6e:b9:f8:
                    41:fe:43:46:fe:a2:b3:37:b2:b8:99:f3:c0:11:68:
                    18:58:06:27:ba:03:58:0e:37:28:dd:45:cd:12:5a:
                    00:9f:bd:b7:d5:2b:9f:32:cb:0b:f8:e8:30:83:42:
                    17:3d:61:55:da:8e:00:22:cc:fb:37:28:c5:30:ea:
                    30:46:b3:b2:02:7e:c8:24:69:93:a3:53:f5:98:57:
                    29:aa:62:bf:89:61:9e:f1:8b:20:9c:4f:3a:20:a7:
                    83:a9:5b:d9:07:10:bd:d8:51:8a:a7:7b:62:89:57:
                    8a:d3:f9:b5:47:28:94:96:46:b7:dd:2b:b7:74:c4:
                    2d:ab:04:b7:f9:7a:12:72:34:96:c3:b5:3a:cd:6c:
                    60:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B2:60:B9:2B:16:14:22:84:A1:8B:3F:26:75:9E:90:4D:D6:98:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0ddae3db-d178-37d2-bf7e-b5ce1764fe07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:05:b0:1f:bb:ea:66:f4:a6:7e:cb:14:76:c6:3e:d3:ca:c6:
         76:ab:1e:95:9a:00:81:24:bd:06:f0:f8:a3:29:b7:1f:c5:c3:
         a6:ad:25:9c:13:97:77:e7:b7:87:e9:2a:88:f3:97:4c:9f:fe:
         34:55:6a:de:16:9d:d5:e5:af:df:69:91:34:6d:55:93:ff:4e:
         e0:e6:cc:c0:a9:94:93:0f:09:f8:bc:f0:85:2f:3e:b3:d9:97:
         e8:e0:ec:4b:ca:b5:f9:16:be:0f:90:68:8c:1d:28:92:3d:7f:
         95:c8:8c:17:71:f2:26:8d:7b:0b:00:6a:8b:cb:8d:84:d7:9c:
         dd:6c:cc:32:0c:68:ab:0b:51:bd:d1:fd:84:11:8b:67:9f:bd:
         97:21:c7:ee:f9:92:bc:91:0d:7b:41:cd:b8:6d:ea:29:13:04:
         61:eb:d3:99:79:2f:97:08:c5:6d:80:01:b8:9e:0d:37:e1:d6:
         94:fe:ba:7f:b3:c5:e8:e8:6c:93:c1:ef:d2:65:9c:ba:35:48:
         08:46:00:d9:08:64:23:b3:e9:1a:36:aa:f1:10:7a:18:24:ac:
         42:f0:70:e8:60:c5:a5:a7:ea:58:f8:96:1c:49:b5:7c:3f:40:
         7a:b1:3e:3b:9a:49:bf:24:ad:91:07:95:24:53:20:81:b0:63:
         25:3f:df:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6FkxnDTXQRLEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
Y2RjMWVkNGMtN2ZmMi00NzZlLTllM2YtYjQ1MjQ4NGJiNTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hnXp3Ex3tQClNYOuPi0P7ssWx0JQ2xa/qfP
3iBQHxcpgJJAmpx4QajJVAnHXQualVEB9SMhXcxCcmO8ErLlhnawyBz5EPMUbzIE
t1Qlke61/X05Yb5foI5Ci8qkwz8a+LSCBtnpmnYS0lDmSZecbZcDdVxuufhB/kNG
/qKzN7K4mfPAEWgYWAYnugNYDjco3UXNEloAn7231SufMssL+Ogwg0IXPWFV2o4A
Isz7NyjFMOowRrOyAn7IJGmTo1P1mFcpqmK/iWGe8YsgnE86IKeDqVvZBxC92FGK
p3tiiVeK0/m1RyiUlka33Su3dMQtqwS3+XoScjSWw7U6zWxgbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIqyYLkrFhQihKGLPyZ1npBN1piNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGRkYWUzZGItZDE3OC0z
N2QyLWJmN2UtYjVjZTE3NjRmZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkFsB+76mb0pn7LFHbGPtPKxnarHpWaAIEkvQbw+KMptx/Fw6atJZwT
l3fnt4fpKojzl0yf/jRVat4WndXlr99pkTRtVZP/TuDmzMCplJMPCfi88IUvPrPZ
l+jg7EvKtfkWvg+QaIwdKJI9f5XIjBdx8iaNewsAaovLjYTXnN1szDIMaKsLUb3R
/YQRi2efvZchx+75kryRDXtBzbht6ikTBGHr05l5L5cIxW2AAbieDTfh1pT+un+z
xejobJPB79JlnLo1SAhGANkIZCOz6Ro2qvEQehgkrELwcOhgxaWn6lj4lhxJtXw/
QHqxPjuaSb8krZEHlSRTIIGwYyU/32s=
-----END CERTIFICATE-----
Generated at Wed Oct 22 08:24:30 2025 by rpki-client