Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/07e57758-edbb-30c8-9514-eabb5e646225.roa
File:                     07e57758-edbb-30c8-9514-eabb5e646225.roa (raw, json)
Hash identifier:          oKJ8iBC6mMm7bhv3N/JPvfM+ouDXRNcPBdqOIL9rkZs=
Subject key identifier:   DF:56:39:43:64:08:2B:AD:3E:E4:CC:0B:11:06:B6:D4:B8:1E:69:9E
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F4328584BA9325C404FC061DCAF6CCB90
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/07e57758-edbb-30c8-9514-eabb5e646225.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     36445
IP address blocks:        205.178.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:5c:40:4f:c0:61:dc:af:6c:cb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=7ff20ac7-7f82-4e32-86d1-53733b8e9ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:3e:85:be:83:f4:61:de:9a:8c:c0:f7:04:
                    f8:fc:ee:df:28:81:d3:61:30:6b:c6:43:f7:aa:05:
                    ca:bf:d1:b3:f1:95:22:1a:67:b3:f6:6b:b9:c5:38:
                    0f:9b:c0:ca:98:96:c4:3c:0a:13:c9:67:4c:89:1b:
                    2e:fa:4a:e2:36:05:b3:94:19:a0:e1:d9:2f:ec:41:
                    a9:e3:51:0d:d5:fc:37:03:91:90:e7:ab:6b:22:db:
                    cc:41:e1:f3:4f:ea:f7:fd:58:5e:e3:ef:35:71:e0:
                    18:c3:83:9e:2b:67:bc:5c:72:9b:5c:05:55:4e:4f:
                    1e:1e:06:75:5f:33:f3:97:bd:33:55:29:07:b0:5e:
                    65:67:91:5d:d7:20:b5:fe:1f:66:4c:70:b4:09:7b:
                    35:cd:f5:e0:89:72:46:4a:73:93:f9:c7:01:4f:0e:
                    de:77:a4:72:47:ac:31:41:29:a8:37:f3:2c:76:50:
                    a0:4d:c2:ad:39:de:d9:35:a6:21:38:5c:38:48:11:
                    15:5f:e1:83:7a:a9:b2:de:b3:28:3c:e9:6b:fa:bf:
                    24:03:fa:d5:e2:bd:48:1a:10:d4:3f:b6:04:a2:2c:
                    c1:a8:e7:1f:8a:44:3e:8f:1f:23:27:9e:1e:06:df:
                    a1:f2:51:dd:8d:06:72:79:3e:49:02:ee:8a:52:03:
                    23:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:56:39:43:64:08:2B:AD:3E:E4:CC:0B:11:06:B6:D4:B8:1E:69:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/07e57758-edbb-30c8-9514-eabb5e646225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.178.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:85:49:bd:47:b4:2e:3b:c8:3d:ed:11:97:1c:0d:2d:b7:6c:
         23:ca:e1:0f:7a:e0:8c:25:4b:93:9c:3b:e4:05:38:10:57:85:
         00:94:b2:03:6b:8c:f0:0a:12:4e:19:4b:52:f3:8b:7c:83:00:
         69:b7:eb:82:a8:3e:68:43:88:10:51:20:8c:2d:d7:9e:45:aa:
         5f:82:a5:cc:69:af:d7:ba:bc:53:de:4f:93:7f:ec:01:16:92:
         e0:e2:5f:f8:7e:c2:38:5b:64:c8:af:df:8f:ae:b5:b1:27:3e:
         32:d7:96:9a:51:73:4a:51:b8:16:bc:01:9f:f9:f3:f8:dc:47:
         26:77:0b:64:53:d6:ea:cf:ca:5e:0a:42:79:7c:40:b1:c9:f4:
         6a:07:f3:8e:66:ca:8d:ff:86:8d:36:01:c2:8c:53:af:6e:fc:
         ac:e8:d9:a5:38:a1:29:fd:58:74:2e:e9:00:43:af:40:21:f8:
         7d:35:21:65:99:16:c2:59:c0:fe:48:dc:19:03:e5:3b:54:d7:
         85:c1:62:12:ca:90:7e:d1:8e:12:04:b6:6a:ac:c9:66:5d:a6:
         fa:e8:62:07:aa:91:af:fc:75:e3:56:4a:77:3c:9e:71:13:f7:
         2a:9c:11:77:e1:1a:f8:44:60:27:51:28:ba:f9:e2:3b:19:00:
         db:cc:4a:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlxAT8Bh3K9sy5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0
Zjg0MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
N2ZmMjBhYzctN2Y4Mi00ZTMyLTg2ZDEtNTM3MzNiOGU5ZWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpo+hb6D9GHemozA9wT4/O7fKIHTYTBrxkP3
qgXKv9Gz8ZUiGmez9mu5xTgPm8DKmJbEPAoTyWdMiRsu+kriNgWzlBmg4dkv7EGp
41EN1fw3A5GQ56trItvMQeHzT+r3/Vhe4+81ceAYw4OeK2e8XHKbXAVVTk8eHgZ1
XzPzl70zVSkHsF5lZ5Fd1yC1/h9mTHC0CXs1zfXgiXJGSnOT+ccBTw7ed6RyR6wx
QSmoN/MsdlCgTcKtOd7ZNaYhOFw4SBEVX+GDeqmy3rMoPOlr+r8kA/rV4r1IGhDU
P7YEoizBqOcfikQ+jx8jJ54eBt+h8lHdjQZyeT5JAu6KUgMjTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9WOUNkCCutPuTMCxEGttS4HmmeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz
ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMDdlNTc3NTgtZWRiYi0z
MGM4LTk1MTQtZWFiYjVlNjQ2MjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx
MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj
NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0
ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzbK4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmFSb1HtC47yD3tEZccDS23bCPK4Q964IwlS5OcO+QFOBBXhQCUsgNr
jPAKEk4ZS1Lzi3yDAGm364KoPmhDiBBRIIwt155Fql+Cpcxpr9e6vFPeT5N/7AEW
kuDiX/h+wjhbZMiv34+utbEnPjLXlppRc0pRuBa8AZ/58/jcRyZ3C2RT1urPyl4K
Qnl8QLHJ9GoH845myo3/ho02AcKMU69u/Kzo2aU4oSn9WHQu6QBDr0Ah+H01IWWZ
FsJZwP5I3BkD5TtU14XBYhLKkH7RjhIEtmqsyWZdpvroYgeqka/8deNWSnc8nnET
9yqcEXfhGvhEYCdRKLr54jsZANvMSh4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:52:47 2025 by rpki-client