Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/ffda6e22-afe0-3ee5-b3da-845563c0e9b9.roa
File:                     ffda6e22-afe0-3ee5-b3da-845563c0e9b9.roa (raw, json)
Hash identifier:          otyoY76MIe1uAzv6k8+eYgIHbVgzgXumtNziysjSXHo=
Subject key identifier:   FD:1E:CB:9F:AC:33:9F:E3:3B:47:C5:C5:A4:D3:0C:44:07:02:A9:58
Certificate issuer:       /CN=92423726-3299-41c6-ba87-4e50313b1db9
Certificate serial:       010D0C9F4328584B95A78F23E35F9D5088441F80
Authority key identifier: 87:A9:5F:4F:27:C4:9A:63:F1:5E:69:98:38:10:DB:CA:DE:85:74:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/ffda6e22-afe0-3ee5-b3da-845563c0e9b9.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     17117
IP address blocks:        192.197.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/92423726-3299-41c6-ba87-4e50313b1db9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/92423726-3299-41c6-ba87-4e50313b1db9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:8f:23:e3:5f:9d:50:88:44:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92423726-3299-41c6-ba87-4e50313b1db9
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=3e0466d2-c800-4f92-acf7-f764babf93a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:af:3b:d6:93:b6:e1:1d:ca:41:95:e5:2c:9e:
                    16:2b:71:eb:76:ac:80:4c:78:ff:9b:a0:02:42:64:
                    5f:40:df:9f:84:a4:09:aa:e4:39:81:1f:55:b7:46:
                    b7:f8:01:2c:15:f5:e3:c1:f0:79:8a:e3:4c:4a:4d:
                    c8:a4:5c:97:45:9e:e9:19:8b:b7:13:e0:2a:1e:e0:
                    a7:fc:c3:4c:87:1e:0e:a0:64:30:a2:29:70:65:c6:
                    cf:55:83:fd:f6:0f:00:46:f0:e4:4e:a8:ee:47:23:
                    3e:ce:12:fd:60:7c:ac:03:ee:3a:75:04:ad:10:24:
                    a2:7b:35:66:ac:32:84:21:10:f5:6a:6c:c4:75:70:
                    95:6b:df:2b:56:b5:d8:e7:7b:9e:80:08:ab:7f:f7:
                    53:c9:9b:23:92:9a:32:01:c9:d1:b1:bd:90:28:e2:
                    c5:7c:a5:f4:e7:75:be:12:00:f3:68:f5:61:1e:82:
                    b0:bb:1a:29:64:7e:ab:17:a0:6f:ec:ee:af:a2:5d:
                    7b:04:2b:20:d3:aa:52:6b:d2:e1:eb:36:7d:2e:7a:
                    2d:80:c3:65:98:0d:4c:a6:cb:37:50:72:14:a4:b3:
                    d7:b1:b7:d5:60:7a:55:83:eb:f8:72:96:01:af:e0:
                    86:9b:95:65:71:59:7b:82:a6:a9:5c:10:7b:55:82:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1E:CB:9F:AC:33:9F:E3:3B:47:C5:C5:A4:D3:0C:44:07:02:A9:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/ffda6e22-afe0-3ee5-b3da-845563c0e9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/92423726-3299-41c6-ba87-4e50313b1db9.crl

            X509v3 Authority Key Identifier:
                keyid:87:A9:5F:4F:27:C4:9A:63:F1:5E:69:98:38:10:DB:CA:DE:85:74:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e3:99:51:cd:c7:ca:dc:57:e0:80:d2:ee:0f:3d:cb:93:7e:
         58:f6:26:63:9d:f8:0f:95:18:62:fd:e8:1e:65:76:d6:73:93:
         24:74:33:93:c1:66:ec:23:61:d4:9d:0e:7d:a3:9e:c8:87:40:
         47:f3:5b:d2:74:66:46:de:39:32:7f:b2:47:b7:69:33:c7:dc:
         c2:56:16:6e:5e:ef:2d:37:03:0d:45:20:59:a8:60:67:8d:64:
         6b:5c:34:9f:23:cf:60:67:06:3c:66:64:90:d6:3d:d3:9d:b2:
         6d:a7:49:2f:01:00:d3:70:5b:06:02:93:83:62:34:6f:a3:50:
         ef:89:e0:6f:de:5c:e7:ab:ae:04:1e:c2:5c:0f:97:b2:e6:67:
         6f:c3:e9:65:9e:f1:cc:28:c5:9e:1e:37:6c:4c:b9:01:49:00:
         84:26:45:9f:41:a0:26:b9:c9:ad:a0:7a:68:76:28:fb:e5:5b:
         96:c0:5d:18:e0:10:f4:3b:39:1c:d5:44:ea:85:a2:58:f6:03:
         2b:7c:19:16:b6:78:50:3a:64:99:79:d9:72:1e:37:e1:13:a0:
         60:06:eb:c9:4f:f9:d1:ca:4b:78:f1:35:0e:72:8e:e0:a1:c2:
         39:c3:b4:48:a5:2d:14:e3:6d:c3:4f:e3:46:eb:44:9b:20:97:
         12:e6:37:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp48j41+dUIhEH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI0MjM3MjYtMzI5OS00MWM2LWJhODctNGU1MDMxM2Ix
ZGI5MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
M2UwNDY2ZDItYzgwMC00ZjkyLWFjZjctZjc2NGJhYmY5M2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K871pO24R3KQZXlLJ4WK3HrdqyATHj/m6AC
QmRfQN+fhKQJquQ5gR9Vt0a3+AEsFfXjwfB5iuNMSk3IpFyXRZ7pGYu3E+AqHuCn
/MNMhx4OoGQwoilwZcbPVYP99g8ARvDkTqjuRyM+zhL9YHysA+46dQStECSiezVm
rDKEIRD1amzEdXCVa98rVrXY53uegAirf/dTyZsjkpoyAcnRsb2QKOLFfKX053W+
EgDzaPVhHoKwuxopZH6rF6Bv7O6vol17BCsg06pSa9Lh6zZ9LnotgMNlmA1Mpss3
UHIUpLPXsbfVYHpVg+v4cpYBr+CGm5VlcVl7gqapXBB7VYLp4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0ey5+sM5/jO0fFxaTTDEQHAqlYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85MjQy
MzcyNi0zMjk5LTQxYzYtYmE4Ny00ZTUwMzEzYjFkYjkvZmZkYTZlMjItYWZlMC0z
ZWU1LWIzZGEtODQ1NTYzYzBlOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTI0MjM3MjYtMzI5OS00MWM2LWJh
ODctNGU1MDMxM2IxZGI5LzkyNDIzNzI2LTMyOTktNDFjNi1iYTg3LTRlNTAzMTNi
MWRiOS5jcmwwHwYDVR0jBBgwFoAUh6lfTyfEmmPxXmmYOBDbyt6FdEYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85MjQyMzcyNi0zMjk5LTQxYzYtYmE4Ny00ZTUw
MzEzYjFkYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMVcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHjmVHNx8rcV+CA0u4PPcuTflj2JmOd+A+VGGL96B5ldtZzkyR0M5PB
ZuwjYdSdDn2jnsiHQEfzW9J0ZkbeOTJ/ske3aTPH3MJWFm5e7y03Aw1FIFmoYGeN
ZGtcNJ8jz2BnBjxmZJDWPdOdsm2nSS8BANNwWwYCk4NiNG+jUO+J4G/eXOerrgQe
wlwPl7LmZ2/D6WWe8cwoxZ4eN2xMuQFJAIQmRZ9BoCa5ya2gemh2KPvlW5bAXRjg
EPQ7ORzVROqFolj2Ayt8GRa2eFA6ZJl52XIeN+EToGAG68lP+dHKS3jxNQ5yjuCh
wjnDtEilLRTjbcNP40brRJsglxLmNzs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:07:16 2025 by rpki-client