Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1966d7bb-57cb-3d00-8f26-61906b2334f8.roa
File:                     1966d7bb-57cb-3d00-8f26-61906b2334f8.roa (raw, json)
Hash identifier:          2Ef8irb/9qndkpJOQHxS1N81zHwmcYvuBoBxozx6LZQ=
Subject key identifier:   B6:09:BC:4C:8E:09:7D:53:01:73:38:B5:56:BE:48:8B:93:15:9C:BF
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584B38219D5A1551273A55C27EC0
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1966d7bb-57cb-3d00-8f26-61906b2334f8.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     5738
IP address blocks:        207.136.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9d:5a:15:51:27:3a:55:c2:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=1bbc5d46-354f-49b0-9a5f-7890df288809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:32:55:40:d9:25:75:3b:15:7c:2c:87:86:
                    39:74:48:6f:19:67:24:64:1c:b8:d6:52:a0:21:37:
                    95:38:0c:22:5e:76:21:0b:69:1d:0c:7b:b0:8f:a1:
                    f3:cb:e1:cd:76:14:2d:80:e4:a9:57:51:68:5b:43:
                    69:05:ff:57:f4:a2:2a:4c:24:39:29:46:cb:8f:a0:
                    a9:df:7c:7f:67:d0:85:15:34:45:fc:eb:b0:cf:2c:
                    cd:f7:21:ec:09:d5:a8:ff:76:a4:6b:76:56:97:dd:
                    bd:8d:5f:1d:ec:c3:af:ee:99:e3:b3:49:95:75:fa:
                    15:c6:26:81:29:b8:8a:18:de:1a:93:1f:89:8e:9c:
                    4f:85:bc:c9:98:a3:7a:4c:a8:13:7f:12:27:2c:89:
                    c8:3a:9a:b3:74:1e:f8:1f:6d:ea:64:46:4e:da:f0:
                    24:34:ab:91:7b:ac:39:f1:69:b5:78:d1:93:bf:e9:
                    ce:82:60:9d:6d:a6:af:44:4a:9e:b2:db:56:0a:80:
                    d8:de:82:c6:fa:a0:44:63:86:ca:20:be:0f:d8:30:
                    f4:5b:b0:8c:89:3e:7c:81:94:95:d7:0e:c5:35:28:
                    29:fa:65:ef:66:f6:44:6d:c6:ca:1c:92:3f:a5:a0:
                    45:01:a3:5d:97:69:aa:aa:9e:94:cb:c2:c8:6e:21:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:BC:4C:8E:09:7D:53:01:73:38:B5:56:BE:48:8B:93:15:9C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1966d7bb-57cb-3d00-8f26-61906b2334f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.136.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ac:5d:b7:a1:c2:61:76:9b:0b:1c:bd:12:16:0d:a2:04:d7:
         a2:5f:10:df:a6:38:a8:1e:df:d2:b2:53:71:0d:3e:7f:d9:39:
         8b:0b:85:7a:4d:a8:cd:5b:f2:f7:f8:57:d7:7b:16:0d:8b:f4:
         87:96:a9:4c:2e:9f:9f:7b:b9:09:36:53:f4:b2:3e:22:15:8a:
         d1:d8:ec:38:88:3f:ab:10:32:67:23:c9:e3:45:db:3b:e3:df:
         c1:52:00:8e:44:dc:1d:9e:2d:5d:fc:dc:63:83:44:84:65:77:
         f9:c7:f7:14:37:64:f8:e2:8f:9c:9d:b2:3b:48:43:40:92:01:
         49:cc:d0:30:4c:ea:77:81:ac:24:26:88:f8:16:c4:b3:af:f8:
         26:cc:17:93:5f:90:01:8b:81:2d:17:0e:d8:8a:07:de:f0:fc:
         d3:68:2d:02:20:54:a4:c5:f6:bd:4e:34:44:3d:9e:ba:8b:bf:
         08:53:0e:56:d8:2d:ea:fb:63:96:b1:2c:a8:d6:de:39:cb:fe:
         87:7f:71:5f:17:97:af:f2:6d:99:40:6e:95:70:4f:60:f2:e8:
         e2:a6:1b:b0:bd:0c:72:05:30:b5:b7:b9:64:2e:ab:eb:08:f3:
         70:93:e9:37:78:d6:93:ad:3b:d5:e5:f4:1d:01:b5:11:e7:f3:
         73:b9:30:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZ1aFVEnOlXCfsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
MWJiYzVkNDYtMzU0Zi00OWIwLTlhNWYtNzg5MGRmMjg4ODA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbIyVUDZJXU7FXwsh4Y5dEhvGWckZBy41lKg
ITeVOAwiXnYhC2kdDHuwj6Hzy+HNdhQtgOSpV1FoW0NpBf9X9KIqTCQ5KUbLj6Cp
33x/Z9CFFTRF/OuwzyzN9yHsCdWo/3aka3ZWl929jV8d7MOv7pnjs0mVdfoVxiaB
KbiKGN4akx+JjpxPhbzJmKN6TKgTfxInLInIOpqzdB74H23qZEZO2vAkNKuRe6w5
8Wm1eNGTv+nOgmCdbaavREqesttWCoDY3oLG+qBEY4bKIL4P2DD0W7CMiT58gZSV
1w7FNSgp+mXvZvZEbcbKHJI/paBFAaNdl2mqqp6Uy8LIbiEmjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYJvEyOCX1TAXM4tVa+SIuTFZy/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMTk2NmQ3YmItNTdjYi0z
ZDAwLThmMjYtNjE5MDZiMjMzNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz4jAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALusXbehwmF2mwscvRIWDaIE16JfEN+mOKge39KyU3ENPn/ZOYsLhXpN
qM1b8vf4V9d7Fg2L9IeWqUwun597uQk2U/SyPiIVitHY7DiIP6sQMmcjyeNF2zvj
38FSAI5E3B2eLV383GODRIRld/nH9xQ3ZPjij5ydsjtIQ0CSAUnM0DBM6neBrCQm
iPgWxLOv+CbMF5NfkAGLgS0XDtiKB97w/NNoLQIgVKTF9r1ONEQ9nrqLvwhTDlbY
Ler7Y5axLKjW3jnL/od/cV8Xl6/ybZlAbpVwT2Dy6OKmG7C9DHIFMLW3uWQuq+sI
83CT6Td41pOtO9Xl9B0BtRHn83O5MFE=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:36:38 2025 by rpki-client