Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/0df36731-1813-353b-a7dd-b6ef4269967e.roa
File:                     0df36731-1813-353b-a7dd-b6ef4269967e.roa (raw, json)
Hash identifier:          Px5j4arfM60z53gabXVyfjDplniJNVdoGEfJgzYv3nk=
Subject key identifier:   13:B6:46:B1:1F:D0:05:AF:45:38:EF:EE:22:88:5B:91:46:7B:FB:90
Certificate issuer:       /CN=d9914204-e089-4759-b838-5325dc4683dd
Certificate serial:       010D0C9F4328584B5C6C6E23647540F7E6654880
Authority key identifier: 3C:1C:70:92:5F:C0:CC:04:8D:10:BB:B4:41:F2:2C:DA:78:2F:0A:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/0df36731-1813-353b-a7dd-b6ef4269967e.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     54686
IP address blocks:        216.40.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:6e:23:64:75:40:f7:e6:65:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9914204-e089-4759-b838-5325dc4683dd
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=0042edad-bd00-4be0-8c05-c021b093ba33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:01:1e:de:6e:7e:53:70:58:8f:e0:d7:17:
                    54:ac:53:f2:40:11:47:67:d4:b4:8e:c4:95:bc:6d:
                    1d:ac:c0:91:b8:9a:8d:ae:f4:2f:a8:39:bc:b6:a3:
                    01:08:6b:46:9e:c2:85:db:95:f2:f9:47:f9:7c:5a:
                    a5:cc:4e:b7:dc:38:60:7e:e1:45:b5:c6:65:6f:fc:
                    dd:93:76:4e:d3:ec:97:17:66:82:1a:7a:c3:a6:8f:
                    72:4b:bc:bb:63:82:93:78:68:b6:97:64:bd:73:d5:
                    f3:49:c1:ac:c4:c9:4f:10:09:ac:a2:32:d0:b6:74:
                    94:e0:ab:25:16:e9:3d:5a:0c:95:2f:1f:fe:81:e8:
                    16:27:6d:15:83:d1:c6:2a:7a:db:96:b1:1d:8d:a4:
                    8b:50:f1:7d:9c:b1:30:c6:40:95:4e:fa:a8:ab:a2:
                    9e:a1:1a:ad:72:6d:2a:19:c7:7c:d3:87:9d:1a:bc:
                    4f:97:4a:7c:2f:f9:c8:91:2b:9a:a3:b7:b3:10:dc:
                    40:d6:ed:d8:dc:06:f9:bc:e7:e2:86:ae:f3:d2:ab:
                    8f:cc:91:d9:75:bd:5b:be:38:8d:a1:94:5d:d0:f3:
                    c1:f5:43:82:1b:dd:8d:4d:98:44:80:47:e0:38:3b:
                    9a:30:a1:30:46:5f:04:f5:9b:9a:0c:a8:ad:26:1c:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B6:46:B1:1F:D0:05:AF:45:38:EF:EE:22:88:5B:91:46:7B:FB:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/0df36731-1813-353b-a7dd-b6ef4269967e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.crl

            X509v3 Authority Key Identifier:
                keyid:3C:1C:70:92:5F:C0:CC:04:8D:10:BB:B4:41:F2:2C:DA:78:2F:0A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e2:2c:da:56:a2:c6:c1:48:37:9b:cf:cd:05:a0:8d:e2:86:
         53:bb:69:7f:71:15:2e:bc:4c:64:9c:fd:28:0f:cb:f8:b6:d0:
         ef:da:e6:4a:82:d5:ed:34:1f:d5:c9:9b:d3:32:ee:c4:8a:09:
         30:52:1d:5e:a9:bb:59:7a:8d:f5:ef:a8:1d:f6:9c:d5:16:ed:
         1f:32:f2:a1:2d:aa:2b:45:a5:65:99:a4:43:87:fe:0e:1c:7f:
         78:61:b3:90:fb:82:bf:17:6a:e7:d7:e2:e2:52:2e:f1:e1:80:
         23:1b:d9:b4:73:93:82:33:24:09:5d:f5:49:48:69:39:e3:fb:
         07:df:93:56:51:ef:f6:d9:bd:fc:95:c7:86:fc:c9:d3:c1:f2:
         5d:b6:9c:c2:4c:69:e7:77:0b:04:4d:26:1d:14:f5:ef:34:50:
         08:fd:2c:c7:5f:cd:13:8c:19:aa:61:f2:94:8c:78:fb:71:c9:
         42:5f:19:26:b7:f3:fd:2f:a1:3c:c0:be:c5:f4:93:f0:98:83:
         1b:7b:37:08:ef:24:c9:c7:9f:00:fa:62:91:59:9c:81:dd:f8:
         be:da:82:d5:c4:15:79:4f:d1:d6:f8:52:ab:ef:9f:b5:36:e6:
         6d:3e:4e:55:40:19:92:e0:4a:cd:de:35:70:e2:d3:68:cf:ef:
         5a:20:5c:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbG4jZHVA9+ZlSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk5MTQyMDQtZTA4OS00NzU5LWI4MzgtNTMyNWRjNDY4
M2RkMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
MDA0MmVkYWQtYmQwMC00YmUwLThjMDUtYzAyMWIwOTNiYTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq0BHt5uflNwWI/g1xdUrFPyQBFHZ9S0jsSV
vG0drMCRuJqNrvQvqDm8tqMBCGtGnsKF25Xy+Uf5fFqlzE633DhgfuFFtcZlb/zd
k3ZO0+yXF2aCGnrDpo9yS7y7Y4KTeGi2l2S9c9XzScGsxMlPEAmsojLQtnSU4Ksl
Fuk9WgyVLx/+gegWJ20Vg9HGKnrblrEdjaSLUPF9nLEwxkCVTvqoq6KeoRqtcm0q
Gcd804edGrxPl0p8L/nIkSuao7ezENxA1u3Y3Ab5vOfihq7z0quPzJHZdb1bvjiN
oZRd0PPB9UOCG92NTZhEgEfgODuaMKEwRl8E9ZuaDKitJhxQywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBO2RrEf0AWvRTjv7iKIW5FGe/uQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOTkx
NDIwNC1lMDg5LTQ3NTktYjgzOC01MzI1ZGM0NjgzZGQvMGRmMzY3MzEtMTgxMy0z
NTNiLWE3ZGQtYjZlZjQyNjk5NjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDk5MTQyMDQtZTA4OS00NzU5LWI4
MzgtNTMyNWRjNDY4M2RkL2Q5OTE0MjA0LWUwODktNDc1OS1iODM4LTUzMjVkYzQ2
ODNkZC5jcmwwHwYDVR0jBBgwFoAUPBxwkl/AzASNELu0QfIs2ngvCv8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOTkxNDIwNC1lMDg5LTQ3NTktYjgzOC01MzI1
ZGM0NjgzZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ChCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3iLNpWosbBSDebz80FoI3ihlO7aX9xFS68TGSc/SgPy/i20O/a5kqC
1e00H9XJm9My7sSKCTBSHV6pu1l6jfXvqB32nNUW7R8y8qEtqitFpWWZpEOH/g4c
f3hhs5D7gr8XaufX4uJSLvHhgCMb2bRzk4IzJAld9UlIaTnj+wffk1ZR7/bZvfyV
x4b8ydPB8l22nMJMaed3CwRNJh0U9e80UAj9LMdfzROMGaph8pSMePtxyUJfGSa3
8/0voTzAvsX0k/CYgxt7NwjvJMnHnwD6YpFZnIHd+L7agtXEFXlP0db4Uqvvn7U2
5m0+TlVAGZLgSs3eNXDi02jP71ogXMY=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:54:08 2025 by rpki-client