Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b7270993-b813-38f2-9ad0-be58d674f430.roa
File:                     b7270993-b813-38f2-9ad0-be58d674f430.roa (raw, json)
Hash identifier:          DI0EICSgCIsuur7Ctqnx5S6713YDmdWBnocF3JwQf0U=
Subject key identifier:   AE:47:E7:B2:85:F5:89:2C:A9:30:6D:BF:B4:F4:74:9B:98:F8:CC:E6
Certificate issuer:       /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
Certificate serial:       010D0C9F4328584AF0F13B9DC1EA076E86657600
Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b7270993-b813-38f2-9ad0-be58d674f430.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     7311
IP address blocks:        216.126.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:3b:9d:c1:ea:07:6e:86:65:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=e3b860a8-7646-48dd-bc91-72e00e02b188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:8e:73:eb:ab:0d:80:70:de:69:e7:c8:21:
                    88:92:fb:11:67:f7:47:ee:dc:7b:44:54:4f:a6:df:
                    7e:1d:7d:84:d3:7f:83:99:4e:25:22:a7:e4:48:1a:
                    e4:45:1c:43:55:04:28:3c:8e:cb:39:80:4f:be:5f:
                    62:ed:b0:3a:c4:96:58:b0:38:07:2e:ea:ae:34:34:
                    60:97:52:bc:52:26:9e:21:90:11:b2:8d:62:7e:4f:
                    28:fb:8e:97:86:b8:78:32:c5:c3:22:2e:dd:a5:d5:
                    07:6a:64:69:a0:fe:01:41:42:0d:cf:d0:f4:74:b0:
                    87:af:80:99:52:f3:70:ba:a2:f8:fa:8e:b5:3c:01:
                    4a:08:6d:47:b4:33:a1:8e:5f:77:16:e2:63:6f:e5:
                    4e:25:54:46:b0:f1:c7:6b:15:97:31:b5:e5:c7:c9:
                    7a:72:95:09:e7:e8:23:4b:c9:a2:2c:b7:43:9b:b1:
                    c6:4e:30:4f:e9:ea:57:aa:d5:d7:58:c1:ba:aa:e9:
                    7b:b6:ef:20:be:2f:c2:ea:f2:df:6e:ac:c9:5c:63:
                    1f:f3:1e:25:b6:b5:ec:6c:35:09:46:6d:c9:d1:f4:
                    b3:d3:50:12:ba:e2:14:a3:ca:6a:97:e1:ad:13:62:
                    c3:2e:d3:93:5e:a8:68:a1:a1:b6:31:16:4a:05:ed:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:47:E7:B2:85:F5:89:2C:A9:30:6D:BF:B4:F4:74:9B:98:F8:CC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b7270993-b813-38f2-9ad0-be58d674f430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl

            X509v3 Authority Key Identifier:
                keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:53:c4:dd:d5:61:45:a0:3f:a0:6c:f5:0f:f4:77:4f:12:71:
         a1:96:e5:23:82:9d:bc:b8:49:21:13:59:14:15:74:63:47:92:
         0f:29:20:81:73:fa:6c:03:13:54:98:cd:d1:8d:ec:97:04:f0:
         fb:18:a5:40:50:5a:3e:3d:62:0b:8a:d6:ae:e3:f5:08:f0:1f:
         41:30:9e:8a:76:ea:e6:38:25:64:47:0a:8a:aa:23:52:17:42:
         54:90:2a:07:ce:8f:01:b5:cb:62:ce:9d:d7:5c:52:c0:82:ac:
         29:80:5c:6b:28:4f:77:9b:67:92:f5:6d:aa:03:d4:c7:37:30:
         33:e8:d3:04:a9:2c:9b:dd:b7:fe:30:a4:28:38:bd:51:e1:51:
         03:c7:0c:59:11:b7:c7:a4:86:39:e3:63:06:33:fa:98:87:f1:
         60:4e:1a:62:47:c4:af:c6:4c:b3:5e:50:52:00:0d:07:a3:2b:
         13:8f:bb:23:61:89:c4:f3:a1:0d:c4:b7:d2:d1:fb:8e:cb:43:
         cb:0e:81:e7:bb:1e:eb:45:16:9a:75:b3:67:10:94:de:80:3d:
         41:67:f1:dc:9a:6b:d5:ca:09:0e:05:0f:ea:84:de:00:95:f9:
         3c:a2:82:ac:4b:33:b7:c2:5a:ec:62:87:31:de:2b:f8:b1:66:
         fc:1d:b8:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TudweoHboZldgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTcyMDJlOGQtZDY3MS00ZmUzLWJmYTktNjA1ZTJjYTMy
YWE1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTNiODYwYTgtNzY0Ni00OGRkLWJjOTEtNzJlMDBlMDJiMTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCOOc+urDYBw3mnnyCGIkvsRZ/dH7tx7RFRP
pt9+HX2E03+DmU4lIqfkSBrkRRxDVQQoPI7LOYBPvl9i7bA6xJZYsDgHLuquNDRg
l1K8UiaeIZARso1ifk8o+46Xhrh4MsXDIi7dpdUHamRpoP4BQUINz9D0dLCHr4CZ
UvNwuqL4+o61PAFKCG1HtDOhjl93FuJjb+VOJVRGsPHHaxWXMbXlx8l6cpUJ5+gj
S8miLLdDm7HGTjBP6epXqtXXWMG6qul7tu8gvi/C6vLfbqzJXGMf8x4ltrXsbDUJ
Rm3J0fSz01ASuuIUo8pql+GtE2LDLtOTXqhooaG2MRZKBe03AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5H57KF9YksqTBtv7T0dJuY+MzmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzIw
MmU4ZC1kNjcxLTRmZTMtYmZhOS02MDVlMmNhMzJhYTUvYjcyNzA5OTMtYjgxMy0z
OGYyLTlhZDAtYmU1OGQ2NzRmNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTcyMDJlOGQtZDY3MS00ZmUzLWJm
YTktNjA1ZTJjYTMyYWE1LzU3MjAyZThkLWQ2NzEtNGZlMy1iZmE5LTYwNWUyY2Ez
MmFhNS5jcmwwHwYDVR0jBBgwFoAUCnAAShqgXKbExzVX102W390JTPswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81NzIwMmU4ZC1kNjcxLTRmZTMtYmZhOS02MDVl
MmNhMzJhYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2H5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdTxN3VYUWgP6Bs9Q/0d08ScaGW5SOCnby4SSETWRQVdGNHkg8pIIFz
+mwDE1SYzdGN7JcE8PsYpUBQWj49YguK1q7j9QjwH0Ewnop26uY4JWRHCoqqI1IX
QlSQKgfOjwG1y2LOnddcUsCCrCmAXGsoT3ebZ5L1baoD1Mc3MDPo0wSpLJvdt/4w
pCg4vVHhUQPHDFkRt8ekhjnjYwYz+piH8WBOGmJHxK/GTLNeUFIADQejKxOPuyNh
icTzoQ3Et9LR+47LQ8sOgee7HutFFpp1s2cQlN6APUFn8dyaa9XKCQ4FD+qE3gCV
+TyigqxLM7fCWuxihzHeK/ixZvwduBY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:34:23 2025 by rpki-client