Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c360dff8-f394-3549-ab2b-fb0231324af8.roa
File:                     c360dff8-f394-3549-ab2b-fb0231324af8.roa (raw, json)
Hash identifier:          fnEImbYHiHdZQWM+vwyej7Ce4zn9Bey2S+WmlJPXciA=
Subject key identifier:   1D:FA:45:A4:7F:B1:50:7D:B5:C5:D7:9B:C6:80:1A:2C:31:67:CC:F7
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B2066D37EBD6D11EDF6C0C040
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c360dff8-f394-3549-ab2b-fb0231324af8.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        184.95.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d3:7e:bd:6d:11:ed:f6:c0:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=29b82273-b25b-4e7b-b697-e665d12af63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:97:ef:a5:47:e8:f9:6f:b7:d9:f4:15:4c:12:
                    b9:eb:de:b3:5e:3e:35:4a:6c:0c:9a:9d:3c:e8:6e:
                    ef:6c:ec:b4:c3:f0:d7:43:0f:4a:b0:82:da:46:fd:
                    6e:b4:2e:63:d6:ea:b0:b4:19:b6:66:1f:82:4e:38:
                    d1:6f:e9:e0:a8:58:a2:db:9a:53:5e:82:71:d2:80:
                    94:eb:21:7d:33:9d:97:d6:3c:56:83:f0:59:e3:70:
                    7a:a9:e8:04:35:ff:2f:f8:6c:ca:3e:90:35:40:48:
                    70:1a:fc:16:23:fe:42:27:68:52:d7:9b:a2:27:cf:
                    0f:6e:51:2e:9d:6c:22:3a:ea:7e:b4:47:b3:af:db:
                    52:cc:d6:f3:0c:03:bd:5e:aa:6f:83:c4:23:fd:e4:
                    b3:6e:a0:ae:e9:b5:ca:8e:31:01:48:46:a4:8f:18:
                    a6:bc:5b:ba:e4:db:12:79:f7:38:e5:96:50:19:cf:
                    9a:0d:f2:13:84:dd:ea:f4:d2:f4:20:10:f7:5c:31:
                    47:fb:aa:c8:56:92:a0:30:bb:6c:8f:1f:b0:d3:65:
                    11:ec:5d:24:86:24:43:ef:a7:da:1e:41:06:f3:32:
                    d8:48:8d:da:fa:b6:0b:b0:4f:53:70:d7:27:23:f0:
                    df:64:0a:38:a9:d6:89:41:37:e6:aa:0d:1c:fb:62:
                    6f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FA:45:A4:7F:B1:50:7D:B5:C5:D7:9B:C6:80:1A:2C:31:67:CC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c360dff8-f394-3549-ab2b-fb0231324af8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:cb:48:fe:8a:91:f4:63:4f:7d:e3:c3:1b:8d:32:fa:92:fd:
         d7:67:2d:e0:74:37:41:0b:af:d6:88:d2:d6:b5:bd:45:9f:de:
         a7:ba:11:be:8f:c2:87:70:e7:f7:2f:43:58:25:d2:f7:cf:c7:
         ab:f5:d5:f0:51:7f:a3:76:be:0d:c5:35:6b:ef:fc:d1:2a:df:
         78:a5:fb:59:73:3a:46:c9:be:e0:cb:3e:c4:5a:a0:34:a4:f9:
         d3:a6:f4:c7:54:b6:a5:91:24:54:7e:b8:04:0f:33:20:d7:49:
         4c:54:2d:38:2a:80:05:59:91:37:c2:ed:e3:3b:bd:67:35:f4:
         b3:7c:21:95:73:b2:a3:94:bd:06:83:1d:02:2a:cf:51:e8:aa:
         f3:18:6c:20:a3:9d:29:b5:89:1a:65:65:cf:b8:72:ad:85:1c:
         20:0b:86:8f:ce:ce:83:bc:87:27:b0:a3:d5:83:f8:77:56:ab:
         8b:a1:3f:02:21:b7:a4:98:fa:0e:09:55:b7:43:e1:45:80:71:
         20:89:89:1f:dd:e6:af:9d:e7:ed:a4:8e:1d:1c:9a:bb:75:4e:
         7e:c1:3c:ed:df:ed:62:e1:54:0b:7b:cf:55:8d:03:55:88:6c:
         b5:60:0e:e4:59:4d:61:ad:9f:58:2c:fd:1b:21:a0:63:59:d8:
         79:0e:7d:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtN+vW0R7fbAwEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk
MjliODIyNzMtYjI1Yi00ZTdiLWI2OTctZTY2NWQxMmFmNjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JfvpUfo+W+32fQVTBK5696zXj41SmwMmp08
6G7vbOy0w/DXQw9KsILaRv1utC5j1uqwtBm2Zh+CTjjRb+ngqFii25pTXoJx0oCU
6yF9M52X1jxWg/BZ43B6qegENf8v+GzKPpA1QEhwGvwWI/5CJ2hS15uiJ88PblEu
nWwiOup+tEezr9tSzNbzDAO9Xqpvg8Qj/eSzbqCu6bXKjjEBSEakjximvFu65NsS
efc45ZZQGc+aDfIThN3q9NL0IBD3XDFH+6rIVpKgMLtsjx+w02UR7F0khiRD76fa
HkEG8zLYSI3a+rYLsE9TcNcnI/DfZAo4qdaJQTfmqg0c+2JvwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB36RaR/sVB9tcXXm8aAGiwxZ8z3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYzM2MGRmZjgtZjM5NC0z
NTQ5LWFiMmItZmIwMjMxMzI0YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuF/PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzLSP6KkfRjT33jwxuNMvqS/ddnLeB0N0ELr9aI0ta1vUWf3qe6Eb6P
wodw5/cvQ1gl0vfPx6v11fBRf6N2vg3FNWvv/NEq33il+1lzOkbJvuDLPsRaoDSk
+dOm9MdUtqWRJFR+uAQPMyDXSUxULTgqgAVZkTfC7eM7vWc19LN8IZVzsqOUvQaD
HQIqz1HoqvMYbCCjnSm1iRplZc+4cq2FHCALho/OzoO8hyewo9WD+HdWq4uhPwIh
t6SY+g4JVbdD4UWAcSCJiR/d5q+d5+2kjh0cmrt1Tn7BPO3f7WLhVAt7z1WNA1WI
bLVgDuRZTWGtn1gs/RshoGNZ2HkOfXE=
-----END CERTIFICATE-----
Generated at Thu Sep 18 11:39:59 2025 by rpki-client