Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/cd8807d7-b8a9-39ef-9c9f-8482fa221237.roa
File:                     cd8807d7-b8a9-39ef-9c9f-8482fa221237.roa (raw, json)
Hash identifier:          CPAY06EcUS2wXrTfXO3t2Vglr2dl1YMkbN/M5uKzypI=
Subject key identifier:   EE:75:A6:B7:F0:F2:29:1D:8C:A0:70:7A:E6:40:07:F8:17:90:F8:8B
Certificate issuer:       /CN=b2217366-9374-418e-b500-d6b2bd2b5759
Certificate serial:       010D0C9F4328584B79C7B83809BFD9A0482E4400
Authority key identifier: 74:6D:5A:4D:AB:84:6A:9C:42:A8:1F:D5:51:B3:89:64:91:E0:5C:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/cd8807d7-b8a9-39ef-9c9f-8482fa221237.roa
Signing time:             Fri 10 Oct 2025 13:22:55 +0000
ROA not before:           Fri 10 Oct 2025 13:22:55 +0000
ROA not after:            Thu 08 Jan 2026 14:22:55 +0000
asID:                     11404
IP address blocks:        130.12.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:c7:b8:38:09:bf:d9:a0:48:2e:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2217366-9374-418e-b500-d6b2bd2b5759
        Validity
            Not Before: Oct 10 13:22:55 2025 GMT
            Not After : Jan  8 14:22:55 2026 GMT
        Subject: CN=6899968c-3ae8-4610-af97-6a2b7896b6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:33:e6:ae:d2:8e:f2:50:2c:98:7a:19:d9:1b:
                    17:aa:74:86:6c:65:1b:01:19:17:67:f1:7c:7c:cb:
                    6c:a5:55:82:5c:ad:85:2a:7b:4b:58:d5:60:be:da:
                    0a:21:2b:4e:d6:69:af:38:3f:ed:a5:2b:13:fd:a4:
                    7b:10:9c:f2:ae:ad:89:c5:df:e9:f3:cf:6c:e4:3d:
                    8a:01:ba:ee:2b:41:cf:d7:a2:9e:3a:eb:66:79:55:
                    fb:de:cc:90:53:3f:20:e8:7d:21:54:10:69:3e:1e:
                    09:cd:e9:cd:fd:e1:5d:28:c3:ec:94:ff:1a:7d:f5:
                    bc:d7:da:ea:34:ad:0a:e7:6a:2e:73:b5:10:1f:2d:
                    f6:a8:82:c0:bc:2f:b0:25:1f:33:7e:28:9b:40:49:
                    d6:ad:32:02:5c:08:da:86:40:9c:80:bd:a2:77:14:
                    b4:33:f7:23:b8:25:33:be:0a:d6:a2:ab:be:14:e2:
                    27:28:0f:53:38:14:0c:c8:88:db:d3:1c:5f:20:6c:
                    6a:42:11:4b:09:23:28:42:e3:20:2e:af:53:03:0d:
                    82:af:d3:bd:64:49:05:f7:19:43:7f:cf:6d:7a:a7:
                    1f:3b:c3:4e:4a:47:19:ae:c8:ed:36:0d:ec:f3:85:
                    68:74:70:47:83:8e:99:47:64:e4:76:31:56:1b:33:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:A6:B7:F0:F2:29:1D:8C:A0:70:7A:E6:40:07:F8:17:90:F8:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/cd8807d7-b8a9-39ef-9c9f-8482fa221237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.crl

            X509v3 Authority Key Identifier:
                keyid:74:6D:5A:4D:AB:84:6A:9C:42:A8:1F:D5:51:B3:89:64:91:E0:5C:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:56:d2:0a:15:0e:99:2c:51:45:8c:d7:9c:e4:28:0e:cf:a2:
         01:54:11:1e:8a:c2:d3:0f:af:74:22:4e:a6:cb:31:8b:53:ab:
         33:86:43:e7:48:d6:e6:f5:f5:6e:1e:54:5f:90:9e:33:a4:67:
         9c:f1:0d:37:e8:fa:23:39:c9:1e:a3:fc:05:88:b8:42:4d:20:
         21:e0:ab:a4:2b:76:41:bb:3e:b2:7d:5d:07:bc:fb:75:6b:49:
         39:10:ab:92:16:54:d6:d8:a4:43:df:23:34:f3:b2:be:27:b9:
         1b:0d:6a:1a:cc:b5:bc:35:b2:f9:c6:fb:b5:61:5e:3a:d9:be:
         5d:f8:fb:3f:d6:60:f2:39:23:3b:7a:63:2f:7c:83:86:3b:ed:
         1c:54:e0:3c:e6:78:4a:b9:2b:dd:d0:c1:0c:45:9c:2b:56:77:
         8e:41:eb:eb:40:66:58:9b:0b:47:da:eb:eb:a7:9d:f6:a4:c9:
         10:83:7e:90:fa:62:13:54:30:18:3e:13:bf:03:17:0a:41:49:
         e1:e2:87:cd:3f:da:9e:93:db:5e:7a:a8:2f:c8:c3:13:e2:e0:
         fd:69:62:f8:39:82:05:4c:cc:3c:d4:fc:03:df:e1:98:1b:bf:
         22:e2:73:66:30:44:1c:5e:3b:2b:a0:f7:e3:aa:c6:52:40:75:
         a1:50:1c:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5x7g4Cb/ZoEguRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjIyMTczNjYtOTM3NC00MThlLWI1MDAtZDZiMmJkMmI1
NzU5MB4XDTI1MTAxMDEzMjI1NVoXDTI2MDEwODE0MjI1NVowLzEtMCsGA1UEAxMk
Njg5OTk2OGMtM2FlOC00NjEwLWFmOTctNmEyYjc4OTZiNmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDPmrtKO8lAsmHoZ2RsXqnSGbGUbARkXZ/F8
fMtspVWCXK2FKntLWNVgvtoKIStO1mmvOD/tpSsT/aR7EJzyrq2Jxd/p889s5D2K
AbruK0HP16KeOutmeVX73syQUz8g6H0hVBBpPh4JzenN/eFdKMPslP8affW819rq
NK0K52ouc7UQHy32qILAvC+wJR8zfiibQEnWrTICXAjahkCcgL2idxS0M/cjuCUz
vgrWoqu+FOInKA9TOBQMyIjb0xxfIGxqQhFLCSMoQuMgLq9TAw2Cr9O9ZEkF9xlD
f89teqcfO8NOSkcZrsjtNg3s84VodHBHg46ZR2TkdjFWGzOniwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO51prfw8ikdjKBweuZAB/gXkPiLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iMjIx
NzM2Ni05Mzc0LTQxOGUtYjUwMC1kNmIyYmQyYjU3NTkvY2Q4ODA3ZDctYjhhOS0z
OWVmLTljOWYtODQ4MmZhMjIxMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjIyMTczNjYtOTM3NC00MThlLWI1
MDAtZDZiMmJkMmI1NzU5L2IyMjE3MzY2LTkzNzQtNDE4ZS1iNTAwLWQ2YjJiZDJi
NTc1OS5jcmwwHwYDVR0jBBgwFoAUdG1aTauEapxCqB/VUbOJZJHgXDowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iMjIxNzM2Ni05Mzc0LTQxOGUtYjUwMC1kNmIy
YmQyYjU3NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggwwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhW0goVDpksUUWM15zkKA7PogFUER6KwtMPr3QiTqbLMYtTqzOGQ+dI
1ub19W4eVF+QnjOkZ5zxDTfo+iM5yR6j/AWIuEJNICHgq6QrdkG7PrJ9XQe8+3Vr
STkQq5IWVNbYpEPfIzTzsr4nuRsNahrMtbw1svnG+7VhXjrZvl34+z/WYPI5Izt6
Yy98g4Y77RxU4DzmeEq5K93QwQxFnCtWd45B6+tAZlibC0fa6+unnfakyRCDfpD6
YhNUMBg+E78DFwpBSeHih80/2p6T2156qC/IwxPi4P1pYvg5ggVMzDzU/APf4Zgb
vyLic2YwRBxeOyug9+OqxlJAdaFQHEs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:54:49 2025 by rpki-client