Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa
File:                     f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa (raw, json)
Hash identifier:          4e9Dm80e1+QGT38V1fTwBFras5eg3TwkordGNpSlJ+c=
Subject key identifier:   45:6B:14:D7:51:B4:AE:EC:17:6D:4A:28:BF:E5:22:9A:24:23:B2:CF
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584B92DCFA57C35C1722463B67F8
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     16839
IP address blocks:        149.96.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:fa:57:c3:5c:17:22:46:3b:67:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=0535f602-82ea-4fea-bedc-c83cd8656a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:80:1e:93:8f:72:7f:ca:df:e6:fe:c8:bf:
                    8c:b9:d4:08:2d:f2:94:24:e3:ef:cb:b0:2b:0b:6d:
                    ad:55:b7:ed:97:65:2a:70:3f:b4:65:a8:42:62:b2:
                    b0:8d:38:0a:b9:3f:ef:a7:80:3a:7a:4e:8e:92:6d:
                    57:df:66:65:48:e1:a4:68:67:fd:7f:84:a3:39:24:
                    98:2c:b7:63:8b:c3:f4:60:32:f1:c3:05:f4:9c:36:
                    18:60:91:da:8c:7b:d1:85:37:1c:b0:78:a5:fe:4d:
                    70:f7:27:83:84:f8:26:e9:56:eb:8f:7a:a1:fd:8f:
                    33:42:99:ca:d4:8a:e6:91:8f:00:53:5a:79:ee:61:
                    e6:6c:b5:a3:91:02:34:75:44:d0:e4:bf:5f:06:03:
                    96:7c:a9:d3:ad:17:81:ba:d3:e6:12:e9:3f:ed:18:
                    d4:be:8a:5b:e4:db:ac:4e:c2:4e:d6:87:90:e6:99:
                    74:10:da:0b:d9:36:0d:11:2c:f6:ca:ac:97:89:fe:
                    37:92:7c:7b:86:fa:f0:74:cb:f2:f3:8d:50:1b:be:
                    10:66:13:2a:e5:32:6a:1b:c5:52:01:06:9b:f7:57:
                    1e:1a:69:69:c0:6b:af:16:27:38:07:73:ec:f9:0a:
                    65:81:8e:cc:6b:82:1e:45:e9:66:d7:50:f6:ab:d8:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6B:14:D7:51:B4:AE:EC:17:6D:4A:28:BF:E5:22:9A:24:23:B2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:08:a9:d3:36:d5:a9:89:4c:b5:48:22:26:b7:a5:bb:48:ad:
         6d:13:86:5b:f5:f1:b6:14:cb:22:83:e2:fb:32:96:5e:ad:08:
         53:0f:39:1a:d4:dd:05:c5:fe:92:85:b8:7a:f7:6d:49:c7:c3:
         f4:7b:ed:41:f9:de:cc:09:dc:34:3a:7a:7b:a5:d2:b4:c1:21:
         79:83:b6:d5:79:eb:17:98:2c:dc:ef:53:3d:dc:dc:df:2d:f7:
         cb:3f:e8:22:a6:e2:8c:25:c0:c0:c3:98:e6:09:b3:04:a8:7d:
         f7:b3:39:18:6d:43:5f:64:cd:98:f9:a5:34:12:77:51:cd:da:
         ad:b9:d1:67:52:30:e9:e1:1e:35:c6:fd:4d:ac:3c:4b:28:1d:
         66:5c:f9:e2:4b:a2:0f:5a:75:88:e3:74:3a:05:a9:67:68:18:
         3f:d4:ce:8d:c1:02:7c:54:14:fe:6c:1f:91:b8:39:58:46:ce:
         2d:a0:d9:b3:4e:45:83:fb:25:9d:9c:dd:29:5f:21:3f:a7:bc:
         45:7f:95:dd:ec:41:1c:77:41:49:7a:30:a2:dd:33:a2:09:be:
         7c:ec:ba:0a:67:64:d0:8e:a6:ad:6c:ea:6e:a8:72:9d:d3:71:
         52:9b:99:61:54:3a:24:33:9d:7c:b4:07:08:38:3f:4f:96:05:
         28:14:05:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PpXw1wXIkY7Z/gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
MDUzNWY2MDItODJlYS00ZmVhLWJlZGMtYzgzY2Q4NjU2YTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfqAHpOPcn/K3+b+yL+MudQILfKUJOPvy7Ar
C22tVbftl2UqcD+0ZahCYrKwjTgKuT/vp4A6ek6Okm1X32ZlSOGkaGf9f4SjOSSY
LLdji8P0YDLxwwX0nDYYYJHajHvRhTccsHil/k1w9yeDhPgm6Vbrj3qh/Y8zQpnK
1IrmkY8AU1p57mHmbLWjkQI0dUTQ5L9fBgOWfKnTrReButPmEuk/7RjUvopb5Nus
TsJO1oeQ5pl0ENoL2TYNESz2yqyXif43knx7hvrwdMvy841QG74QZhMq5TJqG8VS
AQab91ceGmlpwGuvFic4B3Ps+QplgY7Ma4IeRelm11D2q9jo0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEVrFNdRtK7sF21KKL/lIpokI7LPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjg1Y2UwYjItOTMxOC0z
ZDRjLWJlYmUtNDc3NzRhMTA2NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcIqdM21amJTLVIIia3pbtIrW0Thlv18bYUyyKD4vsyll6tCFMPORrU
3QXF/pKFuHr3bUnHw/R77UH53swJ3DQ6enul0rTBIXmDttV56xeYLNzvUz3c3N8t
98s/6CKm4owlwMDDmOYJswSoffezORhtQ19kzZj5pTQSd1HN2q250WdSMOnhHjXG
/U2sPEsoHWZc+eJLog9adYjjdDoFqWdoGD/Uzo3BAnxUFP5sH5G4OVhGzi2g2bNO
RYP7JZ2c3SlfIT+nvEV/ld3sQRx3QUl6MKLdM6IJvnzsugpnZNCOpq1s6m6ocp3T
cVKbmWFUOiQznXy0Bwg4P0+WBSgUBf0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:00 2025 by rpki-client