Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e0de365b-b747-3588-b05c-0d348aab7dd3.roa
File:                     e0de365b-b747-3588-b05c-0d348aab7dd3.roa (raw, json)
Hash identifier:          +cpYcIyICVoVk5lhmSAMdjlq8D1EUF7WBsZdBigMQXk=
Subject key identifier:   A2:D8:38:3D:51:7F:F3:E1:23:16:E6:8E:C4:58:CA:A4:23:9A:07:96
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CFD2EE28649013D2DBE80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e0de365b-b747-3588-b05c-0d348aab7dd3.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        170.85.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:fd:2e:e2:86:49:01:3d:2d:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=26921954-b608-4a15-9786-8bea7d1d42ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:25:a4:9f:e5:ac:8c:88:06:24:75:af:0c:
                    e4:7a:9a:f3:02:12:01:0a:62:f4:2f:02:a6:7c:39:
                    39:22:c9:d9:cd:7a:8d:83:a0:af:d1:31:b6:07:a3:
                    d4:d9:2e:7c:21:10:6a:e8:42:15:36:91:a3:d2:ad:
                    c2:bf:ba:91:0a:ea:ab:b8:fe:ba:9a:ae:a4:c1:00:
                    69:8b:6d:a0:6d:23:e0:79:7a:17:15:94:f0:dc:f7:
                    11:6f:68:fa:0f:73:c4:cf:a5:a2:56:2d:cd:29:91:
                    6b:5a:8a:76:bb:ee:ea:17:10:62:a2:dc:be:2e:3f:
                    2b:bd:44:05:ad:06:ab:c9:eb:5e:03:3c:be:40:e2:
                    27:63:25:a3:2a:3c:fa:83:50:f3:dd:b1:81:5c:90:
                    55:f1:c6:8b:b2:18:d5:49:aa:44:6a:fa:05:34:6a:
                    65:27:44:e9:aa:43:db:77:35:8b:d8:21:6c:48:ae:
                    d8:57:f7:45:d1:a2:f3:d6:e0:fc:71:30:fa:78:e2:
                    ee:34:98:1c:01:f5:be:f9:c9:e2:1f:d2:97:97:08:
                    2f:40:26:fb:8d:b9:40:c7:b7:1b:cc:38:81:59:ba:
                    0a:11:7b:a1:4d:41:3a:ad:24:c3:53:8d:7b:28:65:
                    c4:39:1b:ad:c2:54:66:8f:31:fd:49:5f:93:03:f8:
                    2d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D8:38:3D:51:7F:F3:E1:23:16:E6:8E:C4:58:CA:A4:23:9A:07:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e0de365b-b747-3588-b05c-0d348aab7dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:4b:81:1f:b0:ee:56:c5:b5:3b:ee:db:88:dd:27:1e:55:20:
         75:ff:5d:62:90:3c:dc:2b:17:75:2b:f0:64:bd:8a:5d:0b:51:
         be:85:48:8c:45:05:f4:c3:28:c5:ec:73:04:69:f8:7d:0c:c7:
         b9:d8:6a:88:4b:54:77:31:20:cd:04:38:68:37:da:22:cf:e7:
         3d:03:98:0f:a1:0a:01:7f:5c:ea:15:f1:08:d7:1a:66:53:fa:
         01:3a:06:e6:54:e6:b9:a2:6e:c2:05:6d:5c:08:29:00:07:67:
         70:08:13:37:35:cd:07:83:1f:96:dd:92:dc:85:a7:4a:03:7d:
         63:fc:51:c7:e8:57:91:ec:9c:bd:f3:23:e8:79:3b:94:f0:cd:
         e6:7f:90:22:70:24:ed:29:95:12:b8:3e:ff:6a:7a:9e:49:7b:
         3a:90:b0:ed:45:ae:b7:c1:42:0d:aa:23:88:f0:73:25:82:fe:
         74:28:c7:e1:d7:69:ff:26:61:2e:6e:e9:68:9c:f8:bf:42:b6:
         9c:6d:8a:1c:6a:2f:f7:15:c0:98:5d:95:df:fa:2d:e7:34:74:
         55:e4:74:57:1d:21:80:36:57:f4:e0:95:91:43:82:04:ee:9f:
         6d:f5:07:f0:d2:b9:74:78:5d:f5:d3:bc:8d:f1:23:6b:8b:72:
         42:e4:9f:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP0u4oZJAT0tvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk
MjY5MjE5NTQtYjYwOC00YTE1LTk3ODYtOGJlYTdkMWQ0MmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaElpJ/lrIyIBiR1rwzkeprzAhIBCmL0LwKm
fDk5IsnZzXqNg6Cv0TG2B6PU2S58IRBq6EIVNpGj0q3Cv7qRCuqruP66mq6kwQBp
i22gbSPgeXoXFZTw3PcRb2j6D3PEz6WiVi3NKZFrWop2u+7qFxBioty+Lj8rvUQF
rQaryeteAzy+QOInYyWjKjz6g1Dz3bGBXJBV8caLshjVSapEavoFNGplJ0TpqkPb
dzWL2CFsSK7YV/dF0aLz1uD8cTD6eOLuNJgcAfW++cniH9KXlwgvQCb7jblAx7cb
zDiBWboKEXuhTUE6rSTDU417KGXEORutwlRmjzH9SV+TA/gtXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKLYOD1Rf/PhIxbmjsRYyqQjmgeWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTBkZTM2NWItYjc0Ny0z
NTg4LWIwNWMtMGQzNDhhYWI3ZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRLgR+w7lbFtTvu24jdJx5VIHX/XWKQPNwrF3Ur8GS9il0LUb6FSIxF
BfTDKMXscwRp+H0Mx7nYaohLVHcxIM0EOGg32iLP5z0DmA+hCgF/XOoV8QjXGmZT
+gE6BuZU5rmibsIFbVwIKQAHZ3AIEzc1zQeDH5bdktyFp0oDfWP8UcfoV5HsnL3z
I+h5O5TwzeZ/kCJwJO0plRK4Pv9qep5JezqQsO1FrrfBQg2qI4jwcyWC/nQox+HX
af8mYS5u6Wic+L9CtpxtihxqL/cVwJhdld/6Lec0dFXkdFcdIYA2V/TglZFDggTu
n231B/DSuXR4XfXTvI3xI2uLckLkn94=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:38:32 2025 by rpki-client