Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa
File:                     5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa (raw, json)
Hash identifier:          q5VUbg2MV+XUtSb21zMLOCTA245HZ0kHmEpZL+Tt0fs=
Subject key identifier:   60:7E:E3:24:80:74:46:07:5A:68:F5:53:9C:94:ED:5F:F3:D7:73:AE
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584B01B14775791E595F7315CE30
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa
Signing time:             Thu 28 Aug 2025 13:00:41 +0000
ROA not before:           Thu 28 Aug 2025 13:00:41 +0000
ROA not after:            Wed 26 Nov 2025 14:00:41 +0000
asID:                     33521
IP address blocks:        64.25.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:b1:47:75:79:1e:59:5f:73:15:ce:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Aug 28 13:00:41 2025 GMT
            Not After : Nov 26 14:00:41 2025 GMT
        Subject: CN=d911b062-da4b-4494-b2f3-13ead92b182b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:98:f1:d3:2d:32:a1:c3:f5:f4:d3:59:c1:
                    d2:44:ce:20:8d:cd:fd:2c:a4:b0:91:3e:f1:19:08:
                    fc:64:fb:00:cf:75:27:a8:3c:9d:97:6d:dd:6a:68:
                    a3:cf:40:3b:fa:7f:8f:41:14:e3:37:b1:d9:c5:f4:
                    6d:93:cc:b7:ba:fc:70:aa:d2:87:81:95:cd:57:10:
                    f5:2c:07:41:17:a7:31:88:57:01:ad:84:1a:0b:da:
                    11:56:5d:17:69:08:60:07:5d:83:bf:12:8f:a8:4c:
                    6b:6a:e4:d9:e3:2f:93:07:52:d6:cc:9c:58:b9:b7:
                    99:66:07:24:e2:00:02:11:1c:3d:76:5d:60:6d:b9:
                    45:b8:20:dd:82:76:e4:7a:27:f1:42:5e:77:8b:94:
                    5b:79:a6:0b:38:b1:7e:27:75:2a:de:cd:80:24:15:
                    04:ff:44:f4:e1:4d:6f:98:d3:83:e1:fd:97:c9:95:
                    bb:12:af:ec:7d:3d:c0:f2:21:00:ad:b6:55:f0:77:
                    7e:24:99:3e:6e:02:32:b0:50:45:89:ca:5c:29:d2:
                    c5:0b:68:11:44:29:4b:a2:63:37:93:c7:ad:80:31:
                    4c:06:dc:8d:66:07:5c:72:0a:f6:b5:d7:28:88:04:
                    24:8c:50:92:90:5a:9e:b9:52:d9:ae:9e:9d:04:3f:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7E:E3:24:80:74:46:07:5A:68:F5:53:9C:94:ED:5F:F3:D7:73:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:43:cc:28:8b:27:a5:53:8b:9f:8c:e7:6a:82:82:01:7c:54:
         43:5a:50:5e:a0:bb:24:09:6b:c5:80:36:84:78:d9:eb:02:8a:
         db:ee:5b:18:48:76:b0:8d:1b:b4:61:bd:2d:97:90:eb:68:85:
         b8:8d:93:10:c0:5d:6e:64:56:e7:3b:a8:83:89:33:37:48:a2:
         98:20:c7:6b:88:44:1f:01:b4:e6:64:3e:9d:54:98:09:40:f3:
         9c:1b:c5:c6:4c:b5:e9:51:30:90:01:f5:5b:cd:26:79:2a:2c:
         a4:38:e8:bd:44:81:c3:83:9c:5e:4d:22:e3:ca:ab:ad:fe:2e:
         11:2b:21:44:ea:a4:7e:ef:a9:79:45:ff:fc:dc:49:d5:9f:36:
         25:12:22:cd:eb:ce:61:09:10:fc:fe:81:69:7f:7c:1b:ca:ec:
         4d:62:8a:8a:83:0e:ae:0f:f6:bb:5f:63:2b:fb:84:e3:d7:20:
         7e:f0:5c:dc:0d:05:01:11:c3:bd:b8:20:42:f6:a3:cb:a7:e8:
         71:5b:76:d4:46:46:25:bf:39:39:b2:80:6c:0b:5c:8b:9e:cb:
         d1:40:94:9d:9c:b7:2f:3a:99:90:32:4b:df:fa:f2:9e:b1:0d:
         4a:e6:1c:12:cf:ed:cb:1d:3b:f6:6f:a0:2e:9b:c0:12:be:70:
         34:22:76:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBsUd1eR5ZX3MVzjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI1MDgyODEzMDA0MVoXDTI1MTEyNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZDkxMWIwNjItZGE0Yi00NDk0LWIyZjMtMTNlYWQ5MmIxODJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD2Y8dMtMqHD9fTTWcHSRM4gjc39LKSwkT7x
GQj8ZPsAz3UnqDydl23damijz0A7+n+PQRTjN7HZxfRtk8y3uvxwqtKHgZXNVxD1
LAdBF6cxiFcBrYQaC9oRVl0XaQhgB12DvxKPqExrauTZ4y+TB1LWzJxYubeZZgck
4gACERw9dl1gbblFuCDdgnbkeifxQl53i5RbeaYLOLF+J3Uq3s2AJBUE/0T04U1v
mNOD4f2XyZW7Eq/sfT3A8iEArbZV8Hd+JJk+bgIysFBFicpcKdLFC2gRRClLomM3
k8etgDFMBtyNZgdccgr2tdcoiAQkjFCSkFqeuVLZrp6dBD/UewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGB+4ySAdEYHWmj1U5yU7V/z13OuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvNWZjMDE3MjAtM2MzNy0z
MmQxLThhM2MtMDJiM2UxY2ZjZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBmCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5DzCiLJ6VTi5+M52qCggF8VENaUF6guyQJa8WANoR42esCitvuWxhI
drCNG7RhvS2XkOtohbiNkxDAXW5kVuc7qIOJMzdIopggx2uIRB8BtOZkPp1UmAlA
85wbxcZMtelRMJAB9VvNJnkqLKQ46L1EgcODnF5NIuPKq63+LhErIUTqpH7vqXlF
//zcSdWfNiUSIs3rzmEJEPz+gWl/fBvK7E1iioqDDq4P9rtfYyv7hOPXIH7wXNwN
BQERw724IEL2o8un6HFbdtRGRiW/OTmygGwLXIuey9FAlJ2cty86mZAyS9/68p6x
DUrmHBLP7csdO/ZvoC6bwBK+cDQidkc=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:14:46 2025 by rpki-client