Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76/6194afdd-adb6-360c-8cc7-e840fb573d9c.roa
File:                     6194afdd-adb6-360c-8cc7-e840fb573d9c.roa (raw, json)
Hash identifier:          enowdYiG15jRAa9VM4UZ8xXSvvDnkz4EGzXGqvHlX54=
Subject key identifier:   80:8E:49:CD:16:61:85:87:52:3C:28:E7:2F:2D:0B:A5:E2:26:11:20
Certificate issuer:       /CN=3d142277-f51d-4273-bd55-7ede4dcc4a76
Certificate serial:       010D0C9F4328584B83346C83BD4832A9D9F56AA0
Authority key identifier: 87:F6:41:55:A6:08:5A:56:11:93:CA:8A:02:4F:74:26:2D:51:E2:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76/6194afdd-adb6-360c-8cc7-e840fb573d9c.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     53627
IP address blocks:        130.12.52.0/22 maxlen: 22
                          2602:f855::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76/3d142277-f51d-4273-bd55-7ede4dcc4a76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76/3d142277-f51d-4273-bd55-7ede4dcc4a76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:34:6c:83:bd:48:32:a9:d9:f5:6a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d142277-f51d-4273-bd55-7ede4dcc4a76
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=0dbf74fe-674c-4f6b-8837-f3432277b7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d2:77:19:8f:da:05:05:f9:fe:79:11:e9:9b:
                    3f:8f:5c:b0:2c:b7:ac:6e:f0:9d:65:e5:6a:6b:d4:
                    fb:67:ab:8f:84:28:86:58:05:ed:a9:85:26:0d:73:
                    44:67:af:54:af:39:40:08:91:fc:b1:42:7e:09:c8:
                    f9:8f:ca:db:ae:76:6e:e6:d2:19:e8:b9:90:7d:d1:
                    b2:33:92:05:67:b5:41:26:65:39:91:ec:40:a5:72:
                    84:ab:8e:52:96:93:a3:9c:b0:c8:64:2c:87:87:9f:
                    19:06:64:07:a6:eb:4d:9e:fd:6c:33:25:8f:47:3e:
                    36:19:d3:0c:a0:cf:01:e5:4b:b2:5b:19:34:99:4d:
                    44:72:8f:de:84:62:58:da:bd:3a:a7:c4:c1:df:62:
                    fc:70:19:56:84:66:b0:ee:c6:b3:cd:b7:ee:eb:79:
                    1d:ea:61:a4:5c:f1:21:d6:41:da:2f:6d:20:f8:3d:
                    ae:e9:70:bb:b6:fe:8f:04:30:87:c3:e2:57:bb:d8:
                    e9:ad:40:dd:0e:95:c7:3b:89:59:8b:d0:fb:10:f2:
                    be:63:14:20:c4:ee:90:53:98:2c:07:b6:f5:65:29:
                    17:7a:29:fd:28:97:2c:aa:8e:8c:35:0f:d2:e9:f1:
                    1e:0d:1b:09:c7:05:6a:fb:30:d7:04:dc:10:ab:d1:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8E:49:CD:16:61:85:87:52:3C:28:E7:2F:2D:0B:A5:E2:26:11:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76/6194afdd-adb6-360c-8cc7-e840fb573d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76/3d142277-f51d-4273-bd55-7ede4dcc4a76.crl

            X509v3 Authority Key Identifier:
                keyid:87:F6:41:55:A6:08:5A:56:11:93:CA:8A:02:4F:74:26:2D:51:E2:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.52.0/22
                IPv6:
                  2602:f855::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:7a:b2:22:df:8c:61:90:a7:28:78:e2:85:83:fc:e5:bd:17:
         b2:50:c2:5a:c5:f0:9b:af:71:46:da:a7:fa:bf:1a:f8:54:fc:
         87:20:99:b2:0e:29:83:3d:aa:ef:b8:eb:5c:69:8f:29:ef:56:
         71:0f:5f:77:6b:82:a9:24:9e:fb:e8:e5:25:ed:1d:bb:7c:f5:
         f8:5a:51:ed:b6:d1:28:d7:7a:c3:9e:74:64:33:dd:b0:21:34:
         b6:7c:1f:c5:88:3a:c2:dd:9e:4b:97:fb:00:da:81:0f:9f:05:
         ab:b5:88:44:d1:9e:c5:ef:51:95:33:27:a6:8f:ec:aa:8c:3e:
         6f:d3:8d:8b:43:32:b9:b1:26:7a:60:58:e5:99:da:ec:cf:98:
         4f:c4:de:12:5a:ac:a7:22:75:1a:5a:59:a8:37:a3:af:9a:cb:
         14:c3:fc:de:41:f9:2e:d1:82:ce:e4:f4:2f:4b:39:43:cb:a4:
         4c:69:38:2b:c0:c9:53:97:e8:eb:ea:bd:db:4b:7a:1a:60:0d:
         44:11:65:7e:e8:80:80:72:1c:b9:66:aa:cf:f5:c1:19:93:6c:
         13:30:98:49:06:e4:77:e4:4e:e3:ee:b7:98:41:9e:8d:cc:9d:
         83:a8:04:76:0a:d2:83:93:71:67:b1:cf:57:c8:e9:af:72:95:
         5f:86:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:25:18 2025 by rpki-client