Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/21e13021-2182-3be2-9216-a43a5b3dcfaa.roa
File:                     21e13021-2182-3be2-9216-a43a5b3dcfaa.roa (raw, json)
Hash identifier:          Q0WGf+MHT8kdDWqzNFlm/TIJBt+krCAdXP0RQPLvyac=
Subject key identifier:   F7:92:1F:AF:76:BC:EB:87:02:B8:99:91:83:4C:17:C4:5E:ED:CC:5A
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B196C145FA581EEF1633CBD80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/21e13021-2182-3be2-9216-a43a5b3dcfaa.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        170.114.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:14:5f:a5:81:ee:f1:63:3c:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=4916be85-263d-4507-99e6-9e6a8e4461de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:43:4f:95:06:6b:83:6f:72:a5:87:ea:13:
                    ed:75:cb:3f:c8:aa:72:88:5e:46:08:c9:55:ae:1c:
                    53:dc:a9:58:10:ba:70:7c:0d:2f:12:26:d8:f0:83:
                    7b:84:5a:14:aa:ca:87:90:24:1b:df:34:85:69:ab:
                    8d:89:63:a2:75:ac:d2:e6:31:5a:7e:2d:65:39:81:
                    e1:91:d3:c7:7d:c0:53:33:2d:a3:97:96:59:fe:62:
                    96:cc:d3:a4:01:52:c7:63:41:38:42:88:5f:aa:c8:
                    85:f5:31:b2:e8:56:41:bd:73:e9:d2:a7:9f:ae:27:
                    b6:ce:7c:b5:a1:d3:ac:7b:c9:7d:0b:c1:39:d1:d8:
                    33:23:0f:03:26:24:7b:d2:96:66:63:77:f2:9f:68:
                    36:ca:6a:2a:39:e6:b3:25:60:b8:20:d5:0d:52:bd:
                    10:8b:e0:bc:c1:fe:0c:1b:1d:7e:12:ab:e3:0b:b1:
                    dc:9d:ed:ab:38:52:ad:47:d4:33:c2:43:6d:2f:34:
                    20:c4:34:01:89:af:ce:3b:eb:7a:de:81:f9:53:cd:
                    c1:18:79:e7:93:f0:b0:1d:10:fd:71:63:b1:97:ed:
                    66:3a:a2:33:be:59:77:16:cc:8a:f6:e8:0c:1d:23:
                    e4:a6:8e:48:35:b4:6c:fc:78:71:01:36:7d:d3:ae:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:92:1F:AF:76:BC:EB:87:02:B8:99:91:83:4C:17:C4:5E:ED:CC:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/21e13021-2182-3be2-9216-a43a5b3dcfaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:2b:33:66:ba:3f:77:1e:7e:92:36:2b:3d:47:a6:5f:a7:88:
         8c:fe:2d:5d:e2:5c:20:cf:6d:28:d0:7b:55:34:15:48:e8:e5:
         a5:91:4a:b0:c7:8c:e5:4a:ed:93:2e:63:61:ac:ef:58:e2:70:
         83:b3:0b:5b:41:08:ee:c9:d1:22:c2:c7:76:89:43:c0:53:1a:
         d4:99:44:eb:3d:2b:a4:b3:f7:e0:8a:4f:a6:81:5f:b1:23:36:
         95:da:ac:4d:62:c6:49:ff:9d:d1:ec:1b:cd:42:56:74:97:51:
         87:e2:ec:52:7a:4f:f2:19:a2:0c:73:e4:81:73:aa:83:bb:9e:
         cc:93:bf:a9:a7:12:c7:bb:1f:bd:da:4b:8a:bb:d5:b4:cb:fa:
         5d:e4:68:64:58:7b:33:1b:09:1f:41:ec:e9:b3:eb:1c:c0:f0:
         2b:4f:56:67:92:5e:d5:ee:32:7f:56:da:b1:2a:02:34:0b:89:
         4d:fc:95:cf:d0:ef:5d:ba:fb:7a:5e:e8:3e:c9:04:6c:f2:50:
         aa:8e:9f:33:d7:26:39:ed:55:f7:e0:ba:54:58:b7:38:a2:67:
         ab:b1:4c:9e:40:c0:59:d7:28:ba:66:76:5a:a6:d9:25:80:4b:
         f5:e8:51:c0:55:79:c6:77:5d:28:52:a2:ec:2e:33:05:82:ee:
         e0:56:d5:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBRfpYHu8WM8vYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk
NDkxNmJlODUtMjYzZC00NTA3LTk5ZTYtOWU2YThlNDQ2MWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hlDT5UGa4NvcqWH6hPtdcs/yKpyiF5GCMlV
rhxT3KlYELpwfA0vEibY8IN7hFoUqsqHkCQb3zSFaauNiWOidazS5jFafi1lOYHh
kdPHfcBTMy2jl5ZZ/mKWzNOkAVLHY0E4QohfqsiF9TGy6FZBvXPp0qefrie2zny1
odOse8l9C8E50dgzIw8DJiR70pZmY3fyn2g2ymoqOeazJWC4INUNUr0Qi+C8wf4M
Gx1+EqvjC7Hcne2rOFKtR9QzwkNtLzQgxDQBia/OO+t63oH5U83BGHnnk/CwHRD9
cWOxl+1mOqIzvll3FsyK9ugMHSPkpo5INbRs/HhxATZ9065szQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPeSH692vOuHAriZkYNMF8Re7cxaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMjFlMTMwMjEtMjE4Mi0z
YmUyLTkyMTYtYTQzYTViM2RjZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnI6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYrM2a6P3cefpI2Kz1Hpl+niIz+LV3iXCDPbSjQe1U0FUjo5aWRSrDH
jOVK7ZMuY2Gs71jicIOzC1tBCO7J0SLCx3aJQ8BTGtSZROs9K6Sz9+CKT6aBX7Ej
NpXarE1ixkn/ndHsG81CVnSXUYfi7FJ6T/IZogxz5IFzqoO7nsyTv6mnEse7H73a
S4q71bTL+l3kaGRYezMbCR9B7Omz6xzA8CtPVmeSXtXuMn9W2rEqAjQLiU38lc/Q
7126+3pe6D7JBGzyUKqOnzPXJjntVffgulRYtziiZ6uxTJ5AwFnXKLpmdlqm2SWA
S/XoUcBVecZ3XShSouwuMwWC7uBW1aY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:52:44 2025 by rpki-client