Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/8b9a4e0b-2d0a-33e3-9c3d-49ae4beeb42a.roa
File:                     8b9a4e0b-2d0a-33e3-9c3d-49ae4beeb42a.roa (raw, json)
Hash identifier:          nPCQgbDT5HmkJ7H8IxkmS0W7iT3J8cas+243m+aYLWY=
Subject key identifier:   68:6C:65:6A:16:43:00:42:26:97:6D:E9:A7:69:EA:67:F0:F3:B7:DC
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584AE89146867F32585ACB2D2938
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/8b9a4e0b-2d0a-33e3-9c3d-49ae4beeb42a.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     6922
IP address blocks:        198.216.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:46:86:7f:32:58:5a:cb:2d:29:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=a97eb797-c80e-4286-8b37-43303d003583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:18:d6:95:30:49:1c:39:93:09:e7:27:95:41:
                    da:5f:ff:91:a7:24:27:15:08:29:5d:a1:bc:8e:8b:
                    c8:de:63:6f:8e:b6:e7:ee:82:18:52:54:eb:b4:e8:
                    1b:48:19:c0:b4:84:3a:f0:6b:41:d2:ed:c6:e7:8a:
                    79:89:08:4c:30:0c:e3:9d:35:a2:d3:21:e8:fc:7c:
                    02:92:9d:9c:2b:45:7c:83:4d:aa:ac:dd:d3:0b:f7:
                    36:27:e4:a5:89:c7:30:2b:e1:4e:31:32:6d:7b:34:
                    08:44:a7:aa:08:b4:72:3f:e1:c1:61:f9:2d:e6:7e:
                    26:0a:b3:65:53:9a:e1:45:5c:d5:71:fc:ac:e2:3b:
                    42:89:87:4d:04:58:62:c3:ef:b7:9f:2e:ad:22:33:
                    ef:4d:46:bb:a6:b8:e6:ba:cf:06:6a:03:b1:73:e9:
                    39:9f:74:4e:ee:00:ee:63:f7:04:16:9c:9c:6c:2f:
                    91:e9:22:67:a3:e4:db:84:66:84:aa:b6:dc:4b:01:
                    2b:b6:71:1a:00:45:95:4e:5a:1d:c7:09:37:36:95:
                    7a:43:c8:12:70:b4:8a:bf:93:1a:b3:6b:03:cd:4a:
                    47:62:06:22:af:32:5d:1d:21:f0:86:a3:99:6d:84:
                    06:8f:05:03:7b:f6:df:04:88:a8:11:ac:35:fd:e1:
                    5e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6C:65:6A:16:43:00:42:26:97:6D:E9:A7:69:EA:67:F0:F3:B7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/8b9a4e0b-2d0a-33e3-9c3d-49ae4beeb42a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.216.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:fb:51:3c:7e:6a:08:f2:71:c6:bd:95:17:37:5a:37:15:61:
         22:df:7c:37:a3:f5:c1:d5:a2:85:be:63:13:f6:83:34:5a:ce:
         a3:9a:dd:9f:dc:05:d8:bb:59:0e:21:06:35:6d:3d:30:75:14:
         87:a2:8a:80:39:91:a7:96:5a:b1:94:e4:10:4e:ab:36:12:09:
         2f:4f:8b:60:56:df:6b:1b:66:a6:f8:30:cb:e1:37:f4:87:a1:
         7b:1b:7a:06:52:f9:d0:d5:02:f9:30:b0:b7:9f:17:d0:18:c2:
         8d:f0:a0:99:01:fd:08:e6:72:4c:40:f9:ae:38:4b:16:39:f5:
         8a:f7:78:13:25:4f:68:a9:03:b4:5d:18:04:6a:6e:45:8d:05:
         76:20:49:7a:a8:04:eb:a1:e5:74:32:4d:75:05:17:ae:fa:86:
         d2:dd:dc:7c:b9:ea:7f:3c:b2:a6:81:9f:67:9f:6a:0c:f4:f0:
         84:85:e1:57:dd:64:93:23:2c:06:77:04:e0:90:9a:4c:bd:ce:
         f6:82:47:16:9c:ac:5c:7a:2f:da:cd:73:91:29:2b:68:d7:38:
         c8:2b:47:5f:51:6d:27:01:ce:65:5c:3e:da:9b:9f:60:ce:df:
         60:fc:7e:d5:29:e7:37:5d:6b:12:fb:87:85:10:87:51:63:98:
         2a:a2:94:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokUaGfzJYWsstKTgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk
YTk3ZWI3OTctYzgwZS00Mjg2LThiMzctNDMzMDNkMDAzNTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hjWlTBJHDmTCecnlUHaX/+RpyQnFQgpXaG8
jovI3mNvjrbn7oIYUlTrtOgbSBnAtIQ68GtB0u3G54p5iQhMMAzjnTWi0yHo/HwC
kp2cK0V8g02qrN3TC/c2J+SliccwK+FOMTJtezQIRKeqCLRyP+HBYfkt5n4mCrNl
U5rhRVzVcfys4jtCiYdNBFhiw++3ny6tIjPvTUa7prjmus8GagOxc+k5n3RO7gDu
Y/cEFpycbC+R6SJno+TbhGaEqrbcSwErtnEaAEWVTlodxwk3NpV6Q8gScLSKv5Ma
s2sDzUpHYgYirzJdHSHwhqOZbYQGjwUDe/bfBIioEaw1/eFeSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhsZWoWQwBCJpdt6adp6mfw87fcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvOGI5YTRlMGItMmQwYS0z
M2UzLTljM2QtNDlhZTRiZWViNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxthQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABL7UTx+agjycca9lRc3WjcVYSLffDej9cHVooW+YxP2gzRazqOa3Z/c
Bdi7WQ4hBjVtPTB1FIeiioA5kaeWWrGU5BBOqzYSCS9Pi2BW32sbZqb4MMvhN/SH
oXsbegZS+dDVAvkwsLefF9AYwo3woJkB/QjmckxA+a44SxY59Yr3eBMlT2ipA7Rd
GARqbkWNBXYgSXqoBOuh5XQyTXUFF676htLd3Hy56n88sqaBn2efagz08ISF4Vfd
ZJMjLAZ3BOCQmky9zvaCRxacrFx6L9rNc5EpK2jXOMgrR19RbScBzmVcPtqbn2DO
32D8ftUp5zddaxL7h4UQh1FjmCqilB8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:37 2025 by rpki-client