Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16525637-3725-30fb-a90f-4b7d0322cbbd.roa
File:                     16525637-3725-30fb-a90f-4b7d0322cbbd.roa (raw, json)
Hash identifier:          2UgC5lIPIxsESiOAYfi+yGJvuf3STABGZYIt+m+iByg=
Subject key identifier:   AB:09:B6:F7:5B:73:61:B3:AB:06:C1:6F:4D:60:E2:72:1D:67:5B:2B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B80B7769D68D919CF85207080
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16525637-3725-30fb-a90f-4b7d0322cbbd.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     397197
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:76:9d:68:d9:19:cf:85:20:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=87f8f7d9-eab5-40b1-8de4-070607eea186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:66:d2:71:87:5d:e9:d4:95:a6:f1:55:cf:
                    84:77:6f:d3:29:15:bd:1d:11:3a:a7:59:93:85:76:
                    6a:49:34:0e:dc:39:51:59:fb:a4:49:66:12:cb:e6:
                    94:38:1d:9a:33:41:2f:27:07:e2:c9:02:d7:a2:cd:
                    0a:36:f7:00:64:df:66:cf:6a:23:07:ff:1a:58:6b:
                    cf:29:67:cb:49:82:06:ff:9d:c3:79:e1:13:50:e0:
                    17:19:3f:c9:62:5d:c4:10:98:63:3a:ac:0a:73:a7:
                    27:df:32:ed:a0:77:17:e4:60:0a:4e:dc:30:5b:1b:
                    a9:8e:50:d2:44:19:ec:81:50:1b:10:26:f7:ad:59:
                    a6:17:71:ca:76:0b:0d:23:38:6c:65:d3:f2:55:51:
                    92:60:ea:04:00:9a:4f:1a:e8:ab:29:58:67:ae:b6:
                    84:29:e3:fc:0c:fe:56:1d:34:13:b4:d6:55:3f:4f:
                    3a:7b:eb:e4:e6:07:22:be:4d:7e:57:22:d2:c1:94:
                    97:14:89:90:c6:0d:e0:e5:63:4c:28:68:6d:ff:f1:
                    dd:c6:d7:1b:ba:fb:ba:e8:13:f4:b1:96:50:e0:61:
                    e9:41:a2:1e:77:5a:4e:6f:d7:13:d5:0b:0c:d5:4e:
                    f2:02:7b:77:f2:0e:c6:2b:6a:4f:b9:37:95:ba:52:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:09:B6:F7:5B:73:61:B3:AB:06:C1:6F:4D:60:E2:72:1D:67:5B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16525637-3725-30fb-a90f-4b7d0322cbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:26:97:40:40:d0:4f:72:df:72:c6:14:20:3b:a5:0f:6b:aa:
         34:d1:04:16:32:93:ee:97:6d:c1:2e:1f:50:8d:49:da:9c:eb:
         2f:62:fd:6b:fa:d6:5e:ef:1e:cd:7a:cb:86:49:fe:0c:e9:45:
         a2:63:92:b2:44:2e:f6:d0:ed:6c:63:af:33:6f:fe:65:b1:72:
         85:f2:ec:e0:c9:fb:db:b0:ea:18:00:cd:83:4f:a9:65:df:4b:
         cd:43:44:77:76:34:6d:07:75:88:31:83:b9:4e:4d:4a:c0:c7:
         fc:e8:b7:81:f1:3d:74:07:8a:ef:e5:a6:d7:66:8e:c8:e6:64:
         08:0a:89:be:bd:7f:e2:20:c1:d1:a1:1b:f1:a4:6c:7f:71:8a:
         c8:9b:18:85:8d:e3:24:97:36:e8:3e:ab:9e:37:ce:68:ca:03:
         12:d0:54:cc:10:93:2f:5d:f0:3e:39:8f:13:62:bb:0e:8c:2e:
         19:be:39:5b:09:c3:de:fc:a6:15:1f:05:8a:4a:4e:24:bc:2d:
         2f:1f:af:65:36:9f:ba:05:6b:36:7d:b0:71:11:b6:77:d1:25:
         07:09:1d:cc:ae:40:42:37:6e:58:ab:db:ab:0d:d0:aa:5f:7e:
         78:2f:48:78:f7:9e:71:2d:09:4e:d2:b7:ba:f2:98:bc:5d:78:
         01:80:23:c7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3adaNkZz4UgcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
ODdmOGY3ZDktZWFiNS00MGIxLThkZTQtMDcwNjA3ZWVhMTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke5m0nGHXenUlabxVc+Ed2/TKRW9HRE6p1mT
hXZqSTQO3DlRWfukSWYSy+aUOB2aM0EvJwfiyQLXos0KNvcAZN9mz2ojB/8aWGvP
KWfLSYIG/53DeeETUOAXGT/JYl3EEJhjOqwKc6cn3zLtoHcX5GAKTtwwWxupjlDS
RBnsgVAbECb3rVmmF3HKdgsNIzhsZdPyVVGSYOoEAJpPGuirKVhnrraEKeP8DP5W
HTQTtNZVP086e+vk5gcivk1+VyLSwZSXFImQxg3g5WNMKGht//Hdxtcbuvu66BP0
sZZQ4GHpQaIed1pOb9cT1QsM1U7yAnt38g7GK2pPuTeVulKSxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKsJtvdbc2GzqwbBb01g4nIdZ1srMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTY1MjU2MzctMzcyNS0z
MGZiLWE5MGYtNGI3ZDAzMjJjYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBiJpdAQNBPct9yxhQgO6UPa6o00QQWMpPul23BLh9QjUnanOsvYv1r
+tZe7x7NesuGSf4M6UWiY5KyRC720O1sY68zb/5lsXKF8uzgyfvbsOoYAM2DT6ll
30vNQ0R3djRtB3WIMYO5Tk1KwMf86LeB8T10B4rv5abXZo7I5mQICom+vX/iIMHR
oRvxpGx/cYrImxiFjeMklzboPqueN85oygMS0FTMEJMvXfA+OY8TYrsOjC4Zvjlb
CcPe/KYVHwWKSk4kvC0vH69lNp+6BWs2fbBxEbZ30SUHCR3MrkBCN25Yq9urDdCq
X354L0h4955xLQlO0re68pi8XXgBgCPH
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:33 2025 by rpki-client