Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/65a44a31-945a-3144-bd1a-64ec60da9055.roa
File:                     65a44a31-945a-3144-bd1a-64ec60da9055.roa (raw, json)
Hash identifier:          qHV9hW8/jR9c1U8/9JiaAkDtzzD7Q+L1a/Nx6U2COTI=
Subject key identifier:   D6:17:D2:28:DB:22:C8:85:46:48:85:83:6C:5C:82:02:5A:15:F4:30
Certificate issuer:       /CN=133f2e91-cc80-4b10-bfd8-32bfcceeb10d
Certificate serial:       010D0C9F4328584B52A729423816E8F908ED1700
Authority key identifier: D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/65a44a31-945a-3144-bd1a-64ec60da9055.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     8075
IP address blocks:        147.160.48.0/24 maxlen: 24
                          148.59.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:29:42:38:16:e8:f9:08:ed:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133f2e91-cc80-4b10-bfd8-32bfcceeb10d
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=3f3006ff-e45f-4545-b679-9dc17b526c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7a:d9:3d:a2:ec:2f:87:56:0b:a9:fa:01:d1:
                    74:19:48:f4:aa:79:b9:bc:cb:1f:13:c5:3a:6e:f8:
                    7c:f5:5a:bc:db:04:32:1a:ca:a9:47:bc:1f:50:b7:
                    94:fe:72:0f:1f:63:36:65:0b:43:25:58:3a:d2:b1:
                    3b:b1:b4:88:e4:66:e7:94:fc:a9:4a:f5:46:36:c4:
                    75:3b:66:ab:3c:91:d3:a3:14:3c:db:b9:d1:ad:a4:
                    6d:1f:9f:b5:ad:38:4f:60:31:2a:20:8e:96:75:72:
                    f9:e0:9b:57:64:cf:85:b5:ce:09:20:57:32:ee:0d:
                    d0:c5:76:c0:cb:92:af:2f:80:9e:6f:fd:f5:85:c2:
                    22:e2:3d:90:62:16:38:7d:b6:40:4e:9d:dc:da:da:
                    1d:8f:bb:ca:8f:94:c8:b7:8b:8a:b0:7f:18:65:8a:
                    f2:8d:0d:6c:c4:c2:ad:66:28:f6:21:48:eb:44:29:
                    4f:37:34:41:8c:9c:6d:b2:d5:48:5c:1f:24:9b:37:
                    3f:84:2f:b9:c3:3e:95:c9:ef:9e:b0:7a:92:56:27:
                    37:6b:06:73:83:b1:d3:c3:a3:1a:e7:df:bd:f6:59:
                    50:49:54:62:8b:93:08:32:94:3e:3d:46:57:7a:f6:
                    7d:51:b1:44:b6:50:0f:22:2b:11:1b:53:04:fe:56:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:17:D2:28:DB:22:C8:85:46:48:85:83:6C:5C:82:02:5A:15:F4:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/65a44a31-945a-3144-bd1a-64ec60da9055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.crl

            X509v3 Authority Key Identifier:
                keyid:D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.48.0/24
                  148.59.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:93:ef:0c:a2:2f:59:d0:05:0f:d9:13:4f:4f:67:b4:77:
         5d:66:29:15:4a:4c:31:b0:d4:89:56:27:5f:36:8b:08:c8:c6:
         6c:5e:5b:2c:db:e9:e5:4a:71:56:33:59:e0:b1:2f:50:33:2a:
         20:62:ba:cf:4d:25:f9:78:09:9c:ca:9c:f4:b9:c9:30:f3:e2:
         ea:6c:c0:9f:03:48:ca:fc:c0:66:80:14:c1:cd:12:c9:9f:28:
         f3:ae:b6:4d:83:62:15:2a:02:7d:38:21:4f:a3:97:b7:6b:c4:
         d1:65:b0:65:f2:e0:14:4b:83:4b:4b:6e:38:96:0c:1c:84:77:
         65:95:ce:7f:e1:b1:d0:65:0e:3c:48:b6:5a:3c:0d:93:c6:08:
         62:11:53:7b:2b:29:bd:9b:15:12:f1:44:19:71:fd:77:da:2e:
         7f:02:74:2a:5e:4a:76:88:a0:99:74:64:af:00:e0:9f:2b:67:
         0b:d1:5b:35:9a:ee:fc:d8:de:1a:91:77:c5:4d:bb:5a:27:55:
         5f:d2:c0:53:47:2d:4f:5d:3a:fa:65:10:f3:95:32:4f:f0:6e:
         f8:12:bf:29:31:06:60:c4:9b:b0:95:ee:0d:b7:a4:8a:52:f2:
         b5:7f:68:a2:85:a4:59:3b:c8:a4:1d:9e:05:5e:b3:55:b6:be:
         ec:3c:3b:b3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtSpylCOBbo+QjtFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTMzZjJlOTEtY2M4MC00YjEwLWJmZDgtMzJiZmNjZWVi
MTBkMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
M2YzMDA2ZmYtZTQ1Zi00NTQ1LWI2NzktOWRjMTdiNTI2YzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3rZPaLsL4dWC6n6AdF0GUj0qnm5vMsfE8U6
bvh89Vq82wQyGsqpR7wfULeU/nIPH2M2ZQtDJVg60rE7sbSI5GbnlPypSvVGNsR1
O2arPJHToxQ827nRraRtH5+1rThPYDEqII6WdXL54JtXZM+Ftc4JIFcy7g3QxXbA
y5KvL4Ceb/31hcIi4j2QYhY4fbZATp3c2todj7vKj5TIt4uKsH8YZYryjQ1sxMKt
Zij2IUjrRClPNzRBjJxtstVIXB8kmzc/hC+5wz6Vye+esHqSVic3awZzg7HTw6Ma
59+99llQSVRii5MIMpQ+PUZXevZ9UbFEtlAPIisRG1ME/lZjIQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNYX0ijbIsiFRkiFg2xcggJaFfQwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMzNm
MmU5MS1jYzgwLTRiMTAtYmZkOC0zMmJmY2NlZWIxMGQvNjVhNDRhMzEtOTQ1YS0z
MTQ0LWJkMWEtNjRlYzYwZGE5MDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTMzZjJlOTEtY2M4MC00YjEwLWJm
ZDgtMzJiZmNjZWViMTBkLzEzM2YyZTkxLWNjODAtNGIxMC1iZmQ4LTMyYmZjY2Vl
YjEwZC5jcmwwHwYDVR0jBBgwFoAU0K0JjGiXlYW3dLkU/lnSWdXWPKswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMzNmMmU5MS1jYzgwLTRiMTAtYmZkOC0zMmJm
Y2NlZWIxMGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk6AwAwQA
lDt/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABK4k+8Moi9Z0AUP2RNPT2e0d11mKRVKTDGw1IlWJ182iwjI
xmxeWyzb6eVKcVYzWeCxL1AzKiBius9NJfl4CZzKnPS5yTDz4upswJ8DSMr8wGaA
FMHNEsmfKPOutk2DYhUqAn04IU+jl7drxNFlsGXy4BRLg0tLbjiWDByEd2WVzn/h
sdBlDjxItlo8DZPGCGIRU3srKb2bFRLxRBlx/XfaLn8CdCpeSnaIoJl0ZK8A4J8r
ZwvRWzWa7vzY3hqRd8VNu1onVV/SwFNHLU9dOvplEPOVMk/wbvgSvykxBmDEm7CV
7g23pIpS8rV/aKKFpFk7yKQdngVes1W2vuw8O7M=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:07 2025 by rpki-client