Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/90345308-e872-3107-b670-b871b65a840e.roa
File:                     90345308-e872-3107-b670-b871b65a840e.roa (raw, json)
Hash identifier:          7xJFHxKvpRfknmSmftZrUEEK6w7BqRM/YLsElfUcW6s=
Subject key identifier:   97:5E:A7:F6:A7:A8:C0:E1:45:DF:27:79:23:85:5C:BF:19:77:35:11
Certificate issuer:       /CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Certificate serial:       010D0C9F4328584BBB759357D296476765107B80
Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/90345308-e872-3107-b670-b871b65a840e.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     7106
IP address blocks:        209.143.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:93:57:d2:96:47:67:65:10:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=049117de-052c-4ec1-bb56-24c75953baa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:8f:be:b3:df:2c:a7:62:0f:21:05:f7:5c:
                    54:13:06:a4:a8:f6:dc:8e:39:d3:45:fb:65:6b:90:
                    fe:86:61:52:95:df:7e:b3:cb:c9:93:47:53:84:97:
                    6f:0c:7d:76:c6:ce:c6:1d:ae:4b:5d:c4:41:63:3f:
                    df:5a:89:0a:92:5e:93:a8:cd:32:51:e5:5c:79:2c:
                    f0:01:d7:d4:28:cd:20:f2:9d:d6:3d:8a:41:1b:78:
                    38:96:cf:d7:d6:f9:7b:29:94:bd:13:24:c0:8a:3b:
                    a6:af:f9:fc:22:ff:fd:ae:57:32:22:49:9b:fc:19:
                    39:cb:4c:21:3a:2b:77:50:5a:44:b9:4a:20:8c:72:
                    68:65:f3:ee:e6:66:5f:f2:dc:c9:f9:04:dc:4b:4d:
                    c4:ea:3c:6a:03:42:b9:5a:49:c2:8c:9f:4b:5a:4b:
                    39:96:c4:f0:45:eb:37:ba:3b:64:0c:ab:44:6e:b1:
                    68:eb:39:a1:e4:d5:e1:60:0d:57:8d:3d:fd:10:84:
                    8d:c8:67:bb:d9:73:27:08:5f:65:ae:bd:77:2f:7d:
                    4b:36:67:f4:fa:45:c4:c5:e2:38:62:e9:a3:bf:e0:
                    26:e1:26:0f:61:65:00:0b:2a:c4:11:d6:63:a4:54:
                    ad:7c:32:32:2b:09:da:5b:ec:53:b4:05:35:7f:58:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5E:A7:F6:A7:A8:C0:E1:45:DF:27:79:23:85:5C:BF:19:77:35:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/90345308-e872-3107-b670-b871b65a840e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl

            X509v3 Authority Key Identifier:
                keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.143.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1a:8c:ad:fe:0a:8d:c5:5b:89:1b:b1:28:bb:0f:7f:8f:fd:
         56:2c:16:f2:9f:58:f3:6a:1e:4b:e6:ab:c8:42:e7:ac:cc:2b:
         5e:e4:e3:81:93:99:be:ee:44:53:9d:3f:9b:0f:11:c3:2b:2a:
         21:e0:41:cb:23:36:a8:a6:30:79:b1:fb:eb:ee:2a:ea:5d:59:
         d2:6e:6f:3e:0a:13:a6:5f:8e:00:6c:4b:1a:2d:96:53:c2:92:
         65:b9:1d:32:56:e6:30:2f:c2:ee:d3:bc:13:71:7b:1b:bf:ed:
         0a:fe:b1:e9:24:3e:4e:67:b2:bd:6d:73:76:d0:f0:9e:c5:3d:
         9d:f6:08:f1:6d:e0:00:5a:6c:6e:69:8c:67:1f:90:75:43:d4:
         fc:5f:06:f7:51:34:52:88:1f:7d:8c:2a:59:db:ce:d2:0e:92:
         99:39:8f:22:c6:02:68:35:00:1f:c2:0c:17:ee:43:77:74:08:
         c3:4b:8a:e0:5e:68:3c:5c:7d:7d:41:f4:66:37:64:c1:27:a8:
         16:68:53:4b:d0:de:c8:44:a2:b6:54:b4:f0:55:68:40:3d:a2:
         98:5f:d3:47:ba:67:b2:fd:93:df:e6:f5:e7:22:c4:da:83:a8:
         41:39:cc:2d:0a:50:d8:9f:e2:cf:fa:c8:0d:56:9d:af:36:68:
         66:bb:ff:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZNX0pZHZ2UQe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3YWUxMWQtNjI5Yy00NDQzLWJjMzctMmMzZWViZDA5
NDUzMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk
MDQ5MTE3ZGUtMDUyYy00ZWMxLWJiNTYtMjRjNzU5NTNiYWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/+PvrPfLKdiDyEF91xUEwakqPbcjjnTRftl
a5D+hmFSld9+s8vJk0dThJdvDH12xs7GHa5LXcRBYz/fWokKkl6TqM0yUeVceSzw
AdfUKM0g8p3WPYpBG3g4ls/X1vl7KZS9EyTAijumr/n8Iv/9rlcyIkmb/Bk5y0wh
Oit3UFpEuUogjHJoZfPu5mZf8tzJ+QTcS03E6jxqA0K5WknCjJ9LWks5lsTwRes3
ujtkDKtEbrFo6zmh5NXhYA1XjT39EISNyGe72XMnCF9lrr13L31LNmf0+kXExeI4
Yumjv+Am4SYPYWUACyrEEdZjpFStfDIyKwnaW+xTtAU1f1gtrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdep/anqMDhRd8neSOFXL8ZdzURMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMzdh
ZTExZC02MjljLTQ0NDMtYmMzNy0yYzNlZWJkMDk0NTMvOTAzNDUzMDgtZTg3Mi0z
MTA3LWI2NzAtYjg3MWI2NWE4NDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjM3YWUxMWQtNjI5Yy00NDQzLWJj
MzctMmMzZWViZDA5NDUzL2YzN2FlMTFkLTYyOWMtNDQ0My1iYzM3LTJjM2VlYmQw
OTQ1My5jcmwwHwYDVR0jBBgwFoAUVzrzYfnlwTsn5iE24vcdpWrauOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mMzdhZTExZC02MjljLTQ0NDMtYmMzNy0yYzNl
ZWJkMDk0NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0Y8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0ajK3+Co3FW4kbsSi7D3+P/VYsFvKfWPNqHkvmq8hC56zMK17k44GT
mb7uRFOdP5sPEcMrKiHgQcsjNqimMHmx++vuKupdWdJubz4KE6ZfjgBsSxotllPC
kmW5HTJW5jAvwu7TvBNxexu/7Qr+sekkPk5nsr1tc3bQ8J7FPZ32CPFt4ABabG5p
jGcfkHVD1PxfBvdRNFKIH32MKlnbztIOkpk5jyLGAmg1AB/CDBfuQ3d0CMNLiuBe
aDxcfX1B9GY3ZMEnqBZoU0vQ3shEorZUtPBVaEA9ophf00e6Z7L9k9/m9ecixNqD
qEE5zC0KUNif4s/6yA1Wna82aGa7/ws=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:22:48 2025 by rpki-client