Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/5118fc9b-6363-3863-bd2d-86930b41977b.roa
File:                     5118fc9b-6363-3863-bd2d-86930b41977b.roa (raw, json)
Hash identifier:          pV0IktRd0f6jFF7KGNJZwy8VlAxB+BlxTdcoDEvurcI=
Subject key identifier:   2A:89:67:F8:BA:00:A5:C8:70:08:2F:E0:80:04:7B:BD:91:F9:B7:A7
Certificate issuer:       /CN=2162682b-5ac3-45f6-9093-042c8ec00a00
Certificate serial:       010D0C9F4328584B1806D746C7AB255DBDDB78C0
Authority key identifier: 0D:0F:07:1A:C3:70:53:BD:82:A3:E3:5C:44:0E:1D:2F:24:47:B7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/5118fc9b-6363-3863-bd2d-86930b41977b.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     53561
IP address blocks:        158.51.88.0/23 maxlen: 24
                          207.167.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/2162682b-5ac3-45f6-9093-042c8ec00a00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/2162682b-5ac3-45f6-9093-042c8ec00a00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d7:46:c7:ab:25:5d:bd:db:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2162682b-5ac3-45f6-9093-042c8ec00a00
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=2ffd110d-a9c5-4857-9ef3-f7b69f808b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:a2:18:99:49:e9:b2:67:31:2a:3e:6d:99:
                    ea:c8:67:bc:1b:f5:6c:93:92:bc:b1:3b:bb:d3:ea:
                    59:32:72:2e:05:6b:72:67:99:b8:45:7f:f4:c3:3e:
                    a2:da:4d:a6:71:8e:26:92:d9:2b:60:05:29:6a:ee:
                    64:22:87:bf:03:de:4e:c9:90:60:34:b4:a0:b2:99:
                    5a:58:26:c1:fe:84:88:5e:38:91:42:35:62:8f:74:
                    20:05:77:13:d4:ce:76:db:f1:46:16:7f:eb:cf:73:
                    bc:e7:9f:55:a8:11:9a:c1:ed:9e:3b:7a:b8:3c:22:
                    b9:8e:12:b7:e3:26:a1:e8:c7:8d:44:b7:51:50:5b:
                    51:96:22:5f:b9:d9:82:4b:eb:3b:ba:cf:07:a3:a0:
                    69:fe:5e:30:11:ab:df:4a:36:e3:cf:d6:d8:67:bb:
                    58:68:f4:f7:64:cd:e7:aa:52:54:fa:8b:c4:09:da:
                    16:ad:90:97:0d:a7:a0:f1:c7:3f:6d:ce:d8:23:f9:
                    84:7c:4a:4b:09:57:c6:30:04:9a:33:0f:e5:1d:7a:
                    4f:21:34:a7:a2:69:dc:76:b6:35:14:14:77:df:ba:
                    2c:fd:a4:e8:e5:dd:63:59:99:e6:76:c4:cc:83:17:
                    55:1b:05:23:af:c0:1d:ab:ff:f9:bb:3f:2c:ef:2e:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:89:67:F8:BA:00:A5:C8:70:08:2F:E0:80:04:7B:BD:91:F9:B7:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/5118fc9b-6363-3863-bd2d-86930b41977b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/2162682b-5ac3-45f6-9093-042c8ec00a00.crl

            X509v3 Authority Key Identifier:
                keyid:0D:0F:07:1A:C3:70:53:BD:82:A3:E3:5C:44:0E:1D:2F:24:47:B7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.88.0/23
                  207.167.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4b:44:f1:20:44:9d:47:17:db:4c:bc:28:38:7b:74:c3:09:
         ce:7b:4d:44:5d:9f:85:d1:97:df:63:a8:4e:c6:eb:1f:2e:a7:
         73:3a:b7:ae:31:ac:17:0b:57:97:c5:0f:10:ef:e8:d2:d4:05:
         8c:4b:22:13:3e:ae:73:1d:ce:25:e0:f1:90:87:40:41:8a:6a:
         16:31:d0:df:41:38:9b:b4:d9:63:68:2e:88:7e:50:ec:97:47:
         ea:a8:da:6b:a8:4d:e0:b1:0c:d7:f1:c4:23:f2:f2:8b:e8:5c:
         4f:cd:8f:77:f6:ed:a8:51:d2:0c:aa:f5:a4:03:04:98:58:4f:
         8d:74:f6:97:16:1b:02:18:c5:21:ce:03:ae:57:10:69:69:5d:
         4a:08:d4:36:ca:5b:f5:09:12:c7:db:e0:c1:32:14:7a:c8:80:
         b5:c8:99:d8:48:4f:07:87:f1:2d:b3:26:d7:ab:75:da:58:79:
         9c:b1:1f:ad:9e:68:cc:11:2a:26:84:c6:ec:a1:90:cb:32:9b:
         55:86:0a:75:55:72:93:1d:45:ec:e2:0a:31:a5:fd:fd:40:07:
         84:70:a7:0a:ed:3d:40:4d:68:a6:bd:43:6c:15:a8:1e:cb:c2:
         3a:75:8e:da:fc:cd:ce:cc:de:2e:f0:84:e2:19:42:3e:59:7d:
         8a:dc:b0:3a
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsYBtdGx6slXb3beMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjE2MjY4MmItNWFjMy00NWY2LTkwOTMtMDQyYzhlYzAw
YTAwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MmZmZDExMGQtYTljNS00ODU3LTllZjMtZjdiNjlmODA4YjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1KiGJlJ6bJnMSo+bZnqyGe8G/Vsk5K8sTu7
0+pZMnIuBWtyZ5m4RX/0wz6i2k2mcY4mktkrYAUpau5kIoe/A95OyZBgNLSgspla
WCbB/oSIXjiRQjVij3QgBXcT1M522/FGFn/rz3O8559VqBGawe2eO3q4PCK5jhK3
4yah6MeNRLdRUFtRliJfudmCS+s7us8Ho6Bp/l4wEavfSjbjz9bYZ7tYaPT3ZM3n
qlJU+ovECdoWrZCXDaeg8cc/bc7YI/mEfEpLCVfGMASaMw/lHXpPITSnomncdrY1
FBR337os/aTo5d1jWZnmdsTMgxdVGwUjr8Adq//5uz8s7y7RKwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCqJZ/i6AKXIcAgv4IAEe72R+benMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMTYy
NjgyYi01YWMzLTQ1ZjYtOTA5My0wNDJjOGVjMDBhMDAvNTExOGZjOWItNjM2My0z
ODYzLWJkMmQtODY5MzBiNDE5NzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjE2MjY4MmItNWFjMy00NWY2LTkw
OTMtMDQyYzhlYzAwYTAwLzIxNjI2ODJiLTVhYzMtNDVmNi05MDkzLTA0MmM4ZWMw
MGEwMC5jcmwwHwYDVR0jBBgwFoAUDQ8HGsNwU72Co+NcRA4dLyRHtzcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMTYyNjgyYi01YWMzLTQ1ZjYtOTA5My0wNDJj
OGVjMDBhMDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnjNYAwQC
z6dkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFdLRPEgRJ1HF9tMvCg4e3TDCc57TURdn4XRl99jqE7G6x8u
p3M6t64xrBcLV5fFDxDv6NLUBYxLIhM+rnMdziXg8ZCHQEGKahYx0N9BOJu02WNo
Loh+UOyXR+qo2muoTeCxDNfxxCPy8ovoXE/Nj3f27ahR0gyq9aQDBJhYT4109pcW
GwIYxSHOA65XEGlpXUoI1DbKW/UJEsfb4MEyFHrIgLXImdhITweH8S2zJterddpY
eZyxH62eaMwRKiaExuyhkMsym1WGCnVVcpMdReziCjGl/f1AB4RwpwrtPUBNaKa9
Q2wVqB7Lwjp1jtr8zc7M3i7whOIZQj5ZfYrcsDo=
-----END CERTIFICATE-----
Generated at Fri Sep 19 16:07:34 2025 by rpki-client