Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3435d71b-d86c-363a-8b39-279305ba1e37.roa
File:                     3435d71b-d86c-363a-8b39-279305ba1e37.roa (raw, json)
Hash identifier:          MEAjTTgjKRocgI0hlOKmXk8iXJeAwl7qWi85Dv7/YhQ=
Subject key identifier:   8B:41:8F:87:77:08:7D:C5:E1:18:07:6E:90:73:A2:CA:E2:B1:62:C0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7B6AB50FDCDAE55238FC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3435d71b-d86c-363a-8b39-279305ba1e37.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16679
IP address blocks:        184.105.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:b6:ab:50:fd:cd:ae:55:23:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=f339a98a-a239-4eb9-8195-678e1dad91ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:31:c2:a1:10:76:60:a8:f4:46:aa:20:36:b5:
                    bb:8b:f0:50:6e:27:1e:c3:6b:6c:9f:2b:0c:b8:a9:
                    52:ca:6a:84:dc:c0:7e:33:80:72:b4:cd:bc:66:78:
                    eb:87:86:40:cf:f0:f0:25:ce:6b:61:ba:2e:50:75:
                    c9:23:90:8a:ea:59:45:36:69:4e:09:e6:5f:74:59:
                    b3:f6:7f:1b:95:9e:9d:14:87:4d:41:b5:34:39:52:
                    8e:86:92:80:59:8b:f7:06:83:e9:a5:a2:d6:60:f3:
                    64:db:e7:84:17:68:cc:7e:90:ac:da:84:bf:67:9b:
                    91:27:bd:d7:8f:e2:74:08:87:d0:78:a3:ef:44:7d:
                    e8:99:6d:0f:69:2e:a6:72:4e:45:35:96:de:10:e5:
                    1f:c0:fa:47:86:e5:ec:da:67:53:83:ba:34:b5:0a:
                    16:f4:fa:88:2f:1c:44:93:d0:31:a8:e8:b5:7c:88:
                    fa:98:95:7d:8f:a5:86:11:0d:f6:f5:a3:ec:39:e2:
                    e2:51:42:0f:a8:21:97:ab:bc:56:ec:bf:75:a5:37:
                    d4:49:a9:3f:43:fb:38:2a:64:28:d0:b9:53:be:5e:
                    59:1d:01:fc:7d:6c:98:22:45:fb:6a:45:62:38:4c:
                    fe:80:5e:12:e7:45:a6:33:45:6f:76:9a:b7:d7:cf:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:41:8F:87:77:08:7D:C5:E1:18:07:6E:90:73:A2:CA:E2:B1:62:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3435d71b-d86c-363a-8b39-279305ba1e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ec:4b:88:0e:7e:e5:25:06:e1:f5:1e:1a:27:58:dc:3c:e0:
         15:69:90:0d:3c:49:6b:c4:cf:03:94:a3:86:11:ca:a2:29:b1:
         24:7c:e5:39:42:20:cb:b5:93:4e:95:2c:fa:33:91:9c:98:19:
         6a:32:4b:be:6a:66:3d:15:ab:39:08:f7:b2:e1:01:5f:0e:e7:
         3f:a4:c3:fa:fc:a1:dd:1f:7f:ed:45:c6:e3:15:67:6e:99:c0:
         86:7e:15:a8:a6:1e:23:45:49:89:32:31:df:50:6f:91:a9:a3:
         07:94:45:16:77:16:98:e1:b8:51:dd:e0:3d:10:1e:51:a6:43:
         18:a5:96:86:c3:4c:e1:ef:52:28:ee:fb:b1:92:41:5c:df:7e:
         d7:72:38:23:f6:55:38:07:32:29:0b:df:98:bf:07:e5:2a:a9:
         ba:ac:f8:96:f3:49:22:23:03:20:97:c4:3e:a7:b2:51:e2:ad:
         ba:0c:5e:7b:3d:92:ce:f0:ec:6b:d7:49:87:cc:07:f9:7a:6d:
         30:72:d0:73:ac:83:35:a4:58:38:87:b1:93:85:fe:75:1b:01:
         05:3d:76:3c:49:f8:4c:6c:cb:3d:1d:0b:85:c8:76:bc:58:66:
         7b:d6:cb:47:6a:64:10:5d:8f:cf:9e:8d:4b:00:ec:c8:7d:bd:
         0e:a4:c6:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17arUP3NrlUjj8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
ZjMzOWE5OGEtYTIzOS00ZWI5LTgxOTUtNjc4ZTFkYWQ5MWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTHCoRB2YKj0RqogNrW7i/BQbicew2tsnysM
uKlSymqE3MB+M4BytM28Znjrh4ZAz/DwJc5rYbouUHXJI5CK6llFNmlOCeZfdFmz
9n8blZ6dFIdNQbU0OVKOhpKAWYv3BoPppaLWYPNk2+eEF2jMfpCs2oS/Z5uRJ73X
j+J0CIfQeKPvRH3omW0PaS6mck5FNZbeEOUfwPpHhuXs2mdTg7o0tQoW9PqILxxE
k9AxqOi1fIj6mJV9j6WGEQ329aPsOeLiUUIPqCGXq7xW7L91pTfUSak/Q/s4KmQo
0LlTvl5ZHQH8fWyYIkX7akViOEz+gF4S50WmM0Vvdpq3188eYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItBj4d3CH3F4RgHbpBzosrisWLAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzQzNWQ3MWItZDg2Yy0z
NjNhLThiMzktMjc5MzA1YmExZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGk4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIfsS4gOfuUlBuH1HhonWNw84BVpkA08SWvEzwOUo4YRyqIpsSR85TlC
IMu1k06VLPozkZyYGWoyS75qZj0VqzkI97LhAV8O5z+kw/r8od0ff+1FxuMVZ26Z
wIZ+FaimHiNFSYkyMd9Qb5GpoweURRZ3FpjhuFHd4D0QHlGmQxillobDTOHvUiju
+7GSQVzfftdyOCP2VTgHMikL35i/B+Uqqbqs+JbzSSIjAyCXxD6nslHirboMXns9
ks7w7GvXSYfMB/l6bTBy0HOsgzWkWDiHsZOF/nUbAQU9djxJ+Exsyz0dC4XIdrxY
ZnvWy0dqZBBdj8+ejUsA7Mh9vQ6kxpY=
-----END CERTIFICATE-----
Generated at Sat Nov 1 18:58:40 2025 by rpki-client