Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa
File:                     d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa (raw, json)
Hash identifier:          zinmQfnIipXUu55USVi15GpleURJ8a21/L0diaL19xA=
Subject key identifier:   75:F1:2E:96:F8:4C:7F:57:28:CB:9B:D1:DD:61:7E:B2:8E:21:AA:68
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584B95A799BAE3E4240B12B76178
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     8560
IP address blocks:        162.255.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:99:ba:e3:e4:24:0b:12:b7:61:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=a48111db-09b6-4ed6-aad6-0e82f7fb8d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:47:fa:89:0b:ae:06:30:b4:a6:6c:de:52:
                    95:cd:d1:c8:88:43:af:a0:d3:47:c7:44:cd:62:5a:
                    16:72:40:a9:c6:37:4f:26:a6:d6:28:8e:84:0b:26:
                    13:e6:a7:c2:6a:7b:9f:a4:45:58:50:9f:fc:4e:00:
                    88:c1:c2:44:f4:b6:a5:03:25:a7:d3:7f:b1:19:78:
                    74:b7:87:98:6a:e8:60:2f:05:0f:82:81:36:15:f9:
                    3e:cc:b7:7d:fb:ab:db:b8:b6:99:93:15:f8:ab:ba:
                    c2:a0:75:96:a0:fd:11:62:fd:2f:9e:ad:d6:94:76:
                    57:dd:b1:14:e9:bf:00:e9:91:44:c5:64:83:95:45:
                    5a:5c:f8:ff:95:0e:87:a7:e8:e1:f0:7e:f2:be:1d:
                    b1:e5:56:ef:84:de:f1:c8:a8:a8:40:12:63:1d:37:
                    70:46:39:57:62:48:7d:0b:51:23:4b:0e:e1:b3:00:
                    67:9e:7c:48:54:9e:30:dd:22:1c:dd:17:27:34:64:
                    10:51:8e:3f:f9:67:c0:58:9e:63:24:92:5f:c3:a4:
                    0e:bd:e4:24:9d:d3:96:ee:f5:46:58:b2:88:f3:c7:
                    35:8e:49:db:02:ce:a0:6f:df:f0:52:56:13:52:8a:
                    e3:19:c7:63:94:cc:38:a6:82:96:90:b8:4f:70:da:
                    ca:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F1:2E:96:F8:4C:7F:57:28:CB:9B:D1:DD:61:7E:B2:8E:21:AA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e6:5b:bb:0f:d8:ef:00:14:e8:e0:f0:2e:bd:30:08:cf:46:
         0d:09:dd:21:36:8a:98:5a:f6:5a:13:3e:9f:b0:2d:cd:65:21:
         7b:cf:e0:34:ac:1f:69:5e:ba:19:78:a0:a9:f5:e9:ff:99:fd:
         0c:ed:0a:d0:6b:9e:b4:d1:40:e3:21:1a:7a:82:98:b6:88:23:
         0e:6f:c4:47:bb:4c:18:d7:a0:53:55:65:8e:a8:3d:80:2c:dc:
         26:19:66:e4:c2:46:cf:cb:08:5b:3b:64:55:75:03:8d:a4:cd:
         b2:98:fc:30:6b:66:3c:4c:97:27:66:b8:6c:52:9c:3a:22:56:
         c4:12:7f:47:fa:6a:fe:24:91:9c:6f:f5:19:bb:cf:35:02:3b:
         e0:a1:27:a7:54:e9:4a:fa:ff:9b:c1:af:98:5b:47:0d:01:d5:
         5c:ff:f0:b2:78:90:46:92:bd:6d:4f:99:05:40:e9:9c:83:fc:
         5f:3e:f7:68:78:26:46:52:2e:53:30:d5:fe:80:c7:6c:c9:fd:
         a6:60:54:ba:58:c0:66:5a:db:86:1c:a3:b7:13:c5:69:31:45:
         b4:e7:b0:ca:63:5b:bd:44:c0:ff:e5:68:2b:d6:fd:15:74:ab:
         f6:a9:d7:1c:2f:9c:ea:d3:c5:19:72:08:b9:26:4d:3e:64:aa:
         80:6d:e9:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5m64+QkCxK3YXgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
YTQ4MTExZGItMDliNi00ZWQ2LWFhZDYtMGU4MmY3ZmI4ZDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiBH+okLrgYwtKZs3lKVzdHIiEOvoNNHx0TN
YloWckCpxjdPJqbWKI6ECyYT5qfCanufpEVYUJ/8TgCIwcJE9LalAyWn03+xGXh0
t4eYauhgLwUPgoE2Ffk+zLd9+6vbuLaZkxX4q7rCoHWWoP0RYv0vnq3WlHZX3bEU
6b8A6ZFExWSDlUVaXPj/lQ6Hp+jh8H7yvh2x5VbvhN7xyKioQBJjHTdwRjlXYkh9
C1EjSw7hswBnnnxIVJ4w3SIc3RcnNGQQUY4/+WfAWJ5jJJJfw6QOveQkndOW7vVG
WLKI88c1jknbAs6gb9/wUlYTUorjGcdjlMw4poKWkLhPcNrKaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHXxLpb4TH9XKMub0d1hfrKOIapoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvZDcxYmJkM2MtODEyMy0z
MjVjLTlmZmEtMGY0MWQyMDEzNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov9UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLmW7sP2O8AFOjg8C69MAjPRg0J3SE2ipha9loTPp+wLc1lIXvP4DSs
H2leuhl4oKn16f+Z/QztCtBrnrTRQOMhGnqCmLaIIw5vxEe7TBjXoFNVZY6oPYAs
3CYZZuTCRs/LCFs7ZFV1A42kzbKY/DBrZjxMlydmuGxSnDoiVsQSf0f6av4kkZxv
9Rm7zzUCO+ChJ6dU6Ur6/5vBr5hbRw0B1Vz/8LJ4kEaSvW1PmQVA6ZyD/F8+92h4
JkZSLlMw1f6Ax2zJ/aZgVLpYwGZa24Yco7cTxWkxRbTnsMpjW71EwP/laCvW/RV0
q/ap1xwvnOrTxRlyCLkmTT5kqoBt6eo=
-----END CERTIFICATE-----
Generated at Tue Oct 21 16:09:23 2025 by rpki-client