Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa
File:                     bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa (raw, json)
Hash identifier:          /VzYtdXpyEjmYFzWzJZLpCAzXeHVmIR14OOEwiAxGlA=
Subject key identifier:   7F:DC:BA:EE:29:0A:BD:C1:DA:87:8E:89:B3:EC:A8:02:6A:31:88:C5
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584AC876570D214E782BA632CBB0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     7265
IP address blocks:        216.47.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:57:0d:21:4e:78:2b:a6:32:cb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=b616086f-e824-4a0d-9dee-b3df5043c3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:6f:0b:62:ee:80:a8:b5:c0:a9:bf:4d:e7:
                    f4:09:88:87:5c:78:f3:d2:9c:39:8e:29:49:17:d3:
                    e2:d6:97:37:e5:9d:d0:bd:c0:7b:71:4e:24:0f:be:
                    59:94:01:90:2a:28:2a:2c:92:5a:12:71:39:df:bc:
                    4f:49:9f:78:d4:f2:ea:0d:5b:bd:fd:c2:c2:56:8a:
                    72:e9:0e:97:84:39:4c:3a:88:f4:c1:6b:10:5f:d4:
                    34:b4:43:cd:90:07:b7:04:38:39:71:54:54:3e:e8:
                    bd:f9:8e:3d:10:56:a0:11:fd:86:ef:cb:af:7f:7c:
                    d2:87:48:2a:3d:1d:fb:e5:af:3d:34:9c:af:bc:f4:
                    6a:08:a3:89:98:62:42:01:a8:2d:5f:df:5d:b6:b4:
                    c3:3d:7f:56:9c:e1:57:76:b3:6a:d6:8f:c5:7d:7a:
                    1b:8c:0f:36:e0:be:8f:fd:70:79:4f:41:bb:42:31:
                    88:53:a1:87:eb:52:d9:7d:af:45:84:1c:66:ef:c4:
                    6f:63:c1:8b:08:b3:7d:a6:4a:ff:b0:99:eb:c7:85:
                    46:f9:ac:ec:48:fc:22:73:b6:ab:69:d9:4c:32:f4:
                    bd:5b:a4:52:67:83:90:12:c9:a6:7c:10:29:f3:fe:
                    95:57:90:c8:60:34:01:70:ae:f5:84:64:00:16:e7:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DC:BA:EE:29:0A:BD:C1:DA:87:8E:89:B3:EC:A8:02:6A:31:88:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:22:37:93:41:87:12:97:71:68:7b:c1:66:71:5e:ce:10:79:
         3f:91:80:b8:0e:c5:9a:db:c1:25:c7:cc:56:a6:0a:a5:e8:bb:
         f8:0b:78:ca:bc:7f:a3:45:33:74:54:c2:a9:37:40:6b:37:d1:
         4a:18:2e:bc:e9:15:b0:f7:4e:5b:02:18:68:ca:15:a8:9f:69:
         a1:3c:9a:bf:a4:c4:63:0d:2a:1f:09:85:4b:df:1e:9c:69:2b:
         24:ba:b5:6f:fe:cd:64:51:52:ff:8d:4f:ef:6e:9c:7c:ed:b7:
         af:f1:69:2c:20:88:11:2b:dd:03:44:df:90:8f:cb:c9:be:fa:
         47:be:a4:8b:20:31:9d:48:aa:ed:e6:09:17:17:94:f2:8e:ad:
         b6:3e:a6:37:f7:db:e7:41:e2:ce:48:17:c5:82:c9:a9:82:e6:
         7b:54:cc:05:d6:74:bc:93:90:c3:08:34:71:c6:a2:39:9b:06:
         fb:7e:f5:80:ef:2a:59:3e:8b:5c:5c:9d:1c:4d:53:b6:d9:85:
         31:aa:f9:d8:44:e8:b4:2a:fb:3f:35:d7:97:3a:c6:e2:9b:8b:
         e1:c4:52:e6:20:dc:0c:e5:af:06:d4:6e:d5:11:8c:70:ad:16:
         70:4a:b6:f1:7a:be:5d:9b:67:18:99:d4:a7:3b:ac:39:1e:49:
         b5:33:8b:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlcNIU54K6Yyy7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
YjYxNjA4NmYtZTgyNC00YTBkLTlkZWUtYjNkZjUwNDNjM2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnApvC2LugKi1wKm/Tef0CYiHXHjz0pw5jilJ
F9Pi1pc35Z3QvcB7cU4kD75ZlAGQKigqLJJaEnE537xPSZ941PLqDVu9/cLCVopy
6Q6XhDlMOoj0wWsQX9Q0tEPNkAe3BDg5cVRUPui9+Y49EFagEf2G78uvf3zSh0gq
PR375a89NJyvvPRqCKOJmGJCAagtX99dtrTDPX9WnOFXdrNq1o/FfXobjA824L6P
/XB5T0G7QjGIU6GH61LZfa9FhBxm78RvY8GLCLN9pkr/sJnrx4VG+azsSPwic7ar
adlMMvS9W6RSZ4OQEsmmfBAp8/6VV5DIYDQBcK71hGQAFucV8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/cuu4pCr3B2oeOibPsqAJqMYjFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYmRmNWViYmQtNzUzMC0z
NTc4LWI1YWItZTllNmU4NjQ5NTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2C/YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQiN5NBhxKXcWh7wWZxXs4QeT+RgLgOxZrbwSXHzFamCqXou/gLeMq8
f6NFM3RUwqk3QGs30UoYLrzpFbD3TlsCGGjKFaifaaE8mr+kxGMNKh8JhUvfHpxp
KyS6tW/+zWRRUv+NT+9unHztt6/xaSwgiBEr3QNE35CPy8m++ke+pIsgMZ1Iqu3m
CRcXlPKOrbY+pjf32+dB4s5IF8WCyamC5ntUzAXWdLyTkMMINHHGojmbBvt+9YDv
Klk+i1xcnRxNU7bZhTGq+dhE6LQq+z8115c6xuKbi+HEUuYg3AzlrwbUbtURjHCt
FnBKtvF6vl2bZxiZ1Kc7rDkeSbUzi+E=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:32:58 2025 by rpki-client