Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa
File:                     27ad11b4-e211-3ca4-a206-bd00c733729c.roa (raw, json)
Hash identifier:          ZkTwn5Dp4tkbzRxfuz2z8PzWPK+TF+FIMRBJg+nI+J0=
Subject key identifier:   F8:9A:61:87:A2:5D:72:5B:C9:82:26:3D:32:CB:C5:4D:5B:6F:8F:A5
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584BB45D0CE5BA60BB644AE537C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     213802
IP address blocks:        128.241.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:0c:e5:ba:60:bb:64:4a:e5:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=89986c03-e581-46de-ba62-be01aad7a8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:24:cc:99:03:cd:2a:ae:ba:77:65:9e:0e:
                    b1:d4:5f:ce:83:38:71:bb:dc:3a:b4:2b:3a:f3:f6:
                    16:95:9a:86:83:78:4e:5c:2c:15:88:c7:fd:58:52:
                    53:d1:92:8b:19:c2:fd:22:2a:c0:66:49:b2:d2:1f:
                    e0:6c:c6:f1:70:14:d0:11:44:9d:ae:63:58:f1:01:
                    e5:3a:82:38:76:dc:2e:85:46:b4:41:90:20:66:25:
                    09:f8:12:d4:99:f3:1c:69:37:26:de:04:86:5e:65:
                    da:12:e0:6e:70:57:43:f7:36:6e:12:33:93:2c:b9:
                    5e:be:4c:6a:e4:9e:2c:1c:65:43:80:d1:e5:90:3b:
                    ce:eb:0b:b7:41:0b:3d:06:6a:13:18:3a:71:67:6e:
                    ed:2a:d5:5c:8a:09:41:c5:31:cf:be:6b:15:54:9a:
                    19:9f:27:de:ad:12:af:7b:a1:09:27:02:eb:91:ab:
                    45:0b:db:5b:ca:c8:40:4c:b6:9f:f3:49:c5:02:01:
                    ae:d4:10:65:94:08:4f:58:18:f9:d2:88:73:be:52:
                    cb:ff:0a:a0:11:80:ba:c7:2b:98:79:27:a7:fd:18:
                    61:3e:e6:68:af:7e:21:7a:68:4f:dc:87:99:ef:fb:
                    23:3b:e8:be:f7:a0:e6:51:e2:43:cb:d9:db:df:1a:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9A:61:87:A2:5D:72:5B:C9:82:26:3D:32:CB:C5:4D:5B:6F:8F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:ec:f6:34:fd:11:1d:f9:b1:88:e5:ae:e5:bf:67:50:31:cf:
         8c:62:6d:b3:49:f0:ff:72:c8:ca:a7:ee:82:68:4a:15:c6:c9:
         3d:af:ac:28:ca:4e:1d:d2:01:f7:b7:af:72:15:82:c5:95:3f:
         43:51:fe:e0:f1:61:43:6b:fb:cd:34:b6:68:c2:09:85:7d:4f:
         23:2a:58:68:0f:3a:f9:d1:37:f6:b9:52:98:43:0e:3f:c6:ce:
         17:ce:3f:e2:39:cb:b0:8d:61:ec:e8:2f:d3:ee:be:f5:da:63:
         3b:9b:56:aa:d4:7a:61:52:94:c1:f3:dc:09:30:73:85:75:3e:
         93:15:72:ee:02:15:28:ad:73:01:12:66:5f:b3:9c:9c:82:2c:
         af:fe:dd:4d:da:6a:70:25:ef:84:cd:69:54:f4:48:a6:9b:5e:
         76:86:d6:1f:53:1b:4f:09:14:15:26:85:fc:1a:ea:64:10:3a:
         7d:32:33:c3:94:02:10:6a:67:31:42:7a:3c:98:50:ae:42:a3:
         4e:c0:df:46:88:eb:90:85:4e:2f:15:b3:10:31:16:3d:b8:46:
         3a:1e:ea:d6:e2:a3:7c:b5:e3:cf:ae:24:ea:fe:3d:d5:da:a9:
         0a:7d:2b:b5:88:83:e5:cd:50:12:34:ad:fe:a2:1f:4a:47:1b:
         9b:32:e1:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XQzlumC7ZErlN8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
ODk5ODZjMDMtZTU4MS00NmRlLWJhNjItYmUwMWFhZDdhOGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6okzJkDzSquundlng6x1F/Ogzhxu9w6tCs6
8/YWlZqGg3hOXCwViMf9WFJT0ZKLGcL9IirAZkmy0h/gbMbxcBTQEUSdrmNY8QHl
OoI4dtwuhUa0QZAgZiUJ+BLUmfMcaTcm3gSGXmXaEuBucFdD9zZuEjOTLLlevkxq
5J4sHGVDgNHlkDvO6wu3QQs9BmoTGDpxZ27tKtVciglBxTHPvmsVVJoZnyferRKv
e6EJJwLrkatFC9tbyshATLaf80nFAgGu1BBllAhPWBj50ohzvlLL/wqgEYC6xyuY
eSen/RhhPuZor34hemhP3IeZ7/sjO+i+96DmUeJDy9nb3xpxIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPiaYYeiXXJbyYImPTLLxU1bb4+lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjdhZDExYjQtZTIxMS0z
Y2E0LWEyMDYtYmQwMGM3MzM3MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgPHcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALrs9jT9ER35sYjlruW/Z1Axz4xibbNJ8P9yyMqn7oJoShXGyT2vrCjK
Th3SAfe3r3IVgsWVP0NR/uDxYUNr+800tmjCCYV9TyMqWGgPOvnRN/a5UphDDj/G
zhfOP+I5y7CNYezoL9PuvvXaYzubVqrUemFSlMHz3Akwc4V1PpMVcu4CFSitcwES
Zl+znJyCLK/+3U3aanAl74TNaVT0SKabXnaG1h9TG08JFBUmhfwa6mQQOn0yM8OU
AhBqZzFCejyYUK5Co07A30aI65CFTi8VsxAxFj24Rjoe6tbio3y148+uJOr+PdXa
qQp9K7WIg+XNUBI0rf6iH0pHG5sy4W0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:22:50 2025 by rpki-client