Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/35004e6a-5b7a-3715-94cd-50fae5247ec3.roa
File:                     35004e6a-5b7a-3715-94cd-50fae5247ec3.roa (raw, json)
Hash identifier:          1tvLFVL7HvmI5ZEhKV/ACfGiXt3zd4ouE+CiAMeAtaQ=
Subject key identifier:   96:FA:05:BD:4A:10:16:FD:22:BA:76:90:30:50:27:C6:4B:4C:A6:61
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584BB45D2EC8F599B7775A46DFA0
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/35004e6a-5b7a-3715-94cd-50fae5247ec3.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     53334
IP address blocks:        104.153.198.210/32 maxlen: 32
                          104.153.198.211/32 maxlen: 32
                          104.153.198.212/32 maxlen: 32
                          104.153.198.213/32 maxlen: 32
                          104.153.198.214/32 maxlen: 32
                          104.153.198.215/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:2e:c8:f5:99:b7:77:5a:46:df:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=29212922-cc38-4dfb-a74d-85b4e716a4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:3b:5b:29:e9:30:85:d4:cd:86:25:a1:c8:
                    d1:2b:5c:0e:31:b9:34:0a:73:2c:0f:0e:c7:10:a7:
                    45:86:02:dc:ce:e3:b7:3f:92:78:15:40:8e:26:df:
                    e2:7b:f9:17:6a:1f:4b:68:97:85:1e:70:38:43:76:
                    d3:2b:b4:ca:fe:5e:a3:ec:64:54:69:38:9b:e7:ad:
                    38:f4:75:5a:65:ef:06:05:37:cb:22:17:1a:63:d3:
                    10:5a:dc:24:9f:d3:b1:60:d3:fb:37:6a:0b:59:d7:
                    24:36:70:5c:6b:3a:02:32:9e:c7:fc:9e:e5:2d:44:
                    6c:32:5b:4d:f1:3c:be:49:19:88:f3:78:3b:a4:86:
                    2b:79:27:1c:20:21:1c:84:53:64:d1:3f:82:24:fe:
                    26:7a:66:69:7d:17:b6:e6:99:81:8f:60:65:42:a3:
                    f2:55:94:b7:66:12:78:76:d0:1e:d2:01:4f:ef:1a:
                    3c:1a:aa:61:29:bd:05:32:17:93:66:e7:7d:a3:16:
                    18:37:ab:ce:91:b9:81:42:cf:58:5d:a8:50:16:b7:
                    cf:16:bf:d5:0b:57:ca:0b:9d:3b:16:2e:f0:ab:27:
                    a3:13:f0:9c:58:39:0c:15:1a:8c:b1:46:78:40:9b:
                    c8:08:03:8a:05:3c:20:bb:5e:ec:3f:f9:ab:a9:9f:
                    71:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FA:05:BD:4A:10:16:FD:22:BA:76:90:30:50:27:C6:4B:4C:A6:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/35004e6a-5b7a-3715-94cd-50fae5247ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.198.210-104.153.198.215

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c2:af:c8:33:6c:76:27:3f:f7:9e:3d:a0:57:fe:44:18:0c:
         3e:9a:0d:7c:d3:98:66:24:2f:b3:f9:62:18:67:15:4a:dc:ee:
         45:12:a7:b5:34:d5:df:3b:93:c7:0f:66:1c:16:89:22:2c:3e:
         ea:a2:a7:1a:4c:dc:b2:ac:35:39:53:80:95:5b:04:44:06:c1:
         05:87:f0:cb:ad:15:f9:0e:3d:15:d4:eb:31:21:de:b7:f3:e5:
         60:4e:92:f7:53:0f:50:57:20:34:40:f9:39:7c:9f:02:b3:ee:
         9d:77:6b:d8:45:5b:be:3b:54:19:e4:a0:31:d8:96:49:6f:5b:
         95:8c:86:13:b5:cc:7a:50:4a:e5:ac:46:51:34:93:57:36:7c:
         2d:5a:bd:0f:db:c2:52:a3:99:bb:45:01:dd:88:5a:dc:66:13:
         7c:d7:7a:e8:80:44:75:3a:10:81:60:03:fa:a8:83:7d:79:ec:
         52:45:01:5e:4a:96:a5:72:b4:db:53:05:67:17:e1:01:53:57:
         83:b8:f8:ad:ce:42:0c:fa:4b:41:e0:d5:59:91:69:0b:79:23:
         e3:09:1c:f3:20:3f:7f:03:3e:bb:32:cd:52:71:b9:6e:6f:6e:
         1e:03:ab:a1:e0:81:b5:dc:f0:4d:ad:31:6a:ca:14:bb:71:c5:
         9b:3c:df:36
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWEu0XS7I9Zm3d1pG36AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FhYmFjZGMtNjQxOS00OTcwLTgyOTgtYzdjNDRmZjhj
OGQ0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
MjkyMTI5MjItY2MzOC00ZGZiLWE3NGQtODViNGU3MTZhNGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSM7WynpMIXUzYYlocjRK1wOMbk0CnMsDw7H
EKdFhgLczuO3P5J4FUCOJt/ie/kXah9LaJeFHnA4Q3bTK7TK/l6j7GRUaTib5604
9HVaZe8GBTfLIhcaY9MQWtwkn9OxYNP7N2oLWdckNnBcazoCMp7H/J7lLURsMltN
8Ty+SRmI83g7pIYreSccICEchFNk0T+CJP4memZpfRe25pmBj2BlQqPyVZS3ZhJ4
dtAe0gFP7xo8GqphKb0FMheTZud9oxYYN6vOkbmBQs9YXahQFrfPFr/VC1fKC507
Fi7wqyejE/CcWDkMFRqMsUZ4QJvICAOKBTwgu17sP/mrqZ9xoQIDAQABo4IDXzCC
A1swHQYDVR0OBBYEFJb6Bb1KEBb9Irp2kDBQJ8ZLTKZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFi
YWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0NGZmOGM4ZDQvMzUwMDRlNmEtNWI3YS0z
NzE1LTk0Y2QtNTBmYWU1MjQ3ZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2FhYmFjZGMtNjQxOS00OTcwLTgy
OTgtYzdjNDRmZjhjOGQ0LzdhYWJhY2RjLTY0MTktNDk3MC04Mjk4LWM3YzQ0ZmY4
YzhkNC5jcmwwHwYDVR0jBBgwFoAUSi2qGuvjHkLhZSpd8g0bkQM72TswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFiYWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0
NGZmOGM4ZDQuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAATAQMA4DBQFomcbS
AwUDaJnG0DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQBGwq/IM2x2Jz/3nj2gV/5EGAw+mg1805hmJC+z+WIY
ZxVK3O5FEqe1NNXfO5PHD2YcFokiLD7qoqcaTNyyrDU5U4CVWwREBsEFh/DLrRX5
Dj0V1OsxId638+VgTpL3Uw9QVyA0QPk5fJ8Cs+6dd2vYRVu+O1QZ5KAx2JZJb1uV
jIYTtcx6UErlrEZRNJNXNnwtWr0P28JSo5m7RQHdiFrcZhN813rogER1OhCBYAP6
qIN9eexSRQFeSpalcrTbUwVnF+EBU1eDuPitzkIM+ktB4NVZkWkLeSPjCRzzID9/
Az67Ms1Scblub24eA6uh4IG13PBNrTFqyhS7ccWbPN82
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:31:44 2025 by rpki-client