Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/5d8fc951-4e27-3d9d-8530-d73744116574.roa
File:                     5d8fc951-4e27-3d9d-8530-d73744116574.roa (raw, json)
Hash identifier:          NQAH24VKdsWiBz4/iNVDEhDTJODXh5Cc6/fgsF1iv0E=
Subject key identifier:   37:ED:C8:AA:CC:72:CA:8B:7C:DC:CF:52:04:F3:BE:D9:E7:78:4D:80
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584B2CF6DA333D8D17E2D2F9F0C0
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/5d8fc951-4e27-3d9d-8530-d73744116574.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     53768
IP address blocks:        162.134.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:da:33:3d:8d:17:e2:d2:f9:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=1a0bbefc-31aa-4553-91b2-7de5d1eb528a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:b7:51:8d:10:97:69:15:2e:a6:86:8c:73:
                    b8:ad:bd:08:c0:14:82:f0:d2:cd:db:00:78:cb:1c:
                    7c:cb:88:a1:52:a5:94:03:8a:9c:de:e1:70:3e:6d:
                    fb:55:e3:bb:a8:6e:e5:3e:be:f8:5f:9b:5c:e9:19:
                    9d:fc:1a:bd:b1:80:3e:68:70:19:52:76:94:72:c6:
                    38:21:16:05:91:e2:d3:1e:7b:97:cb:52:37:91:e4:
                    1c:cb:4a:69:b2:d8:46:b5:be:e8:b2:41:61:27:f5:
                    1f:cd:10:92:e3:1f:19:96:d8:6c:96:3c:3f:af:09:
                    9a:b9:30:61:d8:6e:cc:0a:2c:c7:a8:4a:a2:93:04:
                    42:c7:a5:56:ab:93:9e:9e:47:22:25:ca:cf:05:67:
                    ba:cb:75:f0:3f:15:53:d5:f8:45:84:d6:87:c9:2f:
                    ce:d2:ab:78:c5:75:c1:d3:26:23:6f:70:4a:57:57:
                    27:3f:d9:14:74:5c:db:eb:39:bd:92:cc:b2:3d:6c:
                    82:c5:55:64:ea:44:87:a0:4c:7b:5e:ae:85:b5:9b:
                    c1:29:c9:b7:a5:ce:7b:b8:1a:80:ca:39:c1:ff:b9:
                    11:f4:e0:bd:02:69:eb:6c:d7:a6:52:42:ab:f9:5b:
                    b2:40:19:75:af:70:f1:42:e0:0a:1f:a2:3a:00:b8:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:ED:C8:AA:CC:72:CA:8B:7C:DC:CF:52:04:F3:BE:D9:E7:78:4D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/5d8fc951-4e27-3d9d-8530-d73744116574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:38:fd:6b:57:bc:64:90:e0:5c:ec:42:1b:17:3b:2f:50:a2:
         44:45:f0:13:cf:d9:b7:08:7c:39:f4:f5:c4:5c:97:12:b8:2c:
         af:fe:f2:39:d1:dd:82:ac:eb:20:6f:b2:c9:47:0e:f1:21:f2:
         74:d8:17:ff:0d:f8:92:d5:d4:01:da:9b:15:ed:6b:74:1a:e6:
         66:49:ae:ac:d4:78:6a:7d:0f:cb:07:4e:1c:ab:53:df:bd:e5:
         13:6d:c9:d9:a5:6c:aa:bf:f8:16:42:43:3c:5f:98:d3:e3:3d:
         68:41:88:5b:13:c2:8d:82:04:e7:f3:3c:36:95:aa:dc:cf:0b:
         d3:a6:6a:ba:7b:44:83:1d:9c:28:5d:46:c9:a1:bb:bc:11:83:
         ec:40:a1:6f:c3:83:c8:50:fb:8d:2d:b9:e1:49:a8:72:4c:22:
         ab:bb:07:35:ec:02:52:75:21:0a:b2:92:70:cc:f3:4c:05:49:
         ff:bd:5b:59:d3:9c:ab:54:91:11:dd:39:db:ca:b2:d4:fe:7e:
         c1:f9:f5:de:61:aa:db:2e:04:bb:1e:3b:2f:df:bc:e8:dc:c4:
         4c:a0:fc:6d:f9:3b:3c:0a:2b:55:7f:0f:3a:ec:31:97:e3:03:
         2f:0b:c4:d2:39:fc:ad:06:d5:94:da:71:18:56:11:4c:73:a3:
         3b:9c:ca:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tozPY0X4tL58MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0
YTkyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk
MWEwYmJlZmMtMzFhYS00NTUzLTkxYjItN2RlNWQxZWI1MjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMG3UY0Ql2kVLqaGjHO4rb0IwBSC8NLN2wB4
yxx8y4ihUqWUA4qc3uFwPm37VeO7qG7lPr74X5tc6Rmd/Bq9sYA+aHAZUnaUcsY4
IRYFkeLTHnuXy1I3keQcy0ppsthGtb7oskFhJ/UfzRCS4x8Zlthsljw/rwmauTBh
2G7MCizHqEqikwRCx6VWq5OenkciJcrPBWe6y3XwPxVT1fhFhNaHyS/O0qt4xXXB
0yYjb3BKV1cnP9kUdFzb6zm9ksyyPWyCxVVk6kSHoEx7Xq6FtZvBKcm3pc57uBqA
yjnB/7kR9OC9AmnrbNemUkKr+VuyQBl1r3DxQuAKH6I6ALg0NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDftyKrMcsqLfNzPUgTzvtnneE2AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5
YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvNWQ4ZmM5NTEtNGUyNy0z
ZDlkLTg1MzAtZDczNzQ0MTE2NTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz
ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm
NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy
MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEooZQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ4/WtXvGSQ4FzsQhsXOy9QokRF8BPP2bcIfDn09cRclxK4LK/+8jnR
3YKs6yBvsslHDvEh8nTYF/8N+JLV1AHamxXta3Qa5mZJrqzUeGp9D8sHThyrU9+9
5RNtydmlbKq/+BZCQzxfmNPjPWhBiFsTwo2CBOfzPDaVqtzPC9Omarp7RIMdnChd
Rsmhu7wRg+xAoW/Dg8hQ+40tueFJqHJMIqu7BzXsAlJ1IQqyknDM80wFSf+9W1nT
nKtUkRHdOdvKstT+fsH59d5hqtsuBLseOy/fvOjcxEyg/G35OzwKK1V/DzrsMZfj
Ay8LxNI5/K0G1ZTacRhWEUxzozucyis=
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:35:40 2025 by rpki-client