Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/785a4205-4996-3b2a-8868-b1a2fa94e3e1.roa
File:                     785a4205-4996-3b2a-8868-b1a2fa94e3e1.roa (raw, json)
Hash identifier:          kXkG8Wr2YFXlg1vf2eo4n+xB7EiB7GE6hCzLsBT8KRU=
Subject key identifier:   D5:D5:F5:57:ED:6B:65:C6:85:5D:E1:26:21:36:FB:28:03:9B:84:F1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA103DC703B9001483BA1900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/785a4205-4996-3b2a-8868-b1a2fa94e3e1.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     53607
IP address blocks:        66.62.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:3d:c7:03:b9:00:14:83:ba:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=4a4cc220-1e3a-4ed4-bc69-6c46225765e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:e4:aa:54:6b:a4:9f:27:ea:65:cd:c1:21:
                    99:10:12:56:80:0d:fe:61:91:16:8e:fb:fe:b8:72:
                    ec:66:6d:e7:f5:9b:fd:e6:12:2f:f6:48:ba:2b:b7:
                    42:ce:85:67:2f:c3:58:f8:08:c8:34:d7:88:f4:c3:
                    f1:cb:c7:03:e0:59:4f:71:3d:0f:9d:88:8a:ed:d2:
                    0d:83:3e:95:1f:bd:0d:e9:d9:26:92:eb:e3:aa:c3:
                    5f:56:0b:d9:1e:92:82:47:7e:09:74:81:d0:9b:3c:
                    90:43:4c:10:87:bf:3d:09:c4:85:ab:10:ad:39:13:
                    d0:e4:f6:64:8c:cb:77:cd:f1:d5:be:99:89:3b:8c:
                    9f:50:23:1e:49:e8:a8:19:27:49:f0:e1:66:d5:8f:
                    92:c2:54:a1:93:25:b3:96:6a:98:09:cc:2a:78:04:
                    7c:6f:a4:16:af:4a:46:fb:c1:d3:68:3e:32:65:cf:
                    da:40:a2:e5:c7:29:84:91:2e:fe:80:98:2f:73:c1:
                    12:46:44:37:e1:91:10:15:65:3c:36:8f:c1:c8:e6:
                    f8:bb:7c:3b:83:54:6d:fb:17:16:99:57:67:af:99:
                    b2:55:31:57:c5:6a:a2:28:ce:0f:66:ff:39:b4:61:
                    c0:c0:d4:91:d5:76:a7:c4:ae:f5:63:de:f5:1c:16:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D5:F5:57:ED:6B:65:C6:85:5D:E1:26:21:36:FB:28:03:9B:84:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/785a4205-4996-3b2a-8868-b1a2fa94e3e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a8:d2:3b:ce:ce:96:f6:dd:01:98:6f:cc:49:fb:7c:a3:54:
         41:e2:f4:46:32:51:29:63:62:54:55:72:a3:a6:2d:ff:5a:a2:
         7a:b1:7a:d6:3b:61:e3:3e:e1:9d:2b:97:22:e1:b6:a7:ef:37:
         36:ff:fd:ab:8b:4f:9a:26:ad:b0:63:24:60:09:9c:fe:c0:c3:
         c9:b0:b9:ff:ae:dc:bc:97:15:f6:96:68:9f:fd:e5:11:7d:d5:
         01:b7:f8:e2:06:21:e8:74:85:8a:93:ac:12:4a:b6:d8:fd:2c:
         14:c8:60:37:36:1d:2e:c3:d8:68:e2:d8:7b:b1:17:e4:26:00:
         49:f4:c3:7a:10:12:08:9f:96:ea:7a:aa:8d:8b:43:54:1c:dc:
         82:28:a2:41:6a:52:06:a9:f8:a8:bb:5c:51:24:3b:57:a1:c5:
         ca:df:49:3f:b3:bc:7c:0c:cb:d7:51:b4:23:a7:62:8c:ca:37:
         d6:81:a7:52:2e:fd:a8:47:a2:6e:04:be:e4:7a:db:eb:76:d8:
         2b:42:ed:a3:24:8b:fb:33:c2:51:be:25:32:e4:87:2e:a6:56:
         b3:17:dd:a3:13:86:b4:76:79:70:44:de:3f:51:a0:54:52:e7:
         3d:63:bc:c9:e0:d4:51:f6:09:bc:46:99:9e:68:4d:f9:4b:ff:
         a4:d0:b8:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6ED3HA7kAFIO6GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk
NGE0Y2MyMjAtMWUzYS00ZWQ0LWJjNjktNmM0NjIyNTc2NWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgnkqlRrpJ8n6mXNwSGZEBJWgA3+YZEWjvv+
uHLsZm3n9Zv95hIv9ki6K7dCzoVnL8NY+AjINNeI9MPxy8cD4FlPcT0PnYiK7dIN
gz6VH70N6dkmkuvjqsNfVgvZHpKCR34JdIHQmzyQQ0wQh789CcSFqxCtORPQ5PZk
jMt3zfHVvpmJO4yfUCMeSeioGSdJ8OFm1Y+SwlShkyWzlmqYCcwqeAR8b6QWr0pG
+8HTaD4yZc/aQKLlxymEkS7+gJgvc8ESRkQ34ZEQFWU8No/ByOb4u3w7g1Rt+xcW
mVdnr5myVTFXxWqiKM4PZv85tGHAwNSR1XanxK71Y971HBYUuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXV9Vfta2XGhV3hJiE2+ygDm4TxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNzg1YTQyMDUtNDk5Ni0z
YjJhLTg4NjgtYjFhMmZhOTRlM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQj5MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJuo0jvOzpb23QGYb8xJ+3yjVEHi9EYyUSljYlRVcqOmLf9aonqxetY7
YeM+4Z0rlyLhtqfvNzb//auLT5omrbBjJGAJnP7Aw8mwuf+u3LyXFfaWaJ/95RF9
1QG3+OIGIeh0hYqTrBJKttj9LBTIYDc2HS7D2Gji2HuxF+QmAEn0w3oQEgiflup6
qo2LQ1Qc3IIookFqUgap+Ki7XFEkO1ehxcrfST+zvHwMy9dRtCOnYozKN9aBp1Iu
/ahHom4EvuR62+t22CtC7aMki/szwlG+JTLkhy6mVrMX3aMThrR2eXBE3j9RoFRS
5z1jvMng1FH2CbxGmZ5oTflL/6TQuBA=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:03:11 2025 by rpki-client