Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa
File:                     dde03462-bea1-3694-8eff-b21c9b05836f.roa (raw, json)
Hash identifier:          BLBHE/bo+ybKJ9SjAdxd2Dt8oeDquCYtby46Hb9GPiQ=
Subject key identifier:   7E:77:AB:A6:D0:E7:1B:5E:61:57:BA:3C:73:46:2B:F6:D0:FF:03:99
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584BB88D1C86895BA9976E49DA80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     1225
IP address blocks:        2001:418:3ff:4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:1c:86:89:5b:a9:97:6e:49:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=7fc18b63-0c4f-4b57-b49f-0ae42788d5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:87:06:0a:f8:00:11:00:c9:b2:8f:67:94:a6:
                    04:0a:9b:f0:1a:0c:fa:b6:35:6d:3d:26:09:a1:09:
                    49:f3:37:21:28:1a:77:ff:8b:45:2d:6c:a9:a0:52:
                    27:4d:ef:a6:23:5d:dd:68:94:d3:29:b7:ec:dc:ef:
                    6f:0f:67:30:de:21:56:0a:c6:7a:b8:f5:02:84:b5:
                    19:4f:86:85:c9:1b:2d:3c:d1:ff:4f:89:e3:02:06:
                    2a:19:2e:f2:c9:2d:6f:43:81:6b:06:89:b2:b5:57:
                    e1:3f:af:dc:15:d3:7c:95:41:c8:48:d3:64:e5:79:
                    ac:0f:e8:48:fc:7a:a7:81:12:35:3b:14:69:ba:0d:
                    35:6a:36:25:8b:02:cb:36:55:b3:7f:07:cd:a8:ff:
                    4c:91:b3:a5:b1:a3:7e:69:94:04:55:08:a6:51:33:
                    00:17:60:0f:85:16:04:a6:c2:f9:a8:a7:8f:80:d3:
                    de:b2:46:09:d8:a1:cc:6b:4f:b3:5e:88:c8:7c:4b:
                    75:f7:82:ea:a3:37:82:87:fb:b5:86:fa:46:95:88:
                    77:cd:ee:4a:4c:7a:f5:9b:64:bb:b6:5a:81:73:9b:
                    15:6b:a0:6a:18:4e:a9:42:54:b2:ca:dc:42:6a:74:
                    69:d5:6f:c9:7e:53:52:aa:51:67:a1:95:a2:44:0e:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:77:AB:A6:D0:E7:1B:5E:61:57:BA:3C:73:46:2B:F6:D0:FF:03:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:82:2f:16:92:19:aa:b6:cf:4b:a1:a6:c3:4f:5b:78:b1:
         bd:27:fd:38:56:e2:8d:26:c3:0e:63:a1:e3:46:55:26:63:4e:
         97:ca:05:31:da:23:84:d9:02:09:33:bb:ad:f3:74:85:b3:c8:
         3c:23:d4:92:27:a9:78:8f:72:89:66:a8:20:ea:79:a2:c8:c4:
         dc:f7:f2:09:0a:10:57:df:48:e3:6d:ed:25:ff:8d:01:65:14:
         69:be:65:56:70:aa:3f:5e:2f:c4:e3:57:00:26:52:3d:08:ec:
         ae:11:f3:31:14:7a:4f:b4:e0:97:3e:ee:a8:fc:c9:6c:12:4f:
         85:42:a3:fb:ca:a6:41:37:88:d7:2b:4f:e8:e8:98:81:f5:bf:
         d8:64:b7:42:c6:42:1c:b5:19:e0:bb:84:b3:40:51:f5:8f:94:
         7e:cb:5e:c7:02:4d:04:c6:c5:14:c1:98:71:25:a0:e5:ae:86:
         1a:83:6b:fb:3a:99:c8:dc:bd:22:b5:3a:78:c8:8d:3d:ea:66:
         45:71:c8:ea:b5:fc:68:44:3a:b7:f2:c5:1b:34:07:96:be:a7:
         39:ec:50:d2:7f:9a:6a:1d:81:72:61:eb:c8:f6:b5:28:28:34:
         bc:98:5c:db:01:37:12:31:57:ea:ef:d2:2e:c8:1f:72:21:52:
         56:6b:ef:a1
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEu4jRyGiVupl25J2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
N2ZjMThiNjMtMGM0Zi00YjU3LWI0OWYtMGFlNDI3ODhkNWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkocGCvgAEQDJso9nlKYECpvwGgz6tjVtPSYJ
oQlJ8zchKBp3/4tFLWypoFInTe+mI13daJTTKbfs3O9vD2cw3iFWCsZ6uPUChLUZ
T4aFyRstPNH/T4njAgYqGS7yyS1vQ4FrBomytVfhP6/cFdN8lUHISNNk5XmsD+hI
/HqngRI1OxRpug01ajYliwLLNlWzfwfNqP9MkbOlsaN+aZQEVQimUTMAF2APhRYE
psL5qKePgNPeskYJ2KHMa0+zXojIfEt194LqozeCh/u1hvpGlYh3ze5KTHr1m2S7
tlqBc5sVa6BqGE6pQlSyytxCanRp1W/JflNSqlFnoZWiRA7KqQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFH53q6bQ5xteYVe6PHNGK/bQ/wOZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGRlMDM0NjItYmVhMS0z
Njk0LThlZmYtYjIxYzliMDU4MzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAP/
AAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAMfKCLxaSGaq2z0uhpsNPW3ixvSf9OFbijSbDDmOh40ZVJmNO
l8oFMdojhNkCCTO7rfN0hbPIPCPUkiepeI9yiWaoIOp5osjE3PfyCQoQV99I423t
Jf+NAWUUab5lVnCqP14vxONXACZSPQjsrhHzMRR6T7Tglz7uqPzJbBJPhUKj+8qm
QTeI1ytP6OiYgfW/2GS3QsZCHLUZ4LuEs0BR9Y+UfstexwJNBMbFFMGYcSWg5a6G
GoNr+zqZyNy9IrU6eMiNPepmRXHI6rX8aEQ6t/LFGzQHlr6nOexQ0n+aah2BcmHr
yPa1KCg0vJhc2wE3EjFX6u/SLsgfciFSVmvvoQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:26:01 2025 by rpki-client