Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ef67335-eff8-3842-b9ed-0c83ef6fe40f.roa
File:                     1ef67335-eff8-3842-b9ed-0c83ef6fe40f.roa (raw, json)
Hash identifier:          D54gCRM+i119KmWqXqCrbNLZRS/BLbnPAjw9ComLgN4=
Subject key identifier:   E0:59:1A:A0:4A:62:65:7E:3B:0D:FD:50:CF:BE:D5:6F:AD:9E:3A:72
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B94C46441D4CF242FFCCE9B00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ef67335-eff8-3842-b9ed-0c83ef6fe40f.roa
Signing time:             Mon 20 Oct 2025 05:23:02 +0000
ROA not before:           Mon 20 Oct 2025 05:23:02 +0000
ROA not after:            Sun 18 Jan 2026 06:23:02 +0000
asID:                     834
IP address blocks:        172.111.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:c4:64:41:d4:cf:24:2f:fc:ce:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 20 05:23:02 2025 GMT
            Not After : Jan 18 06:23:02 2026 GMT
        Subject: CN=a51c7540-54ee-4527-8d92-e13e5f5565bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:27:73:5e:98:3d:8c:fa:c8:32:a2:bf:74:
                    72:8b:72:8f:4e:21:98:18:d6:8a:76:15:74:4e:c7:
                    e9:46:e8:67:fd:55:d7:94:c7:02:b9:35:a5:bd:5a:
                    9a:d3:dc:15:97:43:c9:2b:6b:6a:84:d9:d7:7a:76:
                    1b:e7:19:7c:df:1a:93:b9:05:87:7d:1b:c1:2f:42:
                    f6:3a:aa:b5:1b:e1:e5:ce:71:5b:1b:6b:27:b6:db:
                    fb:f2:e0:98:d8:6b:e7:12:87:f4:08:c2:60:29:f8:
                    74:a5:7a:76:e6:d0:6a:00:d2:87:f2:4d:bf:07:0b:
                    bc:09:a9:c5:fa:aa:1d:26:9e:29:58:fd:e4:ea:c2:
                    bf:2c:a0:b7:d8:41:d2:f1:c7:08:49:bf:30:ef:17:
                    de:75:20:ad:72:44:b7:5c:d4:1c:b6:8b:30:fe:7e:
                    f2:59:7e:2f:9b:58:19:6e:c2:53:02:50:c7:0f:2f:
                    5f:00:4f:ad:59:be:61:74:1a:7d:54:aa:d7:2a:75:
                    44:c4:06:6d:45:41:43:18:47:7f:f3:76:0b:3c:97:
                    c5:70:6e:23:b5:0b:52:af:5a:d6:e3:e5:5d:a9:03:
                    5c:0d:c5:18:36:13:0d:ce:39:b6:e2:9a:c8:02:fc:
                    f9:7e:42:5b:e6:49:fa:77:3f:71:fa:cd:55:f5:cd:
                    cd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:59:1A:A0:4A:62:65:7E:3B:0D:FD:50:CF:BE:D5:6F:AD:9E:3A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ef67335-eff8-3842-b9ed-0c83ef6fe40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:17:e2:b9:a0:2e:21:bf:8c:9a:30:9e:92:88:1f:f0:1f:80:
         fe:68:23:81:8d:86:07:d3:36:e2:02:96:ef:3a:22:4c:ab:8e:
         b4:72:9d:a6:3e:46:20:ca:2a:4a:16:67:91:a2:0d:00:5b:43:
         7b:14:9f:c9:dd:8e:02:0f:cf:b2:c9:2c:3b:4e:31:f5:33:3f:
         d8:f7:04:09:0d:b7:eb:d2:39:96:52:e2:64:f4:c0:95:f7:f3:
         81:07:55:fa:ba:a4:57:f8:d8:47:da:25:da:fd:40:ff:fa:01:
         e9:d1:e1:0d:22:86:de:15:2c:7c:35:49:40:ef:77:72:f5:30:
         59:dc:ee:a4:4b:5c:17:28:9a:d3:7b:78:b2:80:94:9d:26:c7:
         65:92:a0:1f:15:b3:ae:c7:4d:06:f1:9f:11:9a:b1:b3:34:2e:
         11:a9:85:8d:40:25:5f:24:e2:cd:ae:c3:a1:c2:f9:f9:35:e7:
         b8:04:d1:3f:24:c8:95:77:ad:d4:d9:6b:2f:d9:02:89:55:e8:
         a5:63:90:83:0c:06:61:3f:b4:c4:1d:78:c1:76:9a:07:41:3f:
         91:2b:02:a7:cb:c4:6a:45:e7:57:b7:a7:d7:81:d1:03:5e:0f:
         ed:36:c6:c9:da:a7:f1:cb:86:e2:13:96:0b:d4:a8:0f:55:86:
         05:5f:1a:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUxGRB1M8kL/zOmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MTAyMDA1MjMwMloXDTI2MDExODA2MjMwMlowLzEtMCsGA1UEAxMk
YTUxYzc1NDAtNTRlZS00NTI3LThkOTItZTEzZTVmNTU2NWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyEnc16YPYz6yDKiv3Ryi3KPTiGYGNaKdhV0
TsfpRuhn/VXXlMcCuTWlvVqa09wVl0PJK2tqhNnXenYb5xl83xqTuQWHfRvBL0L2
Oqq1G+HlznFbG2snttv78uCY2GvnEof0CMJgKfh0pXp25tBqANKH8k2/Bwu8CanF
+qodJp4pWP3k6sK/LKC32EHS8ccISb8w7xfedSCtckS3XNQctosw/n7yWX4vm1gZ
bsJTAlDHDy9fAE+tWb5hdBp9VKrXKnVExAZtRUFDGEd/83YLPJfFcG4jtQtSr1rW
4+VdqQNcDcUYNhMNzjm24prIAvz5fkJb5kn6dz9x+s1V9c3N6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOBZGqBKYmV+Ow39UM++1W+tnjpyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWVmNjczMzUtZWZmOC0z
ODQyLWI5ZWQtMGM4M2VmNmZlNDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFoX4rmgLiG/jJownpKIH/AfgP5oI4GNhgfTNuIClu86IkyrjrRynaY+
RiDKKkoWZ5GiDQBbQ3sUn8ndjgIPz7LJLDtOMfUzP9j3BAkNt+vSOZZS4mT0wJX3
84EHVfq6pFf42EfaJdr9QP/6AenR4Q0iht4VLHw1SUDvd3L1MFnc7qRLXBcomtN7
eLKAlJ0mx2WSoB8Vs67HTQbxnxGasbM0LhGphY1AJV8k4s2uw6HC+fk157gE0T8k
yJV3rdTZay/ZAolV6KVjkIMMBmE/tMQdeMF2mgdBP5ErAqfLxGpF51e3p9eB0QNe
D+02xsnap/HLhuITlgvUqA9VhgVfGuw=
-----END CERTIFICATE-----
Generated at Tue Oct 21 14:52:59 2025 by rpki-client