Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa
File:                     de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa (raw, json)
Hash identifier:          wIjIJ4TT6Wd0822FboMBlbq9S/+fW51IQ64i9Zl6X0A=
Subject key identifier:   A6:A8:24:78:C7:9C:B5:E1:66:79:19:01:04:0E:0C:4E:0D:2A:91:01
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F4328584AFB62580DDA15DC6467C80F20
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa
Signing time:             Tue 26 Aug 2025 06:46:49 +0000
ROA not before:           Tue 26 Aug 2025 06:46:49 +0000
ROA not after:            Mon 24 Nov 2025 07:46:49 +0000
asID:                     797
IP address blocks:        144.160.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fb:62:58:0d:da:15:dc:64:67:c8:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: Aug 26 06:46:49 2025 GMT
            Not After : Nov 24 07:46:49 2025 GMT
        Subject: CN=d3adffe5-87f1-445e-bd3f-2efb1c88edc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:e1:70:c6:1c:e4:59:b8:d5:f9:f4:81:71:
                    30:12:82:38:c7:f9:38:cf:03:df:b7:15:55:bb:d4:
                    41:6f:61:99:9c:14:4e:c5:a8:dd:45:e2:20:8c:c1:
                    07:15:3b:e1:15:e2:2a:73:45:f9:82:e7:65:e2:83:
                    5f:07:0b:0a:e4:33:94:4b:fb:c0:0b:f0:42:90:0a:
                    1a:89:8a:6b:9d:4d:6b:9a:ed:66:9f:ec:c7:c6:78:
                    38:53:48:d0:7b:a8:4d:34:53:b7:91:47:89:7c:0b:
                    f9:b4:4e:6d:7a:9a:a1:0c:52:5b:a1:c1:9e:54:a3:
                    fa:c6:38:12:74:ae:07:9a:2e:29:d0:96:cf:0d:08:
                    bb:d1:64:fd:31:19:64:35:bc:54:3d:f6:dd:01:94:
                    47:f1:45:de:58:fa:18:ad:66:7e:e7:45:ba:b9:61:
                    e3:2a:1e:8f:eb:33:d0:66:1e:b4:86:88:1d:ea:32:
                    b4:2f:b3:c8:55:7e:17:2d:5b:6a:12:0b:96:28:33:
                    98:1e:1c:c6:f5:28:50:21:7f:57:0e:f0:f4:28:cb:
                    f5:4d:41:10:6a:ae:fa:fb:e7:71:c8:e4:b0:93:42:
                    5d:50:e6:6f:68:bb:2d:6f:78:ed:2b:0c:e3:03:6f:
                    ce:16:72:c4:9f:bc:97:35:c5:16:47:6a:46:27:68:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A8:24:78:C7:9C:B5:E1:66:79:19:01:04:0E:0C:4E:0D:2A:91:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.160.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:9e:8e:83:de:cb:f3:c1:60:7f:64:2a:92:6e:2d:9e:6a:51:
         ec:88:43:25:6d:3c:d1:62:01:36:09:1a:e3:1b:20:f4:fa:e8:
         8a:4e:1a:e9:81:c7:a1:d7:db:96:7b:37:e3:6b:a1:67:a0:0a:
         62:8a:fa:3b:b6:ef:df:dc:63:5e:41:5e:c5:80:3d:82:1c:68:
         f6:ce:b8:bf:14:16:c3:22:b4:25:7d:5e:15:dc:fc:b7:e9:7e:
         16:85:1e:40:8f:c3:d4:ca:b6:01:4c:46:0a:80:87:e9:a4:9a:
         7c:25:96:0b:cb:56:e7:a6:84:8e:0d:22:6c:ed:8b:f3:95:2f:
         24:4d:52:c0:8b:49:55:0a:96:3d:75:f4:96:f2:83:4b:b8:a8:
         37:d9:68:90:9b:92:3c:b5:e1:73:32:21:46:ec:80:d9:1c:39:
         6c:9b:af:1e:ac:fe:af:12:f0:d0:76:3d:b7:25:e4:57:a8:c0:
         c0:cd:9f:6f:67:ea:59:1b:a2:4e:db:54:d9:c1:f9:e6:30:8f:
         50:95:22:31:31:b2:42:d7:0b:f4:fd:c9:20:6b:88:df:1f:d6:
         dd:68:28:6e:b2:f7:ee:75:f4:eb:f5:42:e7:1d:82:a2:47:de:
         c5:00:66:08:dc:4f:0b:09:c0:be:2c:49:e9:da:74:94:eb:fb:
         c3:d4:cd:2c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEr7YlgN2hXcZGfIDyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NmZTY2M2MtODg3OC00Y2MwLWE3NzItMTdlNzZhNDkz
MDQwMB4XDTI1MDgyNjA2NDY0OVoXDTI1MTEyNDA3NDY0OVowLzEtMCsGA1UEAxMk
ZDNhZGZmZTUtODdmMS00NDVlLWJkM2YtMmVmYjFjODhlZGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17vhcMYc5Fm41fn0gXEwEoI4x/k4zwPftxVV
u9RBb2GZnBROxajdReIgjMEHFTvhFeIqc0X5gudl4oNfBwsK5DOUS/vAC/BCkAoa
iYprnU1rmu1mn+zHxng4U0jQe6hNNFO3kUeJfAv5tE5tepqhDFJbocGeVKP6xjgS
dK4Hmi4p0JbPDQi70WT9MRlkNbxUPfbdAZRH8UXeWPoYrWZ+50W6uWHjKh6P6zPQ
Zh60hogd6jK0L7PIVX4XLVtqEguWKDOYHhzG9ShQIX9XDvD0KMv1TUEQaq76++dx
yOSwk0JdUOZvaLstb3jtKwzjA2/OFnLEn7yXNcUWR2pGJ2inywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKaoJHjHnLXhZnkZAQQODE4NKpEBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jY2Zl
NjYzYy04ODc4LTRjYzAtYTc3Mi0xN2U3NmE0OTMwNDAvZGU2YzcwYWUtNWU2YS0z
NGMxLWJhMzItMDgwNWYzZDk0ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2NmZTY2M2MtODg3OC00Y2MwLWE3
NzItMTdlNzZhNDkzMDQwL2NjZmU2NjNjLTg4NzgtNGNjMC1hNzcyLTE3ZTc2YTQ5
MzA0MC5jcmwwHwYDVR0jBBgwFoAU/2L6gldR0zn/TiyQIVW+1KjY3vAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jY2ZlNjYzYy04ODc4LTRjYzAtYTc3Mi0xN2U3
NmE0OTMwNDAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBkKAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAn56Og97L88Fgf2Qqkm4tnmpR7IhDJW080WIBNgka4xsg9Proik4a6YHH
odfblns342uhZ6AKYor6O7bv39xjXkFexYA9ghxo9s64vxQWwyK0JX1eFdz8t+l+
FoUeQI/D1Mq2AUxGCoCH6aSafCWWC8tW56aEjg0ibO2L85UvJE1SwItJVQqWPXX0
lvKDS7ioN9lokJuSPLXhczIhRuyA2Rw5bJuvHqz+rxLw0HY9tyXkV6jAwM2fb2fq
WRuiTttU2cH55jCPUJUiMTGyQtcL9P3JIGuI3x/W3WgobrL37nX06/VC5x2Cokfe
xQBmCNxPCwnAvixJ6dp0lOv7w9TNLA==
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:24:13 2025 by rpki-client