Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/23e6a20b-e27b-30b8-87a4-db82a1d3a865.roa
File:                     23e6a20b-e27b-30b8-87a4-db82a1d3a865.roa (raw, json)
Hash identifier:          ewUYw4xF+C//SaeBsxRxzbcMcnpw8FwYR2DUSiqJaNA=
Subject key identifier:   71:EB:C8:31:DA:C6:87:34:E8:54:13:99:D0:C8:4B:8D:70:FE:99:F6
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584BCD9B19B14AA40FCF8E9AB940
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/23e6a20b-e27b-30b8-87a4-db82a1d3a865.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        206.180.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:19:b1:4a:a4:0f:cf:8e:9a:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=9ec507b6-0468-4dcb-819e-3d7470a4f9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:0c:1d:af:6a:d3:73:13:21:6d:ff:af:d1:
                    f2:5a:d2:9c:08:88:a8:85:b3:b9:64:ae:a0:a1:05:
                    60:41:0c:80:64:0e:95:d6:1e:93:c3:71:a5:ca:26:
                    08:15:af:5e:ff:21:ea:12:5c:e6:3d:9b:44:29:c3:
                    7b:e8:6e:0e:79:ff:32:7a:85:c0:0f:c2:5f:e5:93:
                    db:9d:13:34:be:b7:fe:a8:aa:c1:f2:81:91:41:e5:
                    12:f5:b0:07:9a:fa:7d:1b:8d:2d:c3:0f:ed:d4:c3:
                    fb:36:97:0d:44:f7:1b:3a:82:1f:ed:92:f0:18:f0:
                    25:9c:44:05:b6:f3:16:7f:1d:a0:6d:22:93:89:ab:
                    5e:cc:96:4e:99:db:c1:d7:ed:fc:00:eb:82:6a:0e:
                    43:61:4b:72:04:9f:19:fa:71:ab:c4:91:57:fc:47:
                    6c:b6:e9:11:92:14:82:89:a9:d4:47:6e:c6:c7:93:
                    ec:30:81:16:9b:b0:1b:1a:8a:b4:e4:c8:fc:e6:86:
                    a6:02:4a:51:0c:1d:4f:c6:16:2d:bd:53:54:5b:8c:
                    2a:0f:04:cd:4f:02:5d:43:cc:9e:e6:08:4d:0d:c7:
                    69:72:1e:94:f4:7e:2f:49:61:1e:7b:f3:8c:e9:84:
                    fa:ef:58:c0:65:00:7e:fd:55:57:ab:8d:a6:0c:b0:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EB:C8:31:DA:C6:87:34:E8:54:13:99:D0:C8:4B:8D:70:FE:99:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/23e6a20b-e27b-30b8-87a4-db82a1d3a865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:88:f3:4a:52:de:10:b3:21:a6:94:9a:a6:52:af:b6:42:9f:
         07:e2:42:5b:59:53:4b:63:60:b9:a7:9f:48:ad:b4:17:42:ed:
         f5:f5:81:4f:5e:e1:e3:ac:81:6a:48:e7:8d:96:d4:ab:26:e4:
         24:d5:ab:f6:82:e7:76:cb:79:38:a4:ba:93:c3:12:fb:45:f3:
         eb:17:97:a2:ec:44:db:c3:3e:57:78:a2:3a:37:89:3c:98:72:
         bf:d2:7b:02:a5:89:d8:fc:b8:d7:96:c5:27:77:98:e3:4a:27:
         f7:1a:d0:45:1a:55:6c:7e:35:d1:91:ec:2c:24:c8:cc:e5:1c:
         e9:3a:6e:af:93:93:41:96:db:f5:ba:16:91:ff:e3:c3:99:78:
         75:79:e3:06:3d:b3:5f:97:28:1f:19:fb:e7:00:bb:3d:f7:a8:
         2b:6e:73:d6:71:91:59:bd:e2:d5:29:44:c8:00:23:b6:b6:58:
         73:2b:75:be:80:d9:5e:4c:d8:cd:c0:04:77:00:3d:4f:e6:61:
         3e:8d:be:d9:ef:f2:5d:f3:eb:a7:40:60:55:e4:75:b4:a6:59:
         a3:84:b4:d5:54:72:30:13:3b:90:b1:90:cb:77:09:3c:18:e1:
         70:f3:0c:31:c4:10:d4:45:ec:ce:ab:5a:6a:3a:3f:ec:f4:f4:
         13:ab:38:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxmxSqQPz46auUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk
OWVjNTA3YjYtMDQ2OC00ZGNiLTgxOWUtM2Q3NDcwYTRmOWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp4MHa9q03MTIW3/r9HyWtKcCIiohbO5ZK6g
oQVgQQyAZA6V1h6Tw3GlyiYIFa9e/yHqElzmPZtEKcN76G4Oef8yeoXAD8Jf5ZPb
nRM0vrf+qKrB8oGRQeUS9bAHmvp9G40tww/t1MP7NpcNRPcbOoIf7ZLwGPAlnEQF
tvMWfx2gbSKTiatezJZOmdvB1+38AOuCag5DYUtyBJ8Z+nGrxJFX/EdstukRkhSC
ianUR27Gx5PsMIEWm7AbGoq05Mj85oamAkpRDB1PxhYtvVNUW4wqDwTNTwJdQ8ye
5ghNDcdpch6U9H4vSWEee/OM6YT671jAZQB+/VVXq42mDLDNZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHryDHaxoc06FQTmdDIS41w/pn2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvMjNlNmEyMGItZTI3Yi0z
MGI4LTg3YTQtZGI4MmExZDNhODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzrScMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKI80pS3hCzIaaUmqZSr7ZCnwfiQltZU0tjYLmnn0ittBdC7fX1gU9e
4eOsgWpI542W1Ksm5CTVq/aC53bLeTikupPDEvtF8+sXl6LsRNvDPld4ojo3iTyY
cr/SewKlidj8uNeWxSd3mONKJ/ca0EUaVWx+NdGR7CwkyMzlHOk6bq+Tk0GW2/W6
FpH/48OZeHV54wY9s1+XKB8Z++cAuz33qCtuc9ZxkVm94tUpRMgAI7a2WHMrdb6A
2V5M2M3ABHcAPU/mYT6Nvtnv8l3z66dAYFXkdbSmWaOEtNVUcjATO5CxkMt3CTwY
4XDzDDHEENRF7M6rWmo6P+z09BOrONg=
-----END CERTIFICATE-----
Generated at Sun Nov 16 22:06:47 2025 by rpki-client