Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/1e0a4a1b-6977-36c0-82e0-8929e2098665.roa
File:                     1e0a4a1b-6977-36c0-82e0-8929e2098665.roa (raw, json)
Hash identifier:          We4BXFyJ5nBp9/azohpkwhxFZuIEXROC5hRyrTccWPw=
Subject key identifier:   F3:06:09:D6:92:53:C1:70:CA:3E:48:3A:73:E3:AB:DB:B5:1D:0C:DA
Certificate issuer:       /CN=8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203
Certificate serial:       010D0C9F4328584BB0B1A89022E310720D08D880
Authority key identifier: 5E:D6:15:E7:D5:93:2C:04:99:19:76:B1:9C:56:42:EB:6E:8D:D8:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/1e0a4a1b-6977-36c0-82e0-8929e2098665.roa
Signing time:             Thu 30 Oct 2025 05:27:56 +0000
ROA not before:           Thu 30 Oct 2025 05:27:56 +0000
ROA not after:            Wed 28 Jan 2026 06:27:56 +0000
asID:                     401044
IP address blocks:        131.143.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:b1:a8:90:22:e3:10:72:0d:08:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203
        Validity
            Not Before: Oct 30 05:27:56 2025 GMT
            Not After : Jan 28 06:27:56 2026 GMT
        Subject: CN=9928f122-bf41-4570-85ca-783ee836ab5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:2a:e3:12:b3:66:c9:68:1f:d8:74:98:8d:
                    18:f1:53:42:9c:f4:32:d9:ee:e8:59:df:f1:b7:89:
                    6c:6a:dd:6d:ec:1c:8b:22:41:82:e7:94:6c:e7:92:
                    7c:2e:fb:4e:f7:b3:4e:07:99:f9:cc:e3:71:4e:52:
                    86:8a:c8:79:c0:61:3d:41:34:4f:10:d2:61:9f:b8:
                    cc:90:9d:fe:28:43:96:57:18:4c:b3:f8:b8:ce:5d:
                    40:d1:3f:58:f0:92:45:62:2b:ad:1a:a2:67:09:0d:
                    9e:a7:75:0d:d4:99:76:9d:a9:12:d6:ce:18:a1:d7:
                    1e:00:65:e5:44:b8:38:35:f2:bb:61:75:3b:f6:8d:
                    3e:1c:dd:1e:56:3d:d7:21:10:09:96:6f:f5:cd:77:
                    d0:29:7c:6a:0d:b2:ce:3d:d3:0e:fd:1b:cd:d3:a4:
                    63:80:04:cf:87:57:9b:4b:63:75:08:0b:de:30:22:
                    0d:17:5b:cb:b1:3c:e6:5f:62:4f:d9:db:bf:04:d8:
                    54:fb:b2:f3:d0:fb:e3:23:48:6b:ed:6d:6b:6d:c6:
                    57:44:73:11:b6:34:50:95:15:5a:61:0c:fe:d3:a0:
                    e0:ef:f4:93:1b:9b:22:29:73:52:a7:33:5e:77:90:
                    5e:77:67:fe:87:b2:54:cc:23:4c:c3:2d:91:f7:4f:
                    49:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:06:09:D6:92:53:C1:70:CA:3E:48:3A:73:E3:AB:DB:B5:1D:0C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/1e0a4a1b-6977-36c0-82e0-8929e2098665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.crl

            X509v3 Authority Key Identifier:
                keyid:5E:D6:15:E7:D5:93:2C:04:99:19:76:B1:9C:56:42:EB:6E:8D:D8:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e2:d6:91:2a:a7:5d:aa:8a:1a:af:73:51:65:b9:06:f8:bf:
         f5:14:fe:f4:77:6c:b6:cd:76:f8:94:17:2b:f0:e6:f3:34:ef:
         82:bc:3f:6d:c2:63:77:d8:19:ea:be:f7:fc:d5:23:fa:15:88:
         a1:4c:20:c2:c7:1b:13:e6:3f:80:f9:fc:b2:9b:33:1c:af:ad:
         9e:d6:20:e1:03:db:36:1e:f5:31:43:41:f7:de:f5:a3:5c:df:
         2d:6d:04:4c:8f:b7:20:ba:6b:b5:6a:74:ab:c8:81:f3:60:70:
         40:1a:e9:9d:3a:d2:71:f2:7d:6b:2b:d5:6b:dd:ea:a2:48:d7:
         44:75:0c:ee:22:4c:57:9f:53:ff:01:cc:18:a4:cf:95:27:85:
         ee:2f:a5:a6:18:1b:83:c7:51:7b:31:1c:f1:c5:ac:33:b2:62:
         69:8b:1c:b5:7a:03:6a:ac:d0:a9:02:a4:ec:e2:b2:7f:72:31:
         f8:64:79:ef:fd:23:c2:46:0e:7b:30:c4:c2:1e:f3:87:4f:c8:
         8d:18:5d:a8:41:f0:40:87:83:a8:dd:e1:55:fe:13:5e:ff:31:
         3f:d8:ac:b2:14:01:8e:3a:9b:dc:58:a2:51:c9:70:92:88:7f:
         40:6f:b8:35:9b:0a:d5:03:14:4e:29:8d:47:35:38:e6:98:d9:
         d4:89:66:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwsaiQIuMQcg0I2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGZjZDVjMTAtYTEwZS00ZWJmLWIwY2MtYzhlNWE4ZTNh
MjAzMB4XDTI1MTAzMDA1Mjc1NloXDTI2MDEyODA2Mjc1NlowLzEtMCsGA1UEAxMk
OTkyOGYxMjItYmY0MS00NTcwLTg1Y2EtNzgzZWU4MzZhYjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqUq4xKzZsloH9h0mI0Y8VNCnPQy2e7oWd/x
t4lsat1t7ByLIkGC55Rs55J8LvtO97NOB5n5zONxTlKGish5wGE9QTRPENJhn7jM
kJ3+KEOWVxhMs/i4zl1A0T9Y8JJFYiutGqJnCQ2ep3UN1Jl2nakS1s4YodceAGXl
RLg4NfK7YXU79o0+HN0eVj3XIRAJlm/1zXfQKXxqDbLOPdMO/RvN06RjgATPh1eb
S2N1CAveMCINF1vLsTzmX2JP2du/BNhU+7Lz0PvjI0hr7W1rbcZXRHMRtjRQlRVa
YQz+06Dg7/STG5siKXNSpzNed5Bed2f+h7JUzCNMwy2R909JswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMGCdaSU8Fwyj5IOnPjq9u1HQzaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84ZmNk
NWMxMC1hMTBlLTRlYmYtYjBjYy1jOGU1YThlM2EyMDMvMWUwYTRhMWItNjk3Ny0z
NmMwLTgyZTAtODkyOWUyMDk4NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGZjZDVjMTAtYTEwZS00ZWJmLWIw
Y2MtYzhlNWE4ZTNhMjAzLzhmY2Q1YzEwLWExMGUtNGViZi1iMGNjLWM4ZTVhOGUz
YTIwMy5jcmwwHwYDVR0jBBgwFoAUXtYV59WTLASZGXaxnFZC626N2HIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC84ZmNkNWMxMC1hMTBlLTRlYmYtYjBjYy1jOGU1
YThlM2EyMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg498MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfi1pEqp12qihqvc1FluQb4v/UU/vR3bLbNdviUFyvw5vM074K8P23C
Y3fYGeq+9/zVI/oViKFMIMLHGxPmP4D5/LKbMxyvrZ7WIOED2zYe9TFDQffe9aNc
3y1tBEyPtyC6a7VqdKvIgfNgcEAa6Z060nHyfWsr1Wvd6qJI10R1DO4iTFefU/8B
zBikz5Unhe4vpaYYG4PHUXsxHPHFrDOyYmmLHLV6A2qs0KkCpOzisn9yMfhkee/9
I8JGDnswxMIe84dPyI0YXahB8ECHg6jd4VX+E17/MT/YrLIUAY46m9xYolHJcJKI
f0BvuDWbCtUDFE4pjUc1OOaY2dSJZpU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:30 2025 by rpki-client