Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/ed030f91-ee01-3b9a-995d-ce2ba6128df9.roa
File:                     ed030f91-ee01-3b9a-995d-ce2ba6128df9.roa (raw, json)
Hash identifier:          qF0pZC+hha2evYDTHSE4/8pJwtnNhVufmKXCwfKRTfU=
Subject key identifier:   AA:38:3B:61:51:A5:BA:9D:71:BF:06:A0:3B:33:FC:6B:7E:BD:38:5D
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584B85EEAEEEA18CB6B5CAD7F340
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/ed030f91-ee01-3b9a-995d-ce2ba6128df9.roa
Signing time:             Tue 14 Oct 2025 21:51:08 +0000
ROA not before:           Tue 14 Oct 2025 21:51:08 +0000
ROA not after:            Mon 12 Jan 2026 22:51:08 +0000
asID:                     56367
IP address blocks:        130.12.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:ee:ae:ee:a1:8c:b6:b5:ca:d7:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Oct 14 21:51:08 2025 GMT
            Not After : Jan 12 22:51:08 2026 GMT
        Subject: CN=6fdccc4b-ff6f-4818-bbcc-47948529c922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3d:99:58:88:95:fa:d9:e9:36:cb:41:e5:42:
                    1d:4b:6a:d4:0c:75:9d:8d:75:44:56:cd:36:d6:2a:
                    9c:5d:cb:ec:e7:bb:f3:73:d8:8a:96:9a:f7:46:14:
                    c8:e4:1c:36:5a:04:41:31:18:64:a7:4c:7d:fa:2a:
                    04:05:82:4a:ce:6c:50:59:f1:d4:e2:fb:3e:e4:ff:
                    e3:1e:f1:fb:50:25:1a:2c:a6:2e:89:d8:2f:38:e4:
                    a2:d2:c0:a0:49:6a:60:af:6a:56:3c:ba:a7:5f:2f:
                    bf:02:72:9e:a3:69:46:56:4b:9d:df:e8:e5:82:7d:
                    8f:81:eb:d8:e1:85:6a:f3:22:db:9c:8e:37:de:52:
                    26:ed:6f:ad:53:13:35:ca:e4:92:5a:fa:6b:69:b2:
                    7d:a2:1a:f1:b7:4b:1f:02:29:d4:c6:8b:29:c3:f7:
                    58:1e:da:10:9b:59:9b:6f:ae:39:33:06:91:24:56:
                    88:dc:bc:c6:d0:98:c0:e9:60:68:58:d2:bd:f7:69:
                    9a:17:64:77:05:ea:9b:09:e6:fa:9b:30:43:f4:16:
                    4f:4b:b6:fc:14:77:89:56:89:9f:ea:ba:86:e7:b3:
                    9c:2a:40:aa:9a:d6:83:20:11:07:d7:21:f6:5e:2d:
                    ba:af:71:a6:42:b0:21:46:0e:26:6a:e4:01:93:57:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:38:3B:61:51:A5:BA:9D:71:BF:06:A0:3B:33:FC:6B:7E:BD:38:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/ed030f91-ee01-3b9a-995d-ce2ba6128df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ef:f6:5e:45:c6:ec:89:86:2a:a5:da:1f:e8:10:c9:40:7e:
         0b:55:32:11:f1:c2:48:9a:ca:a3:60:19:7e:da:e2:77:16:7d:
         ca:8a:eb:23:0f:dd:d1:ad:8f:5e:f8:58:fc:4f:32:cf:57:83:
         df:38:cc:9c:cc:a5:88:b2:59:a9:d0:71:c3:3c:4b:ee:9f:38:
         c9:b7:26:19:3c:93:d8:d7:b7:91:75:c2:5e:ca:74:f3:7f:e0:
         75:3b:c0:ba:f0:06:1b:f3:89:eb:ed:ab:70:a0:a9:0f:67:ca:
         4a:5d:79:8b:84:e1:71:bc:9d:e5:89:9d:c8:dc:42:7e:de:43:
         aa:4b:1a:5e:47:46:96:dd:8f:01:50:1d:3c:18:fb:85:e4:b4:
         6b:ef:75:9c:44:c6:8b:de:cb:c0:c0:10:85:95:86:21:17:81:
         fe:4c:f4:1a:f2:7f:99:8c:eb:1e:e3:1b:fe:72:f1:b1:88:9a:
         57:27:78:92:4d:be:07:14:e8:76:f4:e9:06:05:2e:fb:eb:7b:
         28:8c:e3:07:df:52:f0:aa:dc:5c:5a:de:c8:46:37:a8:eb:17:
         f5:84:9c:a3:61:81:8d:ef:f3:da:6a:ce:83:63:b1:93:fa:0f:
         a0:cc:cc:32:90:cd:3e:e0:f7:ac:9d:fb:d8:5a:de:6e:5a:e8:
         63:a9:29:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuF7q7uoYy2tcrX80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI1MmM3OTYtNmFiMi00ZWI5LWJhYTAtMTQ0NWZjODBj
YTg0MB4XDTI1MTAxNDIxNTEwOFoXDTI2MDExMjIyNTEwOFowLzEtMCsGA1UEAxMk
NmZkY2NjNGItZmY2Zi00ODE4LWJiY2MtNDc5NDg1MjljOTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD2ZWIiV+tnpNstB5UIdS2rUDHWdjXVEVs02
1iqcXcvs57vzc9iKlpr3RhTI5Bw2WgRBMRhkp0x9+ioEBYJKzmxQWfHU4vs+5P/j
HvH7UCUaLKYuidgvOOSi0sCgSWpgr2pWPLqnXy+/AnKeo2lGVkud3+jlgn2PgevY
4YVq8yLbnI433lIm7W+tUxM1yuSSWvprabJ9ohrxt0sfAinUxospw/dYHtoQm1mb
b645MwaRJFaI3LzG0JjA6WBoWNK992maF2R3BeqbCeb6mzBD9BZPS7b8FHeJVomf
6rqG57OcKkCqmtaDIBEH1yH2Xi26r3GmQrAhRg4mauQBk1cQUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKo4O2FRpbqdcb8GoDsz/Gt+vThdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMjUy
Yzc5Ni02YWIyLTRlYjktYmFhMC0xNDQ1ZmM4MGNhODQvZWQwMzBmOTEtZWUwMS0z
YjlhLTk5NWQtY2UyYmE2MTI4ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTI1MmM3OTYtNmFiMi00ZWI5LWJh
YTAtMTQ0NWZjODBjYTg0LzEyNTJjNzk2LTZhYjItNGViOS1iYWEwLTE0NDVmYzgw
Y2E4NC5jcmwwHwYDVR0jBBgwFoAUAv6NghE83dRBtQk6uiAx1BAps/EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMjUyYzc5Ni02YWIyLTRlYjktYmFhMC0xNDQ1
ZmM4MGNhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITv9l5FxuyJhiql2h/oEMlAfgtVMhHxwkiayqNgGX7a4ncWfcqK6yMP
3dGtj174WPxPMs9Xg984zJzMpYiyWanQccM8S+6fOMm3Jhk8k9jXt5F1wl7KdPN/
4HU7wLrwBhvzievtq3CgqQ9nykpdeYuE4XG8neWJncjcQn7eQ6pLGl5HRpbdjwFQ
HTwY+4XktGvvdZxExovey8DAEIWVhiEXgf5M9Bryf5mM6x7jG/5y8bGImlcneJJN
vgcU6Hb06QYFLvvreyiM4wffUvCq3Fxa3shGN6jrF/WEnKNhgY3v89pqzoNjsZP6
D6DMzDKQzT7g96yd+9ha3m5a6GOpKQg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:26 2025 by rpki-client