Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa
File:                     c1f707e3-581b-3a11-8a60-245b52060e4b.roa (raw, json)
Hash identifier:          zgV2yMbR53cgsuB7vRGcoN5krgNtByFepjd8ATPbtZY=
Subject key identifier:   B6:E8:D9:17:96:A1:AD:98:A3:58:87:E3:82:85:0F:3C:DC:CC:44:15
Certificate issuer:       /CN=80697166-ff16-4bb4-87a8-1050eb90593c
Certificate serial:       010D0C9F4328584BA39D1D10EE0226A6F19B3700
Authority key identifier: 8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     399989
IP address blocks:        128.254.164.0/22 maxlen: 22
                          128.254.164.0/24 maxlen: 24
                          128.254.165.0/24 maxlen: 24
                          128.254.166.0/24 maxlen: 24
                          128.254.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:1d:10:ee:02:26:a6:f1:9b:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80697166-ff16-4bb4-87a8-1050eb90593c
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=175c782f-ab16-424c-b4bd-2f91b5fff929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:67:e1:24:72:43:c4:39:ff:66:81:49:56:
                    22:c7:e0:8a:d8:52:3a:7f:77:68:3a:c3:1d:15:ff:
                    7f:eb:99:ea:93:61:7d:b5:39:8d:1a:a6:e9:9c:04:
                    5e:9d:65:42:ce:d6:1d:87:3f:d1:5f:48:0f:9c:8d:
                    9e:1e:8d:9d:38:bc:bf:5e:f5:43:8f:ad:85:72:06:
                    6f:77:65:22:2b:07:a0:f1:4b:e7:b1:53:9a:21:57:
                    07:2a:49:27:17:bf:70:b5:7b:81:31:08:cc:00:ac:
                    83:59:2f:62:83:35:e6:7b:70:ea:69:39:33:64:05:
                    13:eb:2d:26:5c:40:f6:72:a3:7a:1d:41:38:e2:43:
                    d8:b3:91:3c:1f:df:68:f9:ba:76:86:b6:72:75:eb:
                    28:6b:c4:ca:33:96:50:1b:4a:0e:a5:e1:4b:6e:7f:
                    85:28:49:18:55:b3:58:6e:33:9b:a1:e0:fe:a6:be:
                    22:30:6c:3c:6f:ac:23:43:49:9c:35:ab:36:02:02:
                    2f:c0:d3:89:2f:83:2f:79:9c:1e:c7:55:70:5a:d6:
                    08:f2:9d:dc:5f:a5:e3:32:ec:9f:30:e0:d1:e8:9f:
                    80:12:5d:18:1c:0b:41:85:2a:ff:6e:0b:a9:9f:43:
                    9d:8a:54:86:83:90:5e:28:15:eb:e0:f9:e8:80:a0:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E8:D9:17:96:A1:AD:98:A3:58:87:E3:82:85:0F:3C:DC:CC:44:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:52:be:bd:63:25:66:26:d9:a9:69:75:1e:72:96:71:cd:1f:
         f5:42:fd:d6:e8:3d:92:f3:64:7e:10:26:81:54:6b:24:e6:d0:
         17:cd:6b:c9:d1:50:e9:e1:8a:33:ab:6c:c0:e0:33:e9:4f:bc:
         d6:92:06:ef:38:e5:0c:17:d8:b0:aa:2a:e1:95:b2:e3:dc:c7:
         a0:59:e2:cb:16:0d:8c:11:20:e3:db:c2:8b:af:6b:94:63:c8:
         05:11:93:d3:64:de:de:57:9e:fc:bf:7a:b6:74:01:cf:c8:38:
         e5:6f:02:9f:84:56:9c:11:04:06:de:b1:5e:87:be:67:93:43:
         62:2a:7a:47:6a:bd:c1:4a:d5:fb:7e:84:15:64:db:32:ee:3f:
         ff:2d:45:92:bb:80:ff:ca:89:f7:04:fa:c7:6c:56:27:7d:93:
         60:a4:94:c4:15:79:ed:ce:4e:2c:2a:e3:27:d7:8b:dc:77:84:
         e7:fc:d4:f5:5a:59:cd:7c:9e:88:20:be:8a:fb:70:4a:b9:a2:
         64:66:49:36:10:b1:4e:79:77:6c:a6:5e:1f:dc:ab:6d:2c:9d:
         85:d7:f4:60:e9:d6:28:c2:6f:5d:2b:3d:04:27:3f:e7:bd:8d:
         72:8e:44:f1:5a:89:26:82:7b:47:63:fb:9c:91:6e:c2:3a:ad:
         a4:64:64:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnR0Q7gImpvGbNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA2OTcxNjYtZmYxNi00YmI0LTg3YTgtMTA1MGViOTA1
OTNjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
MTc1Yzc4MmYtYWIxNi00MjRjLWI0YmQtMmY5MWI1ZmZmOTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms1n4SRyQ8Q5/2aBSVYix+CK2FI6f3doOsMd
Ff9/65nqk2F9tTmNGqbpnARenWVCztYdhz/RX0gPnI2eHo2dOLy/XvVDj62FcgZv
d2UiKweg8UvnsVOaIVcHKkknF79wtXuBMQjMAKyDWS9igzXme3DqaTkzZAUT6y0m
XED2cqN6HUE44kPYs5E8H99o+bp2hrZydesoa8TKM5ZQG0oOpeFLbn+FKEkYVbNY
bjOboeD+pr4iMGw8b6wjQ0mcNas2AgIvwNOJL4MveZwex1VwWtYI8p3cX6XjMuyf
MODR6J+AEl0YHAtBhSr/bgupn0OdilSGg5BeKBXr4PnogKCybwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLbo2ReWoa2Yo1iH44KFDzzczEQVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDY5
NzE2Ni1mZjE2LTRiYjQtODdhOC0xMDUwZWI5MDU5M2MvYzFmNzA3ZTMtNTgxYi0z
YTExLThhNjAtMjQ1YjUyMDYwZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA2OTcxNjYtZmYxNi00YmI0LTg3
YTgtMTA1MGViOTA1OTNjLzgwNjk3MTY2LWZmMTYtNGJiNC04N2E4LTEwNTBlYjkw
NTkzYy5jcmwwHwYDVR0jBBgwFoAUilzCDZWJi84Wtkx4nbgArqsn4KwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MDY5NzE2Ni1mZjE2LTRiYjQtODdhOC0xMDUw
ZWI5MDU5M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFSvr1jJWYm2alpdR5ylnHNH/VC/dboPZLzZH4QJoFUayTm0BfNa8nR
UOnhijOrbMDgM+lPvNaSBu845QwX2LCqKuGVsuPcx6BZ4ssWDYwRIOPbwouva5Rj
yAURk9Nk3t5Xnvy/erZ0Ac/IOOVvAp+EVpwRBAbesV6HvmeTQ2IqekdqvcFK1ft+
hBVk2zLuP/8tRZK7gP/KifcE+sdsVid9k2CklMQVee3OTiwq4yfXi9x3hOf81PVa
Wc18noggvor7cEq5omRmSTYQsU55d2ymXh/cq20snYXX9GDp1ijCb10rPQQnP+e9
jXKORPFaiSaCe0dj+5yRbsI6raRkZHU=
-----END CERTIFICATE-----
Generated at Sun Nov 2 21:47:47 2025 by rpki-client