Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d4d838c-1189-3360-acd9-c2bc6fa8c3ee.roa
File:                     5d4d838c-1189-3360-acd9-c2bc6fa8c3ee.roa (raw, json)
Hash identifier:          OETTkOFdepSciDAinnsINyg1nqtHlmN58wBMtwBH4CE=
Subject key identifier:   12:70:78:D7:92:EF:8A:A1:89:6A:11:AB:FE:0E:D4:B4:BB:D4:CA:6F
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CCB90ABA06A6EB1F7617A0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d4d838c-1189-3360-acd9-c2bc6fa8c3ee.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        72.22.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:b9:0a:ba:06:a6:eb:1f:76:17:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=501ce8ec-ae1b-481e-9555-3fbdb9214d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:5f:e8:f1:1c:75:8a:c3:75:f1:e5:2a:ff:
                    d6:34:8b:6c:ca:be:79:5c:6e:f1:18:a6:ef:ae:d1:
                    4f:b7:96:99:fd:11:bf:6f:fd:98:e6:71:78:75:16:
                    1f:9f:ad:4c:96:5c:96:18:4c:99:46:78:63:c2:9a:
                    5f:0b:5a:aa:ad:48:20:56:7e:8e:4b:3f:62:e1:d6:
                    b5:45:85:66:ea:ec:bb:5b:a9:2d:f4:d8:69:cd:06:
                    db:d8:a6:16:07:55:58:12:47:55:9e:03:5e:99:8b:
                    52:d7:4a:5a:1a:75:27:9a:26:48:21:bc:29:e8:7b:
                    26:7f:70:b0:ed:c9:8a:7c:16:f1:0e:2a:ec:75:10:
                    cd:00:f8:84:02:74:b7:1b:bf:3b:5e:09:c5:b5:eb:
                    fa:13:f6:dd:be:42:be:1e:d7:4f:43:01:06:8e:1f:
                    27:68:c5:72:56:b7:85:b6:d5:5f:d4:b8:fa:53:aa:
                    b6:fb:1b:36:48:f9:be:77:2e:14:81:a3:8c:b4:cc:
                    e0:ad:1e:cd:87:d8:df:36:43:7f:c6:85:cf:c9:b7:
                    73:6f:29:73:df:31:6a:80:74:e8:26:b9:2c:f8:cc:
                    7b:c7:80:00:e5:fe:d7:97:da:52:7d:e5:b1:80:c1:
                    b5:25:2c:27:ae:8c:cf:6e:31:55:22:a0:c8:dd:db:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:70:78:D7:92:EF:8A:A1:89:6A:11:AB:FE:0E:D4:B4:BB:D4:CA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d4d838c-1189-3360-acd9-c2bc6fa8c3ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ab:5d:42:90:b4:38:9f:fa:e0:94:da:2c:41:99:11:8a:d1:
         41:28:02:9c:48:fa:5c:3b:4b:a7:3b:62:74:a3:9b:8e:8c:4a:
         21:dc:ff:45:1b:32:b7:37:2c:7f:d5:ad:81:e5:16:23:04:83:
         ed:1d:8d:fe:e8:9f:6c:25:1e:33:60:1e:56:12:88:5a:06:a5:
         96:c4:32:b4:2c:23:d1:95:af:08:cc:6f:9c:98:2f:aa:30:f6:
         dc:bb:05:17:86:b7:e4:d3:cd:a3:bf:fb:28:68:22:20:95:21:
         79:d8:a8:91:64:57:33:a0:e5:8c:65:80:a5:b8:23:44:da:e2:
         67:f8:c5:0b:4f:5f:13:68:9a:06:a9:70:88:8a:f3:e5:05:5c:
         ca:49:e0:41:6c:ba:7d:c3:48:62:71:6f:31:b8:60:bd:eb:f3:
         bb:2e:1e:c7:0b:0b:38:ee:da:8c:f2:65:eb:28:25:83:7a:ba:
         2f:b0:c8:f0:88:7c:88:ab:fc:ba:a9:5d:a1:39:df:f8:ac:56:
         ea:a7:5f:56:aa:52:e8:38:4d:cf:45:3c:50:9e:8f:e5:b8:eb:
         ea:06:50:3d:d2:15:24:e8:92:5b:23:83:86:ee:81:fb:5a:41:
         f0:c2:79:a5:92:3e:78:dd:bc:62:36:02:f4:37:06:a3:7b:43:
         30:57:7c:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLkKugam6x92F6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NTAxY2U4ZWMtYWUxYi00ODFlLTk1NTUtM2ZiZGI5MjE0ZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnElf6PEcdYrDdfHlKv/WNItsyr55XG7xGKbv
rtFPt5aZ/RG/b/2Y5nF4dRYfn61MllyWGEyZRnhjwppfC1qqrUggVn6OSz9i4da1
RYVm6uy7W6kt9NhpzQbb2KYWB1VYEkdVngNemYtS10paGnUnmiZIIbwp6Hsmf3Cw
7cmKfBbxDirsdRDNAPiEAnS3G787XgnFtev6E/bdvkK+HtdPQwEGjh8naMVyVreF
ttVf1Lj6U6q2+xs2SPm+dy4UgaOMtMzgrR7Nh9jfNkN/xoXPybdzbylz3zFqgHTo
Jrks+Mx7x4AA5f7Xl9pSfeWxgMG1JSwnrozPbjFVIqDI3dsFaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJweNeS74qhiWoRq/4O1LS71MpvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNWQ0ZDgzOGMtMTE4OS0z
MzYwLWFjZDktYzJiYzZmYThjM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2rXUKQtDif+uCU2ixBmRGK0UEoApxI+lw7S6c7YnSjm46MSiHc/0Ub
Mrc3LH/VrYHlFiMEg+0djf7on2wlHjNgHlYSiFoGpZbEMrQsI9GVrwjMb5yYL6ow
9ty7BReGt+TTzaO/+yhoIiCVIXnYqJFkVzOg5YxlgKW4I0Ta4mf4xQtPXxNomgap
cIiK8+UFXMpJ4EFsun3DSGJxbzG4YL3r87suHscLCzju2ozyZesoJYN6ui+wyPCI
fIir/LqpXaE53/isVuqnX1aqUug4Tc9FPFCej+W46+oGUD3SFSToklsjg4bugfta
QfDCeaWSPnjdvGI2AvQ3BqN7QzBXfN8=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:58:28 2025 by rpki-client