Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/801e07c1-9e3c-343d-ae07-b98a25a8b56f.roa
File:                     801e07c1-9e3c-343d-ae07-b98a25a8b56f.roa (raw, json)
Hash identifier:          kLSiH76fE0p0QEoa2aiRI3tGYbD8N7hlb9exuuynbz0=
Subject key identifier:   00:4C:C6:C9:DD:2A:03:1E:20:DB:87:17:17:6B:17:8D:09:7A:72:6C
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584BBAA8DA82EA01C45F0095A140
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/801e07c1-9e3c-343d-ae07-b98a25a8b56f.roa
Signing time:             Sun 02 Nov 2025 19:08:16 +0000
ROA not before:           Sun 02 Nov 2025 19:08:16 +0000
ROA not after:            Sat 31 Jan 2026 19:08:16 +0000
asID:                     20473
IP address blocks:        172.84.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:a8:da:82:ea:01:c4:5f:00:95:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Nov  2 19:08:16 2025 GMT
            Not After : Jan 31 19:08:16 2026 GMT
        Subject: CN=7d8ff10a-e77a-4541-ba53-accc336a7508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:bf:8b:98:d5:78:98:2d:ff:16:6b:37:ca:3a:
                    52:b2:1c:09:ac:e7:3c:ba:50:be:56:1d:3d:ab:5e:
                    22:cb:39:c5:5a:d8:87:2d:5e:7d:70:1f:70:d2:e4:
                    34:ca:5d:34:d3:82:ad:43:e6:14:f8:bc:99:8c:a3:
                    58:90:0a:b8:1d:56:13:0b:f1:05:68:7e:6a:19:0f:
                    df:78:5c:4a:6b:c0:49:09:6a:1f:bb:85:6b:44:c3:
                    35:96:f9:6d:a1:7c:af:2f:d6:db:32:1b:3e:b3:35:
                    c7:9e:ec:8d:fc:42:7f:75:83:be:32:6b:20:2a:b8:
                    3b:69:fc:99:00:9e:b8:76:8f:a1:6a:89:44:9e:1d:
                    1e:76:e8:d2:78:4f:69:d8:66:61:a2:34:94:91:23:
                    d9:46:25:ee:3b:de:6d:d8:a7:e0:4d:b5:d7:d6:22:
                    91:37:43:5e:7f:97:27:33:19:fc:89:56:a2:d6:e2:
                    ba:9d:58:49:f4:b4:f6:32:9f:3d:72:c8:05:09:cf:
                    43:8d:64:7a:da:ab:02:21:ff:66:4c:e9:b5:be:2d:
                    cf:c5:6f:4a:74:4a:54:c4:14:a1:69:53:95:fa:65:
                    6a:6a:b8:f9:48:82:e9:20:be:12:6a:66:38:b2:5d:
                    d2:41:77:7a:ab:f8:9a:5c:0c:2a:14:28:c6:9f:e5:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4C:C6:C9:DD:2A:03:1E:20:DB:87:17:17:6B:17:8D:09:7A:72:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/801e07c1-9e3c-343d-ae07-b98a25a8b56f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:79:69:a1:42:74:00:b3:02:27:87:7e:e8:3c:40:44:b4:
         ed:fa:41:b3:68:f4:a0:be:04:49:d6:01:9b:73:bf:0e:1a:29:
         45:86:a7:87:74:de:e6:86:dd:f2:78:fe:57:72:89:03:f9:a7:
         75:94:ac:b8:5b:42:b4:f5:f2:f4:5c:21:d5:63:ff:95:59:71:
         a7:27:83:ed:79:24:93:6e:07:e2:e8:d2:60:97:04:37:5f:68:
         81:ca:b7:2d:93:0e:1b:40:fa:4b:00:d1:94:28:04:e5:4f:38:
         4c:d1:09:b5:d3:b2:33:00:52:52:f5:66:27:49:33:f7:70:a2:
         6e:1a:4e:bc:c9:02:2d:4f:cf:f1:21:2e:b1:e1:20:3e:14:d9:
         51:da:c2:dd:51:72:26:fa:44:f2:22:a5:5a:40:9f:13:df:12:
         a0:72:e9:91:c8:9b:3e:6d:f5:26:f3:c1:9e:3e:26:c1:6f:10:
         26:cb:c4:d7:93:0b:89:49:ae:61:fd:60:e9:75:86:57:8e:f3:
         a7:cf:df:2b:95:0a:65:f4:04:3f:c5:0c:4c:02:e7:3b:bd:97:
         60:09:69:7f:4d:b0:6c:cd:3e:7b:29:fd:00:1c:cf:9c:a1:71:
         7a:0c:1f:66:52:ef:3b:dc:ce:3a:3b:f7:27:db:05:3e:e6:9e:
         b5:4b:33:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6qNqC6gHEXwCVoUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz
NGQ2MB4XDTI1MTEwMjE5MDgxNloXDTI2MDEzMTE5MDgxNlowLzEtMCsGA1UEAxMk
N2Q4ZmYxMGEtZTc3YS00NTQxLWJhNTMtYWNjYzMzNmE3NTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97+LmNV4mC3/Fms3yjpSshwJrOc8ulC+Vh09
q14iyznFWtiHLV59cB9w0uQ0yl0004KtQ+YU+LyZjKNYkAq4HVYTC/EFaH5qGQ/f
eFxKa8BJCWofu4VrRMM1lvltoXyvL9bbMhs+szXHnuyN/EJ/dYO+MmsgKrg7afyZ
AJ64do+haolEnh0edujSeE9p2GZhojSUkSPZRiXuO95t2KfgTbXX1iKRN0Nef5cn
Mxn8iVai1uK6nVhJ9LT2Mp89csgFCc9DjWR62qsCIf9mTOm1vi3PxW9KdEpUxBSh
aVOV+mVqarj5SILpIL4SamY4sl3SQXd6q/iaXAwqFCjGn+X6qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABMxsndKgMeINuHFxdrF40JenJsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey
NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvODAxZTA3YzEtOWUzYy0z
NDNkLWFlMDctYjk4YTI1YThiNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0
YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1
MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2
MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFRPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzzeWmhQnQAswInh37oPEBEtO36QbNo9KC+BEnWAZtzvw4aKUWGp4d0
3uaG3fJ4/ldyiQP5p3WUrLhbQrT18vRcIdVj/5VZcacng+15JJNuB+Lo0mCXBDdf
aIHKty2TDhtA+ksA0ZQoBOVPOEzRCbXTsjMAUlL1ZidJM/dwom4aTrzJAi1Pz/Eh
LrHhID4U2VHawt1Rcib6RPIipVpAnxPfEqBy6ZHImz5t9SbzwZ4+JsFvECbLxNeT
C4lJrmH9YOl1hleO86fP3yuVCmX0BD/FDEwC5zu9l2AJaX9NsGzNPnsp/QAcz5yh
cXoMH2ZS7zvczjo79yfbBT7mnrVLM/g=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:05 2025 by rpki-client