Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/9cca4266-f59f-3aa3-81a4-dea793e19c09.roa
File:                     9cca4266-f59f-3aa3-81a4-dea793e19c09.roa (raw, json)
Hash identifier:          Ko6VotrmO/iUJqSYNnBpMpSRPqGwQyP8LjJTmalSats=
Subject key identifier:   F5:BD:21:E7:57:85:EB:2F:B7:62:FE:7A:6C:F5:93:7B:89:CD:7C:DA
Certificate issuer:       /CN=f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76
Certificate serial:       010D0C9F4328584B76F22AF35A0DE2BE6D507580
Authority key identifier: B0:D2:B9:31:C6:54:9A:BD:94:59:80:DF:EF:60:E8:85:59:C2:5D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/9cca4266-f59f-3aa3-81a4-dea793e19c09.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     32123
IP address blocks:        69.50.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:2a:f3:5a:0d:e2:be:6d:50:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=8879d07f-4a57-4f89-b542-06b58a2a07d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:f1:f1:7c:1e:27:0b:df:65:05:89:a6:9f:
                    79:b1:cb:ad:89:3a:13:8c:af:06:d6:b0:96:71:4c:
                    86:c2:b7:19:0d:8b:98:53:a9:76:82:f5:b0:27:ef:
                    34:ba:f8:d4:fa:fc:bd:87:65:a8:1a:20:54:94:87:
                    6f:e8:db:78:9e:53:69:50:2a:30:37:c3:e8:9d:5a:
                    b1:ee:63:5b:b1:40:de:47:79:8d:6d:b1:4e:66:2c:
                    bb:09:53:05:65:14:52:95:8f:10:c1:5b:a2:62:9e:
                    89:ba:45:97:90:cd:67:a9:9d:45:14:2e:89:19:f2:
                    bf:d0:f5:66:60:2f:92:b5:70:7c:45:72:0a:83:ea:
                    20:2b:21:60:0a:38:a1:58:cf:bf:87:58:ba:ad:59:
                    6b:a1:ef:4c:13:a1:ea:b0:01:be:9f:23:18:34:02:
                    5d:65:b5:5e:52:8c:3d:6f:9b:60:57:29:15:4d:76:
                    07:cd:cc:74:06:7d:92:8d:7e:17:5c:db:19:7c:8a:
                    ea:e9:5f:c8:cb:27:91:3e:d8:b2:b1:b2:ec:de:d5:
                    dc:e6:57:cd:6e:d8:6a:82:a8:0c:44:1b:16:62:aa:
                    b0:a9:a7:2b:bb:f6:6d:78:4f:d8:b9:f2:98:4e:6a:
                    68:39:89:69:20:89:45:61:1d:f1:9c:09:1c:9b:df:
                    6e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BD:21:E7:57:85:EB:2F:B7:62:FE:7A:6C:F5:93:7B:89:CD:7C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/9cca4266-f59f-3aa3-81a4-dea793e19c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.crl

            X509v3 Authority Key Identifier:
                keyid:B0:D2:B9:31:C6:54:9A:BD:94:59:80:DF:EF:60:E8:85:59:C2:5D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:99:c7:20:ce:34:4a:4c:0d:24:72:36:b6:a3:d4:22:29:27:
         f5:4d:46:c5:77:b7:2b:23:e5:28:79:7b:bf:1d:d4:0a:cc:98:
         5c:6a:77:51:c5:24:f8:ce:31:aa:b9:6c:ff:68:d9:cf:4e:36:
         67:67:26:47:57:7f:d3:85:21:1e:b2:1c:7f:24:8d:e6:4f:c9:
         c5:98:91:f1:f4:27:32:30:49:4d:26:f9:e7:ad:ca:9c:b3:2a:
         f9:51:6b:cb:0d:59:13:d3:32:33:39:25:c2:d3:1a:3b:ee:61:
         ff:ab:40:42:17:b1:92:11:e3:13:8b:ef:3f:93:94:a8:db:c4:
         ca:4b:26:b1:19:72:1d:4e:f7:06:4e:6f:e3:22:76:d9:9c:76:
         9b:ae:fe:33:7e:5e:3a:20:64:13:e0:39:73:73:c4:11:3f:cd:
         56:58:2c:96:d8:55:23:9d:f7:f8:b7:55:8b:33:d8:30:c6:00:
         de:ba:c7:52:f3:5f:21:78:81:29:f4:42:18:f9:c8:6d:e6:72:
         59:2d:7f:19:88:60:c8:2f:53:b3:2c:7b:2a:c4:74:04:69:92:
         86:c7:f8:67:d3:0a:e4:d6:55:76:4e:56:ae:be:6d:78:35:3b:
         a9:3d:bf:12:3e:4d:46:18:a2:be:71:1d:dc:b7:ef:d0:84:a8:
         38:2b:d0:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28irzWg3ivm1QdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhmOWUxYTctOTE5Ni00ZWQ1LTlmMWUtZmM2ZGM3Mjhj
Yjc2MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
ODg3OWQwN2YtNGE1Ny00Zjg5LWI1NDItMDZiNThhMmEwN2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAjx8XweJwvfZQWJpp95scutiToTjK8G1rCW
cUyGwrcZDYuYU6l2gvWwJ+80uvjU+vy9h2WoGiBUlIdv6Nt4nlNpUCowN8PonVqx
7mNbsUDeR3mNbbFOZiy7CVMFZRRSlY8QwVuiYp6JukWXkM1nqZ1FFC6JGfK/0PVm
YC+StXB8RXIKg+ogKyFgCjihWM+/h1i6rVlroe9ME6HqsAG+nyMYNAJdZbVeUow9
b5tgVykVTXYHzcx0Bn2SjX4XXNsZfIrq6V/IyyeRPtiysbLs3tXc5lfNbthqgqgM
RBsWYqqwqacru/ZteE/YufKYTmpoOYlpIIlFYR3xnAkcm99uMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPW9IedXhesvt2L+emz1k3uJzXzaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mOGY5
ZTFhNy05MTk2LTRlZDUtOWYxZS1mYzZkYzcyOGNiNzYvOWNjYTQyNjYtZjU5Zi0z
YWEzLTgxYTQtZGVhNzkzZTE5YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjhmOWUxYTctOTE5Ni00ZWQ1LTlm
MWUtZmM2ZGM3MjhjYjc2L2Y4ZjllMWE3LTkxOTYtNGVkNS05ZjFlLWZjNmRjNzI4
Y2I3Ni5jcmwwHwYDVR0jBBgwFoAUsNK5McZUmr2UWYDf72DohVnCXaMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mOGY5ZTFhNy05MTk2LTRlZDUtOWYxZS1mYzZk
YzcyOGNiNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRTJYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANGZxyDONEpMDSRyNraj1CIpJ/VNRsV3tysj5Sh5e78d1ArMmFxqd1HF
JPjOMaq5bP9o2c9ONmdnJkdXf9OFIR6yHH8kjeZPycWYkfH0JzIwSU0m+eetypyz
KvlRa8sNWRPTMjM5JcLTGjvuYf+rQEIXsZIR4xOL7z+TlKjbxMpLJrEZch1O9wZO
b+Midtmcdpuu/jN+XjogZBPgOXNzxBE/zVZYLJbYVSOd9/i3VYsz2DDGAN66x1Lz
XyF4gSn0Qhj5yG3mclktfxmIYMgvU7MseyrEdARpkobH+GfTCuTWVXZOVq6+bXg1
O6k9vxI+TUYYor5xHdy379CEqDgr0Es=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:48 2025 by rpki-client