Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/f0d32edb-710e-3329-b151-c1b86d956c94.roa
File:                     f0d32edb-710e-3329-b151-c1b86d956c94.roa (raw, json)
Hash identifier:          xDvrAJvxuDFhEEc4XBctH9I6e28g14rgLdcqUJJXPbI=
Subject key identifier:   54:09:BB:E9:4A:CB:0D:67:07:B8:3F:FA:6C:D6:9E:7A:49:51:BF:47
Certificate issuer:       /CN=1d501fd6-2f1a-4d00-89c7-7dabc9364605
Certificate serial:       010D0C9F4328584B21CC1E84F54D8D18D65EBFA0
Authority key identifier: AE:99:FA:16:91:FD:C5:EA:4A:41:68:9F:07:16:B7:84:BA:08:07:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/f0d32edb-710e-3329-b151-c1b86d956c94.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     54048
IP address blocks:        130.250.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:1e:84:f5:4d:8d:18:d6:5e:bf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d501fd6-2f1a-4d00-89c7-7dabc9364605
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=3ea90814-ad06-4773-8f63-2a7fe3d0911a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:b8:d9:a9:8b:fc:7d:33:a8:e3:f5:ec:7d:
                    35:3c:18:4e:41:78:11:f3:40:33:72:4b:a6:94:ff:
                    d8:f3:22:25:38:19:94:56:38:92:aa:7a:5e:b4:20:
                    d6:3c:4f:63:68:c5:3b:6e:73:4c:68:c1:d1:7d:62:
                    cf:fe:4d:48:39:3e:29:53:e5:90:ba:00:de:fe:59:
                    05:2d:1d:bb:be:d2:56:5b:a5:32:c7:84:8c:bb:d7:
                    68:5f:3a:54:8e:1d:21:f4:ce:9f:86:33:95:dc:cb:
                    30:41:fc:40:65:83:43:5c:b0:13:e3:92:e8:6f:a4:
                    17:c5:ed:82:92:72:e3:2b:d2:8a:31:be:e4:8f:eb:
                    8a:9d:aa:12:52:63:0e:65:ff:cb:c7:4d:d6:19:72:
                    84:3e:24:7a:b4:43:1e:32:5a:9d:cf:b3:97:b0:de:
                    e1:df:9c:7c:bc:ce:48:d2:27:c5:f5:14:54:2f:c0:
                    87:54:55:9e:5e:ff:9c:2b:98:ae:ce:cf:6f:79:41:
                    a7:e0:48:fb:d1:e3:0b:4a:48:ff:95:fe:cb:11:34:
                    35:88:05:54:0e:5c:71:68:fe:df:63:b4:32:66:c7:
                    24:fe:4d:10:88:19:d5:6f:46:7e:e5:00:32:e0:46:
                    b6:70:fa:80:87:3f:ed:01:63:bb:b9:b5:65:a6:31:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:09:BB:E9:4A:CB:0D:67:07:B8:3F:FA:6C:D6:9E:7A:49:51:BF:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/f0d32edb-710e-3329-b151-c1b86d956c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.crl

            X509v3 Authority Key Identifier:
                keyid:AE:99:FA:16:91:FD:C5:EA:4A:41:68:9F:07:16:B7:84:BA:08:07:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:d3:9d:82:9a:dd:47:60:bc:ed:47:b7:32:20:65:58:99:
         41:87:ab:8c:c6:92:eb:97:28:ab:f5:58:c2:e2:8c:85:4d:a3:
         b5:54:a2:1d:7c:60:a3:9a:9a:46:37:b3:52:6f:73:81:c3:a4:
         6b:fa:ab:34:7a:fe:9b:30:c9:de:e1:46:08:e1:df:f5:42:89:
         c2:1f:96:b5:0c:ad:39:18:37:92:90:ee:9d:78:4f:96:81:d6:
         6f:58:00:dc:ee:c0:83:c1:a0:11:e3:88:3c:0e:00:c3:91:b1:
         ad:77:08:20:c1:18:d9:52:59:1d:7d:d8:37:62:90:5d:8a:68:
         91:7d:ca:b5:ad:a6:2c:0e:8b:56:27:5a:12:62:3a:fb:18:55:
         da:9d:20:d9:ee:09:0e:a7:8e:3e:fb:4a:66:54:42:e9:46:13:
         55:f3:e6:5d:a5:81:38:b4:dd:41:35:dc:29:67:c2:e5:c7:5f:
         7a:23:58:e1:28:e7:5a:9b:41:df:b2:51:67:78:f6:b6:50:dd:
         1f:cb:4c:01:39:59:bb:76:1b:a3:c5:0a:8e:21:75:e5:35:ef:
         2d:6f:93:97:20:b4:a0:86:aa:6b:19:e7:ea:e2:c8:9d:a1:6c:
         ab:ea:4c:e6:5d:af:23:ad:87:44:a0:2c:4c:51:5b:5b:4e:74:
         46:85:d0:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB6E9U2NGNZev6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ1MDFmZDYtMmYxYS00ZDAwLTg5YzctN2RhYmM5MzY0
NjA1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
M2VhOTA4MTQtYWQwNi00NzczLThmNjMtMmE3ZmUzZDA5MTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe642amL/H0zqOP17H01PBhOQXgR80Azckum
lP/Y8yIlOBmUVjiSqnpetCDWPE9jaMU7bnNMaMHRfWLP/k1IOT4pU+WQugDe/lkF
LR27vtJWW6Uyx4SMu9doXzpUjh0h9M6fhjOV3MswQfxAZYNDXLAT45Lob6QXxe2C
knLjK9KKMb7kj+uKnaoSUmMOZf/Lx03WGXKEPiR6tEMeMlqdz7OXsN7h35x8vM5I
0ifF9RRUL8CHVFWeXv+cK5iuzs9veUGn4Ej70eMLSkj/lf7LETQ1iAVUDlxxaP7f
Y7QyZsck/k0QiBnVb0Z+5QAy4Ea2cPqAhz/tAWO7ubVlpjH50QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQJu+lKyw1nB7g/+mzWnnpJUb9HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZDUw
MWZkNi0yZjFhLTRkMDAtODljNy03ZGFiYzkzNjQ2MDUvZjBkMzJlZGItNzEwZS0z
MzI5LWIxNTEtYzFiODZkOTU2Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWQ1MDFmZDYtMmYxYS00ZDAwLTg5
YzctN2RhYmM5MzY0NjA1LzFkNTAxZmQ2LTJmMWEtNGQwMC04OWM3LTdkYWJjOTM2
NDYwNS5jcmwwHwYDVR0jBBgwFoAUrpn6FpH9xepKQWifBxa3hLoIBxMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZDUwMWZkNi0yZjFhLTRkMDAtODljNy03ZGFi
YzkzNjQ2MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgvrIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCL052Cmt1HYLztR7cyIGVYmUGHq4zGkuuXKKv1WMLijIVNo7VUoh18
YKOamkY3s1Jvc4HDpGv6qzR6/pswyd7hRgjh3/VCicIflrUMrTkYN5KQ7p14T5aB
1m9YANzuwIPBoBHjiDwOAMORsa13CCDBGNlSWR192DdikF2KaJF9yrWtpiwOi1Yn
WhJiOvsYVdqdINnuCQ6njj77SmZUQulGE1Xz5l2lgTi03UE13ClnwuXHX3ojWOEo
51qbQd+yUWd49rZQ3R/LTAE5Wbt2G6PFCo4hdeU17y1vk5cgtKCGqmsZ5+riyJ2h
bKvqTOZdryOth0SgLExRW1tOdEaF0EU=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:33:52 2025 by rpki-client