Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa
File:                     7750e7a6-bfbf-32e2-98ca-db25150e8279.roa (raw, json)
Hash identifier:          S70I1pxizM3M8E9HydEjaowVdPbnrT3rXVpZdjDLpvw=
Subject key identifier:   F2:45:24:45:D2:7C:C2:25:01:3F:55:1D:29:E6:61:51:69:B6:8F:35
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584B1806CC38FF9E784B2D9DF4D0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     62651
IP address blocks:        216.131.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:cc:38:ff:9e:78:4b:2d:9d:f4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=f6449b2b-9d71-41c2-a34d-dc4f2570856f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ef:b6:7d:bf:ba:db:c5:ca:21:18:ec:8c:a2:
                    0a:c4:a3:53:99:df:09:61:50:97:e6:a1:d2:ff:2e:
                    83:b3:e4:62:a9:62:17:3d:e9:77:56:51:41:22:df:
                    97:3d:1d:c4:bc:d9:cd:5f:9f:d7:b7:ac:ee:96:af:
                    1b:39:e1:66:a8:90:e9:39:b5:7d:03:e5:cf:4f:00:
                    97:c2:dd:1d:17:e2:85:0e:78:5e:c5:83:6c:28:ef:
                    28:49:7b:3b:49:b4:75:fa:31:c5:0c:70:fa:d5:ac:
                    d1:cc:26:93:6a:3f:f1:43:06:f7:24:d0:33:68:98:
                    d8:d8:f0:a2:8e:07:8f:50:52:e7:d2:61:31:9d:7d:
                    1e:1d:18:de:8f:77:82:06:8e:38:5a:ff:42:3f:da:
                    fb:e3:a1:5d:5c:17:5d:25:11:35:0d:53:7b:b6:a7:
                    6c:4a:fe:ef:c8:63:8c:68:b6:55:b3:6e:71:cd:e4:
                    c8:88:af:9d:4b:8e:35:77:fa:bf:75:df:35:90:9b:
                    24:be:9a:95:a6:17:08:60:36:8c:ea:a9:b2:00:ac:
                    71:a1:1c:be:f4:85:35:e1:7d:b5:38:06:67:56:eb:
                    69:6c:1e:1d:00:e9:ae:b3:7c:97:ba:cc:5a:74:e0:
                    21:c0:e9:9f:19:17:aa:99:ea:78:e8:39:15:7f:32:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:45:24:45:D2:7C:C2:25:01:3F:55:1D:29:E6:61:51:69:B6:8F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:6d:90:1c:f1:58:e4:d4:57:b6:23:39:b2:fe:78:de:7a:f2:
         d6:c7:01:16:f1:a7:68:9a:00:09:a1:6e:57:b4:53:c8:0c:37:
         79:f2:ba:2c:40:5f:94:ba:f7:b7:ae:b4:e4:da:13:a1:fc:76:
         c3:9b:24:16:63:d9:91:fb:0a:bc:c5:d3:e4:a3:65:6e:89:73:
         82:c1:d1:d0:5d:f6:cb:f8:e2:be:8a:c3:12:d5:dc:cf:29:36:
         83:24:a4:0f:db:55:a6:8b:de:34:72:9b:8d:5f:02:3f:01:95:
         0c:40:8b:0d:ac:f5:fd:9a:8a:3a:74:02:3f:09:51:b1:46:f9:
         b9:da:a5:6f:b1:f0:fa:b5:19:c9:df:49:d5:68:d4:6a:6e:4c:
         36:2c:a1:43:48:27:2f:96:09:d5:6a:f1:e6:ea:f6:50:bb:e8:
         b3:5a:08:9c:8d:b6:4d:27:d4:71:36:11:27:b6:11:ce:49:fa:
         fb:28:38:6e:99:bf:da:c8:c8:86:cb:db:f9:9c:08:af:e3:44:
         32:15:54:5b:55:2f:c3:11:36:6f:06:1b:d9:5b:a9:a4:b2:b4:
         ca:19:26:b9:05:56:fc:ce:cd:1f:16:05:d8:d5:c8:79:35:d5:
         f2:2b:74:8b:6a:9d:5f:6d:5d:65:f4:ff:48:13:7a:b5:11:13:
         46:28:10:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsw4/554Sy2d9NAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZjY0NDliMmItOWQ3MS00MWMyLWEzNGQtZGM0ZjI1NzA4NTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg++2fb+628XKIRjsjKIKxKNTmd8JYVCX5qHS
/y6Ds+RiqWIXPel3VlFBIt+XPR3EvNnNX5/Xt6zulq8bOeFmqJDpObV9A+XPTwCX
wt0dF+KFDnhexYNsKO8oSXs7SbR1+jHFDHD61azRzCaTaj/xQwb3JNAzaJjY2PCi
jgePUFLn0mExnX0eHRjej3eCBo44Wv9CP9r746FdXBddJRE1DVN7tqdsSv7vyGOM
aLZVs25xzeTIiK+dS441d/q/dd81kJskvpqVphcIYDaM6qmyAKxxoRy+9IU14X21
OAZnVutpbB4dAOmus3yXusxadOAhwOmfGReqmep46DkVfzKBbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJFJEXSfMIlAT9VHSnmYVFpto81MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNzc1MGU3YTYtYmZiZi0z
MmUyLTk4Y2EtZGIyNTE1MGU4Mjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5tkBzxWOTUV7YjObL+eN568tbHARbxp2iaAAmhble0U8gMN3nyuixA
X5S697eutOTaE6H8dsObJBZj2ZH7CrzF0+SjZW6Jc4LB0dBd9sv44r6KwxLV3M8p
NoMkpA/bVaaL3jRym41fAj8BlQxAiw2s9f2aijp0Aj8JUbFG+bnapW+x8Pq1Gcnf
SdVo1GpuTDYsoUNIJy+WCdVq8ebq9lC76LNaCJyNtk0n1HE2ESe2Ec5J+vsoOG6Z
v9rIyIbL2/mcCK/jRDIVVFtVL8MRNm8GG9lbqaSytMoZJrkFVvzOzR8WBdjVyHk1
1fIrdItqnV9tXWX0/0gTerURE0YoEOQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:23:18 2025 by rpki-client