Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/94cb1c41-ad3a-3afa-bf43-97f45742815b.roa
File:                     94cb1c41-ad3a-3afa-bf43-97f45742815b.roa (raw, json)
Hash identifier:          n/fSSKBHpRfbo8ceVtK10pmf4kuRVJzoON2OCBqwMX4=
Subject key identifier:   9D:BF:4D:1B:96:18:A1:E9:0C:D0:7D:08:67:0B:1C:D1:7D:D4:E9:24
Certificate issuer:       /CN=32652e19-5988-41fb-a45a-66b23c523f3b
Certificate serial:       010D0C9F4328584B9F9A024611FCE426967D70C0
Authority key identifier: AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/94cb1c41-ad3a-3afa-bf43-97f45742815b.roa
Signing time:             Fri 24 Oct 2025 02:31:32 +0000
ROA not before:           Fri 24 Oct 2025 02:31:32 +0000
ROA not after:            Thu 22 Jan 2026 03:31:32 +0000
asID:                     134176
IP address blocks:        142.248.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9f:9a:02:46:11:fc:e4:26:96:7d:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32652e19-5988-41fb-a45a-66b23c523f3b
        Validity
            Not Before: Oct 24 02:31:32 2025 GMT
            Not After : Jan 22 03:31:32 2026 GMT
        Subject: CN=b7a0e45d-958c-48fa-86d2-6697833621e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:db:bd:82:41:29:6f:62:47:6b:96:fe:5e:
                    e5:5f:57:e6:e2:af:e5:bf:ab:7d:12:06:8a:e0:4c:
                    4e:98:ad:d5:03:99:5f:83:c2:47:5a:e2:52:92:05:
                    5d:f2:0f:ce:06:40:ae:90:c4:fc:95:4c:3c:31:7d:
                    d5:ce:eb:6f:34:31:cf:80:5f:5b:a3:cf:f1:27:bb:
                    55:5c:29:57:f1:93:cf:ec:3c:cb:55:92:87:d4:b3:
                    51:33:0b:3a:61:0e:09:fc:ff:4d:f0:36:7f:37:0a:
                    85:08:7a:ac:f0:d1:2f:5a:28:f8:24:f7:00:c8:82:
                    e0:c5:30:1c:79:64:13:51:6d:32:7b:c7:dc:a7:5c:
                    71:7e:07:54:9f:86:25:51:22:64:c9:58:04:ee:16:
                    b1:c2:29:bb:71:e3:60:a2:7e:25:b3:98:d3:d3:ba:
                    45:52:bc:59:a1:3c:fe:9e:6b:1b:5a:a3:24:66:64:
                    b1:16:d6:9f:bc:d2:73:3b:3c:79:e5:45:ce:35:47:
                    3b:dd:1b:aa:cc:01:59:dd:d2:2a:ed:c5:d1:03:9e:
                    87:df:43:29:ac:fd:a6:36:2e:d2:a6:0c:1c:75:14:
                    ed:97:f2:76:d2:e7:39:da:93:d6:bb:18:0b:b2:20:
                    c4:8c:a4:f8:4c:e9:23:3f:80:7d:1c:f8:a9:d9:44:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:4D:1B:96:18:A1:E9:0C:D0:7D:08:67:0B:1C:D1:7D:D4:E9:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/94cb1c41-ad3a-3afa-bf43-97f45742815b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl

            X509v3 Authority Key Identifier:
                keyid:AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:04:60:e1:4f:02:b5:61:ff:cc:2a:7a:52:ab:2e:82:54:9c:
         68:07:db:82:c4:c6:41:8c:3b:59:26:bd:6f:2c:67:cb:36:6c:
         7b:ca:e6:c8:0a:50:83:b5:80:2c:2c:bf:e0:88:a8:39:54:23:
         c8:c0:0c:6c:99:ab:a6:c6:6e:eb:11:ca:1c:5d:f0:05:ad:3a:
         da:72:83:59:b2:3a:56:ea:51:60:7f:17:2e:8d:00:a6:e8:37:
         cd:8d:8b:2c:66:22:b1:55:d6:ac:0e:b3:04:8a:14:48:fe:ab:
         c0:ff:2d:7b:04:b4:a5:ad:05:78:10:e1:83:c2:fc:81:14:80:
         e6:fc:6d:06:a2:1e:9f:36:04:af:0f:9a:71:8a:da:ab:ad:a1:
         a4:40:24:46:eb:34:aa:58:e0:d6:e6:bb:50:73:20:eb:ae:57:
         27:37:25:11:de:c3:3d:81:8a:f1:b3:b5:8a:99:85:cc:43:f7:
         0f:c4:64:c3:7b:c1:3b:1e:c6:53:fd:6b:d8:29:1d:d3:6b:f1:
         95:ab:02:bc:a1:71:6d:5e:cc:a2:9e:29:c0:3e:3d:41:76:d1:
         9c:99:81:24:d2:a3:bc:b5:58:ca:75:d5:b0:c0:60:dc:b9:00:
         59:15:e1:c6:3b:36:34:38:39:d7:54:e8:de:f0:99:53:9f:61:
         e7:15:d2:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufmgJGEfzkJpZ9cMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI2NTJlMTktNTk4OC00MWZiLWE0NWEtNjZiMjNjNTIz
ZjNiMB4XDTI1MTAyNDAyMzEzMloXDTI2MDEyMjAzMzEzMlowLzEtMCsGA1UEAxMk
YjdhMGU0NWQtOTU4Yy00OGZhLTg2ZDItNjY5NzgzMzYyMWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKvbvYJBKW9iR2uW/l7lX1fm4q/lv6t9EgaK
4ExOmK3VA5lfg8JHWuJSkgVd8g/OBkCukMT8lUw8MX3VzutvNDHPgF9bo8/xJ7tV
XClX8ZPP7DzLVZKH1LNRMws6YQ4J/P9N8DZ/NwqFCHqs8NEvWij4JPcAyILgxTAc
eWQTUW0ye8fcp1xxfgdUn4YlUSJkyVgE7haxwim7ceNgon4ls5jT07pFUrxZoTz+
nmsbWqMkZmSxFtafvNJzOzx55UXONUc73RuqzAFZ3dIq7cXRA56H30MprP2mNi7S
pgwcdRTtl/J20uc52pPWuxgLsiDEjKT4TOkjP4B9HPip2URYUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2/TRuWGKHpDNB9CGcLHNF91OkkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMjY1
MmUxOS01OTg4LTQxZmItYTQ1YS02NmIyM2M1MjNmM2IvOTRjYjFjNDEtYWQzYS0z
YWZhLWJmNDMtOTdmNDU3NDI4MTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzI2NTJlMTktNTk4OC00MWZiLWE0
NWEtNjZiMjNjNTIzZjNiLzMyNjUyZTE5LTU5ODgtNDFmYi1hNDVhLTY2YjIzYzUy
M2YzYi5jcmwwHwYDVR0jBBgwFoAUrWJ7cveJh0NtZMJTwuOF0WzytQMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMjY1MmUxOS01OTg4LTQxZmItYTQ1YS02NmIy
M2M1MjNmM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvhwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkEYOFPArVh/8wqelKrLoJUnGgH24LExkGMO1kmvW8sZ8s2bHvK5sgK
UIO1gCwsv+CIqDlUI8jADGyZq6bGbusRyhxd8AWtOtpyg1myOlbqUWB/Fy6NAKbo
N82NiyxmIrFV1qwOswSKFEj+q8D/LXsEtKWtBXgQ4YPC/IEUgOb8bQaiHp82BK8P
mnGK2qutoaRAJEbrNKpY4Nbmu1BzIOuuVyc3JRHewz2BivGztYqZhcxD9w/EZMN7
wTsexlP9a9gpHdNr8ZWrAryhcW1ezKKeKcA+PUF20ZyZgSTSo7y1WMp11bDAYNy5
AFkV4cY7NjQ4OddU6N7wmVOfYecV0gI=
-----END CERTIFICATE-----
Generated at Fri Oct 24 17:09:51 2025 by rpki-client