Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa
File:                     c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa (raw, json)
Hash identifier:          cttaKq0G6TXRHA7MR8+xqFuhi0y+xibyZN9SaVW4f3U=
Subject key identifier:   84:EC:43:6A:D6:20:97:13:7A:07:B1:FE:AE:A2:99:D2:27:EF:12:B4
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B21CC2769CF07C0AF9D9F1800
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     16462
IP address blocks:        206.12.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:27:69:cf:07:c0:af:9d:9f:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=b8999f0f-b016-40f5-b9bc-ad4e34d04956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:01:fc:ea:92:6c:0d:54:0d:64:b1:2d:9b:7c:
                    f6:ce:2d:5d:be:72:a8:be:ef:8b:cf:af:58:ae:75:
                    c9:87:4a:dd:70:55:00:2b:7f:64:f8:e7:3d:76:c7:
                    b8:ed:55:23:e7:aa:84:7f:b2:13:65:ca:af:a7:38:
                    83:20:a4:19:6d:37:01:d4:f1:b7:46:74:b3:d6:9e:
                    d3:c2:9f:d3:27:33:e3:a3:05:0f:c5:85:3b:6a:2c:
                    ad:29:28:6c:0f:ec:f1:e8:01:d0:12:86:db:18:7f:
                    e4:66:43:cf:13:14:a7:a9:98:b4:bc:20:95:73:78:
                    37:59:92:84:da:1a:2a:04:9e:da:a7:b3:58:5f:64:
                    ac:1b:4b:77:fb:1f:3c:8a:fd:40:56:18:dc:fe:a6:
                    55:28:b6:5d:95:d2:c6:1f:c6:f9:3e:1f:00:c5:bd:
                    29:75:6b:9b:81:f7:bc:bd:37:f3:66:1e:f3:40:ff:
                    16:87:45:1d:df:5a:4b:91:98:09:c2:01:62:86:24:
                    01:92:99:ff:b6:09:30:4f:bd:78:1e:74:af:08:ec:
                    75:a5:fd:4d:61:2d:a0:d0:7d:c9:12:29:e8:00:0e:
                    44:0d:e6:c0:12:c5:d4:1c:60:67:ef:7d:f7:2c:a0:
                    49:e9:f1:cf:97:bd:89:29:59:d6:f6:4d:33:4e:dd:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:43:6A:D6:20:97:13:7A:07:B1:FE:AE:A2:99:D2:27:EF:12:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:24:6d:f9:75:fb:24:f8:28:f0:90:21:85:e4:78:79:f2:af:
         fd:5c:66:77:7f:3f:bd:58:1d:33:7b:79:01:a0:e3:cd:53:17:
         e0:22:a1:94:41:07:ba:b1:e9:f9:12:99:65:1c:bb:1b:c1:2f:
         10:c4:eb:29:61:a0:e7:be:8d:e1:fd:50:2e:c5:fc:a1:06:7a:
         b2:f3:48:6e:a4:13:f0:bf:04:3f:c4:d0:86:cb:88:b5:a3:72:
         b3:35:83:38:21:f7:c3:0e:8d:2e:3f:67:a5:a5:04:5a:fc:f9:
         0c:70:2b:ce:6e:97:39:da:a4:5c:0d:08:8e:95:35:70:bb:51:
         c6:5a:b8:91:15:07:25:b9:7f:52:9b:c2:17:6c:55:7e:a8:81:
         ad:b9:8a:a1:bd:07:eb:35:a9:35:37:cf:52:9f:a9:28:42:41:
         c7:67:c4:d6:15:ff:8d:13:11:84:06:c4:58:96:23:27:d0:8e:
         04:7f:74:dc:e1:81:57:6f:8f:e2:8d:23:04:ee:e8:c6:cb:49:
         99:77:e2:11:d7:e6:34:25:a3:3f:78:48:ce:db:21:e7:2e:68:
         b3:b8:6c:6d:de:d6:68:59:30:c9:cf:2a:67:e4:82:b2:d7:14:
         72:43:a6:19:8d:da:71:7d:25:07:7a:0a:54:36:a3:27:25:21:
         f2:e0:b1:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCdpzwfAr52fGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
Yjg5OTlmMGYtYjAxNi00MGY1LWI5YmMtYWQ0ZTM0ZDA0OTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wH86pJsDVQNZLEtm3z2zi1dvnKovu+Lz69Y
rnXJh0rdcFUAK39k+Oc9dse47VUj56qEf7ITZcqvpziDIKQZbTcB1PG3RnSz1p7T
wp/TJzPjowUPxYU7aiytKShsD+zx6AHQEobbGH/kZkPPExSnqZi0vCCVc3g3WZKE
2hoqBJ7ap7NYX2SsG0t3+x88iv1AVhjc/qZVKLZdldLGH8b5Ph8Axb0pdWubgfe8
vTfzZh7zQP8Wh0Ud31pLkZgJwgFihiQBkpn/tgkwT714HnSvCOx1pf1NYS2g0H3J
EinoAA5EDebAEsXUHGBn7333LKBJ6fHPl72JKVnW9k0zTt0OmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITsQ2rWIJcTegex/q6imdIn7xK0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYzQ2MmJkMzQtMGU4Ny0z
MWQ4LThkYTAtMGNmMGUyNDA1ZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzgw8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALMkbfl1+yT4KPCQIYXkeHnyr/1cZnd/P71YHTN7eQGg481TF+AioZRB
B7qx6fkSmWUcuxvBLxDE6ylhoOe+jeH9UC7F/KEGerLzSG6kE/C/BD/E0IbLiLWj
crM1gzgh98MOjS4/Z6WlBFr8+QxwK85ulznapFwNCI6VNXC7UcZauJEVByW5f1Kb
whdsVX6oga25iqG9B+s1qTU3z1KfqShCQcdnxNYV/40TEYQGxFiWIyfQjgR/dNzh
gVdvj+KNIwTu6MbLSZl34hHX5jQloz94SM7bIecuaLO4bG3e1mhZMMnPKmfkgrLX
FHJDphmN2nF9JQd6ClQ2oyclIfLgsaI=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:02:21 2025 by rpki-client