Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7142886a-d024-318c-bd7a-3afb8a3f2424.roa
File:                     7142886a-d024-318c-bd7a-3afb8a3f2424.roa (raw, json)
Hash identifier:          BMCxLqQZAWwuVX7GyOznzA1cFgQJZp/HpK2Q0dfGhU8=
Subject key identifier:   D7:23:2C:5D:F9:60:ED:9D:10:96:C0:D9:37:32:06:06:23:71:0F:FF
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584BAEC7C122C5EC1BD570B87080
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7142886a-d024-318c-bd7a-3afb8a3f2424.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     54004
IP address blocks:        24.246.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:c1:22:c5:ec:1b:d5:70:b8:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=9e384a3a-f7ea-4787-bfdb-827438924dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:c3:f5:2d:fc:b6:72:67:a5:70:bf:16:0a:
                    63:9e:f9:b9:94:22:e6:cf:cd:3b:48:8b:d1:80:07:
                    f0:7d:d4:b4:39:89:04:d0:c7:fa:4e:48:11:4f:a0:
                    65:35:2d:3a:b0:e3:ea:d6:58:c4:0e:fc:b9:d2:28:
                    8c:c7:b5:c4:26:55:0a:0e:09:ff:12:59:86:fc:c8:
                    77:82:35:df:45:5a:64:14:3b:b5:b7:b9:7d:d8:c6:
                    76:8f:18:ab:34:be:92:3c:a5:4f:c4:47:d1:92:c3:
                    e5:e2:b7:18:49:ab:05:de:21:bb:2d:24:6a:0b:d3:
                    fb:32:ab:37:a0:70:bd:8a:58:f2:6f:90:20:c4:ea:
                    71:65:ea:a2:31:6a:08:cc:18:bc:88:3f:72:41:a5:
                    51:21:ef:ac:4f:2a:2e:86:ca:50:66:36:fb:8d:4f:
                    ac:ee:29:53:01:7b:c2:e3:a1:b1:f4:98:b0:19:4f:
                    4e:c3:d4:ef:b9:e9:06:71:2c:a8:54:bd:32:51:70:
                    48:c5:1d:da:ca:bc:64:f3:d3:f3:7b:0a:bb:8e:a2:
                    c5:d5:fd:fd:45:60:39:80:94:a4:36:63:e9:4f:19:
                    44:df:c6:b0:fe:60:1f:56:1f:6b:5f:9d:a9:25:df:
                    dd:f6:fa:5a:80:74:91:07:60:4c:3a:3d:f7:39:8b:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:23:2C:5D:F9:60:ED:9D:10:96:C0:D9:37:32:06:06:23:71:0F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7142886a-d024-318c-bd7a-3afb8a3f2424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.246.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:af:ac:f6:da:d0:17:d3:f1:ed:4f:91:35:dc:3a:41:5d:
         ce:88:14:23:9c:b3:25:f7:79:9f:56:ad:aa:09:84:15:e3:93:
         f2:73:a5:ae:62:2e:06:aa:48:93:52:87:e0:a7:f8:1c:32:61:
         fc:5a:36:5e:00:01:73:97:b0:65:13:69:b9:cf:17:30:ed:c8:
         98:38:28:d5:5a:09:4d:6a:1c:9b:49:b1:8d:7f:17:84:69:5e:
         f3:01:cb:3c:22:25:38:a0:a2:ac:6a:c4:83:23:ce:6e:39:09:
         7c:bc:17:87:02:2e:a8:72:0c:40:e4:54:d1:77:9f:4a:c5:c4:
         91:86:a4:30:c9:af:7a:c9:a9:ac:bc:e0:e8:ca:ac:7f:e8:09:
         65:d9:e8:cc:ef:2e:c4:65:04:35:91:09:c9:81:43:a6:08:1e:
         7c:81:6c:6e:f6:df:f3:f2:b6:c2:e7:d4:29:b8:f2:c9:64:dc:
         f2:56:22:de:c5:2f:02:61:e0:39:cd:86:90:2b:b6:eb:dd:6f:
         4f:c1:cd:93:68:4d:ad:b7:ce:f5:43:88:5b:2f:f5:af:bc:53:
         f3:36:5d:ec:1f:16:39:d2:28:b4:a1:29:3e:ce:f8:6a:c0:15:
         9c:1d:36:56:92:c3:9a:84:f5:c1:40:5f:1e:01:10:f1:53:81:
         08:12:66:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8Eixewb1XC4cIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk
OWUzODRhM2EtZjdlYS00Nzg3LWJmZGItODI3NDM4OTI0ZGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk83D9S38tnJnpXC/Fgpjnvm5lCLmz807SIvR
gAfwfdS0OYkE0Mf6TkgRT6BlNS06sOPq1ljEDvy50iiMx7XEJlUKDgn/ElmG/Mh3
gjXfRVpkFDu1t7l92MZ2jxirNL6SPKVPxEfRksPl4rcYSasF3iG7LSRqC9P7Mqs3
oHC9iljyb5AgxOpxZeqiMWoIzBi8iD9yQaVRIe+sTyouhspQZjb7jU+s7ilTAXvC
46Gx9JiwGU9Ow9TvuekGcSyoVL0yUXBIxR3ayrxk89Pzewq7jqLF1f39RWA5gJSk
NmPpTxlE38aw/mAfVh9rX52pJd/d9vpagHSRB2BMOj33OYuMhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNcjLF35YO2dEJbA2TcyBgYjcQ//MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNzE0Mjg4NmEtZDAyNC0z
MThjLWJkN2EtM2FmYjhhM2YyNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPZrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIg9r6z22tAX0/HtT5E13DpBXc6IFCOcsyX3eZ9WraoJhBXjk/Jzpa5i
LgaqSJNSh+Cn+BwyYfxaNl4AAXOXsGUTabnPFzDtyJg4KNVaCU1qHJtJsY1/F4Rp
XvMByzwiJTigoqxqxIMjzm45CXy8F4cCLqhyDEDkVNF3n0rFxJGGpDDJr3rJqay8
4OjKrH/oCWXZ6MzvLsRlBDWRCcmBQ6YIHnyBbG723/PytsLn1Cm48slk3PJWIt7F
LwJh4DnNhpArtuvdb0/BzZNoTa23zvVDiFsv9a+8U/M2XewfFjnSKLShKT7O+GrA
FZwdNlaSw5qE9cFAXx4BEPFTgQgSZgA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:54:01 2025 by rpki-client