Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cb4c483-db4a-3a13-aa52-81c5016d0ec6.roa
File:                     7cb4c483-db4a-3a13-aa52-81c5016d0ec6.roa (raw, json)
Hash identifier:          VgsJ4L4EqNqtKNzLXhZx6svITJ8jBhq+ERJm4Us/Leo=
Subject key identifier:   1A:CC:ED:CE:06:02:11:4E:74:57:3D:2D:ED:05:41:67:B0:4D:84:38
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B26E57339DA0B327F554A3B80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cb4c483-db4a-3a13-aa52-81c5016d0ec6.roa
Signing time:             Wed 10 Sep 2025 20:50:44 +0000
ROA not before:           Wed 10 Sep 2025 20:50:44 +0000
ROA not after:            Tue 09 Dec 2025 21:50:44 +0000
asID:                     54253
IP address blocks:        159.13.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:26:e5:73:39:da:0b:32:7f:55:4a:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 10 20:50:44 2025 GMT
            Not After : Dec  9 21:50:44 2025 GMT
        Subject: CN=aa14a22a-7582-40b8-81f2-efc6cd9b0b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f7:91:69:e8:01:3e:e0:71:61:7b:e3:85:1f:
                    ec:34:72:f0:56:22:a0:78:08:21:cc:27:3c:3d:70:
                    97:dd:91:12:0e:22:aa:cc:cf:64:7e:1a:25:fc:7d:
                    3c:42:de:eb:99:2f:8e:6e:35:68:24:2f:ff:a3:04:
                    bb:65:d5:e0:5b:a9:14:f4:05:e9:2d:f2:14:a4:2f:
                    fc:74:30:6d:fd:f6:81:fd:d9:f8:49:b7:6d:5b:de:
                    3c:fd:17:a3:fb:68:f9:01:d2:f7:b6:ba:8b:8c:91:
                    2a:4b:ac:e7:df:5f:59:56:f0:3e:91:d6:fb:3d:57:
                    91:cb:f8:fc:e6:57:f6:33:6c:84:93:4b:b5:7d:08:
                    82:37:d3:8f:bf:4f:7c:68:e6:b9:6a:6a:f9:e0:78:
                    e6:78:19:47:de:72:ae:5d:5e:85:16:56:8e:d3:48:
                    27:80:b3:a7:7b:36:dc:80:f2:0d:f9:47:99:b4:b4:
                    92:81:a4:85:e7:58:59:31:b7:55:09:87:45:ac:70:
                    f9:ff:f6:f7:e4:0c:03:ff:ca:6b:4e:18:c6:06:1d:
                    06:61:6c:a0:64:fa:8f:3d:8a:76:ae:2d:0b:7c:6c:
                    61:6d:1d:52:54:33:b5:fe:07:86:ca:de:45:4b:99:
                    2c:17:01:45:6c:8a:bf:37:08:c7:6e:29:43:f9:40:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CC:ED:CE:06:02:11:4E:74:57:3D:2D:ED:05:41:67:B0:4D:84:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cb4c483-db4a-3a13-aa52-81c5016d0ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.13.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:56:60:f1:ca:aa:c5:f7:2d:67:53:bd:8d:ea:08:4b:4e:af:
         c6:9b:00:69:5c:8b:82:0d:14:b4:87:e9:ac:10:16:1d:25:ce:
         71:5a:72:57:c5:11:a9:02:55:26:ed:9e:16:ce:48:07:04:af:
         5f:5e:da:2c:dc:ee:cc:0c:94:2e:e4:5c:6c:2d:aa:bd:65:3c:
         83:68:b5:5a:b0:75:0b:12:23:b0:c1:70:81:1e:3c:66:4c:61:
         39:cd:54:af:22:83:da:73:43:66:eb:1c:d7:db:db:76:cb:a3:
         0d:85:43:32:a2:02:3b:90:5b:9d:82:86:84:57:dd:f9:41:cd:
         7a:92:0b:9d:c4:1f:02:f4:6c:49:c9:d9:dd:13:b4:3f:e1:0b:
         db:12:3a:56:a1:36:56:10:51:6e:0c:d4:9b:95:8b:de:56:6b:
         19:30:ea:54:fc:f3:79:20:46:40:55:e9:7b:5d:f5:ee:c0:4c:
         e3:35:f3:10:1a:35:5b:3a:5c:27:3c:3a:21:6e:45:f0:e0:36:
         41:af:57:11:dc:3c:8a:1e:99:c6:9f:5b:c7:fc:a5:56:3d:1d:
         36:ad:de:02:ae:49:95:a0:5f:1b:de:f8:9a:84:f1:53:78:96:
         e5:41:77:b2:29:e3:3a:44:0c:62:e2:66:97:76:06:8c:7f:8e:
         7b:9a:6e:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsm5XM52gsyf1VKO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDkxMDIwNTA0NFoXDTI1MTIwOTIxNTA0NFowLzEtMCsGA1UEAxMk
YWExNGEyMmEtNzU4Mi00MGI4LTgxZjItZWZjNmNkOWIwYjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PeRaegBPuBxYXvjhR/sNHLwViKgeAghzCc8
PXCX3ZESDiKqzM9kfhol/H08Qt7rmS+ObjVoJC//owS7ZdXgW6kU9AXpLfIUpC/8
dDBt/faB/dn4SbdtW948/Rej+2j5AdL3trqLjJEqS6zn319ZVvA+kdb7PVeRy/j8
5lf2M2yEk0u1fQiCN9OPv098aOa5amr54HjmeBlH3nKuXV6FFlaO00gngLOnezbc
gPIN+UeZtLSSgaSF51hZMbdVCYdFrHD5//b35AwD/8prThjGBh0GYWygZPqPPYp2
ri0LfGxhbR1SVDO1/geGyt5FS5ksFwFFbIq/NwjHbilD+UAr+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrM7c4GAhFOdFc9Le0FQWewTYQ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2NiNGM0ODMtZGI0YS0z
YTEzLWFhNTItODFjNTAxNmQwZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnw1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9WYPHKqsX3LWdTvY3qCEtOr8abAGlci4INFLSH6awQFh0lznFaclfF
EakCVSbtnhbOSAcEr19e2izc7swMlC7kXGwtqr1lPINotVqwdQsSI7DBcIEePGZM
YTnNVK8ig9pzQ2brHNfb23bLow2FQzKiAjuQW52ChoRX3flBzXqSC53EHwL0bEnJ
2d0TtD/hC9sSOlahNlYQUW4M1JuVi95Waxkw6lT883kgRkBV6Xtd9e7ATOM18xAa
NVs6XCc8OiFuRfDgNkGvVxHcPIoemcafW8f8pVY9HTat3gKuSZWgXxve+JqE8VN4
luVBd7Ip4zpEDGLiZpd2Box/jnuabgw=
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:21:16 2025 by rpki-client