Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/51655a75-62e4-396a-af39-b2247f0b5263.roa
File:                     51655a75-62e4-396a-af39-b2247f0b5263.roa (raw, json)
Hash identifier:          xf7xpsgbH7qeJt5vB06cijOYcpu7Lr7yoGCYGbRCJbM=
Subject key identifier:   1F:8E:1B:CA:5B:EB:AD:B3:98:40:B6:5E:85:BD:05:9E:57:97:6E:A9
Certificate issuer:       /CN=39fea962-7ffb-4d29-beb1-e588e6436410
Certificate serial:       010D0C9F4328584B13D6AD50759C18E6D3E3BA00
Authority key identifier: C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/51655a75-62e4-396a-af39-b2247f0b5263.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     30247
IP address blocks:        162.220.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ad:50:75:9c:18:e6:d3:e3:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fea962-7ffb-4d29-beb1-e588e6436410
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=7976f6e4-a77d-4463-b0f3-713ca27b4d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:55:69:f4:77:75:f7:67:23:a9:97:7d:87:
                    26:9d:54:9d:da:76:2f:6b:dc:80:40:c0:0d:36:7e:
                    68:46:52:39:60:90:a4:53:57:4b:2a:35:f9:c8:7d:
                    fb:e1:ce:2b:a9:81:39:77:0b:d8:46:86:cb:b0:ed:
                    68:cd:06:1a:37:7f:62:5e:5d:57:85:5f:f3:09:5e:
                    41:56:fb:51:e0:79:54:1a:db:f2:ce:46:c2:f7:b9:
                    e6:6c:89:1d:75:4c:6d:c5:a4:0f:e4:ed:d2:51:85:
                    89:8e:7c:26:96:96:f4:fc:87:8f:f9:15:8d:4b:67:
                    32:97:f8:f6:29:0f:bd:49:3d:3f:f7:00:cc:43:50:
                    5c:48:81:c5:61:c2:f6:26:b9:63:bb:b9:40:8f:21:
                    26:76:d7:60:b1:a2:85:a6:5f:24:3a:24:6f:de:aa:
                    99:ca:96:e4:a0:7c:74:f0:77:fb:9d:19:59:58:d6:
                    11:1b:33:8d:ff:a6:c0:cc:1d:b9:1b:5b:13:fe:e1:
                    9e:69:47:d3:ff:38:42:18:a8:bb:14:29:a6:d5:f6:
                    b6:7a:cc:00:a4:0c:62:44:e3:04:d3:78:78:e2:f5:
                    82:43:0e:0a:09:ab:24:9d:5a:4e:37:5f:36:0c:2d:
                    08:f1:85:11:52:6f:95:a4:c7:71:29:23:50:92:2a:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8E:1B:CA:5B:EB:AD:B3:98:40:B6:5E:85:BD:05:9E:57:97:6E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/51655a75-62e4-396a-af39-b2247f0b5263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl

            X509v3 Authority Key Identifier:
                keyid:C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:36:b4:95:f5:7b:62:7e:87:a0:86:69:e8:52:20:27:7e:44:
         43:c6:b8:47:ed:98:af:84:36:5d:aa:a6:b1:ad:b2:98:ee:3c:
         77:5c:a9:dd:64:ca:7e:59:1f:15:f9:43:3f:14:56:88:47:8c:
         a1:d8:ba:75:af:05:5d:2b:ff:aa:8a:a2:50:31:6d:61:16:20:
         36:11:aa:ea:79:b5:a5:62:84:4e:f0:d1:63:13:9e:a8:d5:ff:
         b6:26:aa:5e:39:6f:41:98:c4:13:58:a6:c8:52:07:dd:39:9f:
         8e:18:39:3e:35:e9:d9:b4:e9:9c:14:93:9d:0a:45:fe:38:93:
         b9:e1:70:29:2b:76:0d:19:46:49:4a:44:13:46:99:ea:f8:33:
         96:43:98:e5:bf:4d:81:9c:95:8c:7d:40:d5:7d:1c:2b:b1:d0:
         17:72:9a:b4:7e:de:75:75:62:08:f4:eb:0a:3e:c6:e4:50:28:
         1c:9d:de:52:b9:6e:bf:88:4b:3c:b4:b9:93:89:39:73:dc:23:
         26:48:be:bc:02:fc:24:ea:8b:1b:a8:5b:79:ed:f1:38:7c:07:
         82:82:f5:c8:c1:26:86:bb:00:55:a5:85:05:98:9a:f6:fa:4a:
         3c:61:0f:e8:d9:23:00:d1:b1:5f:bf:04:e4:bf:5b:9a:b1:b5:
         92:5a:34:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1q1QdZwY5tPjugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzlmZWE5NjItN2ZmYi00ZDI5LWJlYjEtZTU4OGU2NDM2
NDEwMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
Nzk3NmY2ZTQtYTc3ZC00NDYzLWIwZjMtNzEzY2EyN2I0ZDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO9VafR3dfdnI6mXfYcmnVSd2nYva9yAQMAN
Nn5oRlI5YJCkU1dLKjX5yH374c4rqYE5dwvYRobLsO1ozQYaN39iXl1XhV/zCV5B
VvtR4HlUGtvyzkbC97nmbIkddUxtxaQP5O3SUYWJjnwmlpb0/IeP+RWNS2cyl/j2
KQ+9ST0/9wDMQ1BcSIHFYcL2Jrlju7lAjyEmdtdgsaKFpl8kOiRv3qqZypbkoHx0
8Hf7nRlZWNYRGzON/6bAzB25G1sT/uGeaUfT/zhCGKi7FCmm1fa2eswApAxiROME
03h44vWCQw4KCasknVpON182DC0I8YURUm+VpMdxKSNQkiqsgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+OG8pb662zmEC2XoW9BZ5Xl26pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOWZl
YTk2Mi03ZmZiLTRkMjktYmViMS1lNTg4ZTY0MzY0MTAvNTE2NTVhNzUtNjJlNC0z
OTZhLWFmMzktYjIyNDdmMGI1MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzlmZWE5NjItN2ZmYi00ZDI5LWJl
YjEtZTU4OGU2NDM2NDEwLzM5ZmVhOTYyLTdmZmItNGQyOS1iZWIxLWU1ODhlNjQz
NjQxMC5jcmwwHwYDVR0jBBgwFoAUyVB6rGZ35uRr5aFExxzYjCXCnvswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOWZlYTk2Mi03ZmZiLTRkMjktYmViMS1lNTg4
ZTY0MzY0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIA2tJX1e2J+h6CGaehSICd+REPGuEftmK+ENl2qprGtspjuPHdcqd1k
yn5ZHxX5Qz8UVohHjKHYunWvBV0r/6qKolAxbWEWIDYRqup5taVihE7w0WMTnqjV
/7Ymql45b0GYxBNYpshSB905n44YOT416dm06ZwUk50KRf44k7nhcCkrdg0ZRklK
RBNGmer4M5ZDmOW/TYGclYx9QNV9HCux0BdymrR+3nV1Ygj06wo+xuRQKByd3lK5
br+ISzy0uZOJOXPcIyZIvrwC/CTqixuoW3nt8Th8B4KC9cjBJoa7AFWlhQWYmvb6
SjxhD+jZIwDRsV+/BOS/W5qxtZJaNGs=
-----END CERTIFICATE-----
Generated at Sat Oct 11 04:50:10 2025 by rpki-client