Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/05acac9a-302f-3f1b-8895-4cd8bfa137f2.roa
File:                     05acac9a-302f-3f1b-8895-4cd8bfa137f2.roa (raw, json)
Hash identifier:          EgeEB6EYcd++xZev3beQyEu3G4d+a2AsGM2U0TWYHhA=
Subject key identifier:   86:EC:DE:EB:BC:1F:8B:81:BA:EA:B4:B8:42:B3:E5:AC:5D:89:41:00
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B52A75830423765AE5BDE5080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/05acac9a-302f-3f1b-8895-4cd8bfa137f2.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     31715
IP address blocks:        216.122.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:58:30:42:37:65:ae:5b:de:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=0ea1a51b-34f2-40f5-aad5-ef0abd185b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0e:52:e5:f6:87:6c:4b:e5:0b:df:a2:b0:d5:
                    76:bf:65:03:15:ff:4a:94:04:4c:49:55:af:01:e5:
                    28:dd:f0:1b:c5:fc:94:34:18:92:84:34:46:28:cc:
                    4f:7c:64:f1:71:72:8d:a8:95:d4:3c:5b:22:c3:e5:
                    cb:b4:14:a4:22:0a:78:92:38:da:71:9d:16:65:26:
                    42:35:21:89:f5:43:2f:9e:f1:f1:bb:aa:c5:5c:ac:
                    61:49:91:58:15:0f:f3:09:8d:fb:03:12:09:a7:6a:
                    eb:fb:43:64:41:36:92:44:22:82:18:66:9b:db:11:
                    44:dd:1e:6b:77:bc:b1:2d:94:45:7c:d8:fd:49:08:
                    72:d9:3a:fd:75:d1:84:ab:4b:7d:64:1c:6d:ad:70:
                    16:1f:47:6c:1d:3c:59:78:15:07:a5:2b:00:3c:f2:
                    ef:e8:17:eb:79:1d:02:23:db:04:fd:84:de:ad:7f:
                    e4:a3:9e:0a:e2:9b:dc:a0:54:62:a0:5e:31:2d:84:
                    1e:f7:68:2f:29:42:c2:44:1f:19:71:c3:b4:16:d5:
                    42:7d:e1:53:ea:bb:b7:e4:de:a9:92:e5:e8:b4:84:
                    e5:5c:ee:06:75:82:18:07:31:c8:1e:a5:df:2c:ea:
                    03:74:64:fb:f5:70:55:25:d3:7c:c2:1f:10:96:69:
                    17:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EC:DE:EB:BC:1F:8B:81:BA:EA:B4:B8:42:B3:E5:AC:5D:89:41:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/05acac9a-302f-3f1b-8895-4cd8bfa137f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:fe:e8:67:2d:f8:cc:87:b9:55:71:45:8a:e5:85:dc:f8:
         07:33:1b:7e:61:0b:1b:6a:42:d3:e4:b8:a5:ac:fa:55:04:69:
         44:38:eb:d9:be:1f:d1:ba:d1:d1:a4:fe:dd:72:4d:01:5e:1e:
         01:47:8d:9a:ff:4e:83:db:38:f8:fa:dd:74:64:e5:44:5b:f3:
         d3:e4:dc:8a:a7:79:3d:db:9c:e0:e5:2c:b5:4a:13:9c:a4:46:
         80:9b:82:b3:35:07:00:a6:9e:b0:3d:93:ed:6f:58:55:9a:52:
         8d:8a:50:b2:31:5b:90:83:69:80:93:63:5a:ba:2a:7a:1c:8c:
         45:89:3e:68:a5:d2:cc:62:53:b7:d4:1f:01:4a:16:40:2a:5f:
         d3:78:ea:5b:30:32:63:c2:2b:73:cb:60:1b:2b:bf:d9:c2:3e:
         75:a2:78:c2:41:7d:90:62:23:84:18:5f:f8:b4:bd:34:07:c0:
         ea:d6:83:91:fd:f8:80:95:82:cc:93:3d:ac:d0:01:03:e3:62:
         15:79:a4:87:e3:df:c8:e0:2d:dc:15:01:f5:fa:bc:f3:49:37:
         d7:3a:43:9c:3f:43:9e:e5:6d:1c:0c:2f:0e:94:5e:67:18:e9:
         02:0a:0f:cf:29:22:fb:04:28:8d:f2:52:9a:01:b2:42:4d:45:
         b4:9d:a4:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1gwQjdlrlveUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
MGVhMWE1MWItMzRmMi00MGY1LWFhZDUtZWYwYWJkMTg1YjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw5S5faHbEvlC9+isNV2v2UDFf9KlARMSVWv
AeUo3fAbxfyUNBiShDRGKMxPfGTxcXKNqJXUPFsiw+XLtBSkIgp4kjjacZ0WZSZC
NSGJ9UMvnvHxu6rFXKxhSZFYFQ/zCY37AxIJp2rr+0NkQTaSRCKCGGab2xFE3R5r
d7yxLZRFfNj9SQhy2Tr9ddGEq0t9ZBxtrXAWH0dsHTxZeBUHpSsAPPLv6BfreR0C
I9sE/YTerX/ko54K4pvcoFRioF4xLYQe92gvKULCRB8ZccO0FtVCfeFT6ru35N6p
kuXotITlXO4GdYIYBzHIHqXfLOoDdGT79XBVJdN8wh8QlmkXCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbs3uu8H4uBuuq0uEKz5axdiUEAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMDVhY2FjOWEtMzAyZi0z
ZjFiLTg4OTUtNGNkOGJmYTEzN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HqiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvB/uhnLfjMh7lVcUWK5YXc+AczG35hCxtqQtPkuKWs+lUEaUQ469m+
H9G60dGk/t1yTQFeHgFHjZr/ToPbOPj63XRk5URb89Pk3IqneT3bnODlLLVKE5yk
RoCbgrM1BwCmnrA9k+1vWFWaUo2KULIxW5CDaYCTY1q6KnocjEWJPmil0sxiU7fU
HwFKFkAqX9N46lswMmPCK3PLYBsrv9nCPnWieMJBfZBiI4QYX/i0vTQHwOrWg5H9
+ICVgsyTPazQAQPjYhV5pIfj38jgLdwVAfX6vPNJN9c6Q5w/Q57lbRwMLw6UXmcY
6QIKD88pIvsEKI3yUpoBskJNRbSdpPA=
-----END CERTIFICATE-----
Generated at Wed Oct 15 16:56:38 2025 by rpki-client