Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8ad3cdc1-62e2-3053-9937-d20718ff3eac.roa
File:                     8ad3cdc1-62e2-3053-9937-d20718ff3eac.roa (raw, json)
Hash identifier:          kdrOSiHFSXxoIMsaJVKIGeIhXvNo/3I/jCwT5XQXKEs=
Subject key identifier:   E8:7A:71:97:5E:4A:85:D6:AD:A5:B9:95:07:ED:1C:B9:5A:22:03:84
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B9E07D4EF1DDD986908240300
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8ad3cdc1-62e2-3053-9937-d20718ff3eac.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     11427
IP address blocks:        139.177.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:d4:ef:1d:dd:98:69:08:24:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=d0967f34-8c3a-45ce-9ca0-9ee3630af244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:99:e9:ba:d2:42:da:a8:8a:06:a4:c2:72:f6:
                    e0:8a:2c:6b:fa:ef:f2:af:03:7f:78:3d:eb:1c:81:
                    84:bf:e7:2b:a5:7d:d6:54:7b:03:15:4b:cc:1c:63:
                    b9:eb:df:71:7e:2e:92:c2:5f:a3:d6:cb:b6:0e:f1:
                    e4:da:8d:07:9e:e5:20:3e:6b:9e:00:cb:e4:2f:67:
                    25:38:3d:be:96:78:ac:c1:50:05:6b:64:7c:5b:d0:
                    fa:89:9b:3d:53:68:a7:72:31:46:f8:5a:66:7d:b0:
                    96:c6:dd:1f:0e:1d:4d:0b:d4:05:94:e2:b1:93:a1:
                    11:7b:e5:e9:55:ab:45:2f:42:64:fe:1d:97:9a:a6:
                    43:08:a6:68:f7:24:f6:ff:5f:48:22:1f:cd:21:04:
                    c7:cf:3f:9d:98:c0:d9:20:3d:26:26:2c:8e:6b:b3:
                    dc:ca:5c:51:49:f7:3c:a5:9e:e2:64:e1:d4:2a:c5:
                    a5:ba:30:df:39:ee:a7:be:3d:7a:d5:64:d0:5c:eb:
                    76:6a:70:6a:3f:69:9b:66:ff:1b:e0:fc:33:4d:e2:
                    87:ef:3c:23:b1:39:f8:4f:b9:29:0d:77:56:d0:01:
                    43:1d:6c:54:b4:7c:68:55:02:1f:b3:10:76:04:d6:
                    68:99:45:41:7b:7b:b1:e4:71:31:86:af:9c:30:49:
                    73:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7A:71:97:5E:4A:85:D6:AD:A5:B9:95:07:ED:1C:B9:5A:22:03:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8ad3cdc1-62e2-3053-9937-d20718ff3eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b8:06:b1:52:10:a4:19:d2:bf:68:75:5b:c7:cf:1f:e2:9c:
         bc:4a:14:cb:b0:be:fc:0f:06:91:a2:cc:98:89:7e:81:66:ca:
         a0:d6:c6:28:b1:40:84:be:5a:6f:cd:d0:71:6b:e1:ec:61:6d:
         88:fa:cb:0d:a9:e8:6b:8d:ca:99:30:dc:e1:b6:5b:a4:a1:33:
         c4:dc:37:46:57:5a:19:c2:ed:4e:b4:1f:d9:65:5d:8a:ca:a8:
         3b:06:b3:1d:d7:63:36:02:13:c6:18:5d:9a:ad:67:0d:c8:e2:
         a5:8e:6a:a2:8d:a5:aa:ab:e1:02:37:0d:d2:f3:d4:4c:ee:bc:
         45:c6:23:39:d4:36:53:6a:dd:a8:e8:4b:72:5f:de:97:6f:b1:
         24:04:e5:17:49:10:76:da:15:ab:55:e9:32:89:35:38:84:81:
         f5:04:19:64:e6:63:1f:b6:4e:3d:3c:da:bf:5d:c4:89:00:f2:
         44:db:d1:f9:70:b8:fc:67:fe:f9:af:50:64:ae:59:c1:1a:48:
         6b:e0:0e:50:87:cc:6a:d4:7c:7b:e3:26:c3:65:40:59:63:c1:
         f9:d9:b1:2b:67:d5:a8:f0:12:31:81:e2:c4:42:92:ae:2f:1e:
         85:31:94:dc:83:d2:98:2f:fa:b4:9c:ad:2e:52:e4:92:8e:e5:
         d5:b3:13:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9TvHd2YaQgkAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
ZDA5NjdmMzQtOGMzYS00NWNlLTljYTAtOWVlMzYzMGFmMjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35nputJC2qiKBqTCcvbgiixr+u/yrwN/eD3r
HIGEv+crpX3WVHsDFUvMHGO5699xfi6Swl+j1su2DvHk2o0HnuUgPmueAMvkL2cl
OD2+lniswVAFa2R8W9D6iZs9U2incjFG+FpmfbCWxt0fDh1NC9QFlOKxk6ERe+Xp
VatFL0Jk/h2XmqZDCKZo9yT2/19IIh/NIQTHzz+dmMDZID0mJiyOa7PcylxRSfc8
pZ7iZOHUKsWlujDfOe6nvj161WTQXOt2anBqP2mbZv8b4PwzTeKH7zwjsTn4T7kp
DXdW0AFDHWxUtHxoVQIfsxB2BNZomUVBe3ux5HExhq+cMElzuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOh6cZdeSoXWraW5lQftHLlaIgOEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOGFkM2NkYzEtNjJlMi0z
MDUzLTk5MzctZDIwNzE4ZmYzZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE64BrFSEKQZ0r9odVvHzx/inLxKFMuwvvwPBpGizJiJfoFmyqDWxiix
QIS+Wm/N0HFr4exhbYj6yw2p6GuNypkw3OG2W6ShM8TcN0ZXWhnC7U60H9llXYrK
qDsGsx3XYzYCE8YYXZqtZw3I4qWOaqKNpaqr4QI3DdLz1EzuvEXGIznUNlNq3ajo
S3Jf3pdvsSQE5RdJEHbaFatV6TKJNTiEgfUEGWTmYx+2Tj082r9dxIkA8kTb0flw
uPxn/vmvUGSuWcEaSGvgDlCHzGrUfHvjJsNlQFljwfnZsStn1ajwEjGB4sRCkq4v
HoUxlNyD0pgv+rScrS5S5JKO5dWzE7M=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:15 2025 by rpki-client