Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6825fed4-b907-3a8c-9728-6856bf96279d.roa
File:                     6825fed4-b907-3a8c-9728-6856bf96279d.roa (raw, json)
Hash identifier:          TFOOdmTgHb6Et7tVZfqSDPPryOaFR5uhHXSyC+9qhSs=
Subject key identifier:   63:B5:3A:4E:56:5C:DF:33:C7:83:2A:8E:D8:AA:A7:02:1B:80:89:94
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F4328584B7C99A674C6974B2743E96480
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6825fed4-b907-3a8c-9728-6856bf96279d.roa
Signing time:             Sat 11 Oct 2025 13:37:31 +0000
ROA not before:           Sat 11 Oct 2025 13:37:31 +0000
ROA not after:            Fri 09 Jan 2026 14:37:31 +0000
asID:                     64267
IP address blocks:        216.126.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:99:a6:74:c6:97:4b:27:43:e9:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Oct 11 13:37:31 2025 GMT
            Not After : Jan  9 14:37:31 2026 GMT
        Subject: CN=3f6e51fc-3ceb-43cf-b647-7ed567b5a109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:79:8c:8c:5a:fd:68:c3:04:6f:b0:8c:2c:
                    86:89:25:16:a3:5f:40:ee:30:1f:27:ad:e3:f1:82:
                    9a:df:15:61:4f:a2:2f:6f:87:9c:b0:f1:ba:94:41:
                    eb:70:55:43:67:a0:64:a7:60:78:32:21:21:c0:fb:
                    79:e6:a6:98:48:82:2b:dd:28:1a:15:d9:91:45:04:
                    94:7c:47:3b:9a:6c:25:90:b4:a9:94:5f:46:b5:81:
                    af:c1:b3:b7:90:a6:0c:5d:8b:7a:63:eb:b7:e6:af:
                    a1:a6:cc:96:b5:3b:0a:0e:80:78:56:c9:36:c9:bf:
                    2b:83:8b:78:8c:64:3e:dd:f1:59:e1:29:69:0b:57:
                    b9:3a:10:1e:a7:9d:26:74:96:7a:30:01:c4:cb:d9:
                    e3:a5:bf:e5:54:99:ba:4e:36:7f:71:35:62:f8:84:
                    44:a6:35:cb:7c:f1:66:e5:ee:c5:0f:a3:5a:db:ee:
                    af:51:d1:73:de:3c:b6:6f:fe:29:ac:58:72:e7:c1:
                    64:a6:b9:e2:b2:4f:8a:92:e7:90:02:b2:b9:72:63:
                    46:e8:50:1c:8c:27:ad:7b:d8:c6:3a:31:c2:6a:c3:
                    7b:23:61:cf:c0:b6:29:a8:5f:8c:2c:cd:ce:ba:a1:
                    c4:ee:8a:ce:99:bc:69:41:f6:88:07:96:53:29:c9:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B5:3A:4E:56:5C:DF:33:C7:83:2A:8E:D8:AA:A7:02:1B:80:89:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6825fed4-b907-3a8c-9728-6856bf96279d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:25:47:0f:12:c4:ff:35:53:21:3f:03:9a:2f:8b:88:06:ac:
         d4:11:7b:4c:62:61:d6:fc:c6:4e:26:84:81:27:50:1e:fb:fa:
         d7:d3:23:64:54:33:74:97:f0:5e:a8:16:20:6c:8f:c8:8c:d1:
         23:bf:e7:d9:35:c0:37:7e:9c:29:64:24:0b:c0:4b:67:28:2c:
         f3:cf:3e:53:aa:37:06:01:83:b7:b2:75:ec:ec:df:4f:3c:52:
         44:f7:7d:c4:96:63:d9:7e:2c:df:f7:cd:50:24:f5:ba:09:fc:
         19:3d:a3:a4:21:05:5c:15:75:75:60:89:b7:c3:f6:61:7c:65:
         12:64:ed:82:df:f4:c5:79:7b:66:1f:32:19:b3:5b:54:1a:69:
         67:0d:dc:b8:0d:84:7b:e9:ed:cb:9b:04:c1:64:ed:c0:d7:c5:
         14:e6:54:0e:bd:9a:d1:6d:8a:df:c3:d9:d2:0a:da:43:5b:a4:
         cd:9f:35:f8:7a:cb:f1:8c:b0:e9:33:5c:79:81:1e:0a:74:ed:
         e5:c7:1f:94:92:4f:49:61:d1:a2:9f:b8:8b:91:58:44:74:9f:
         6b:8a:80:80:98:d0:20:46:8c:fc:f4:28:ba:02:80:9e:ab:26:
         c0:95:10:aa:01:35:98:20:99:eb:4f:28:ae:7f:b3:09:e0:10:
         15:37:72:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8maZ0xpdLJ0PpZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx
ZDc0MB4XDTI1MTAxMTEzMzczMVoXDTI2MDEwOTE0MzczMVowLzEtMCsGA1UEAxMk
M2Y2ZTUxZmMtM2NlYi00M2NmLWI2NDctN2VkNTY3YjVhMTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jV5jIxa/WjDBG+wjCyGiSUWo19A7jAfJ63j
8YKa3xVhT6Ivb4ecsPG6lEHrcFVDZ6Bkp2B4MiEhwPt55qaYSIIr3SgaFdmRRQSU
fEc7mmwlkLSplF9GtYGvwbO3kKYMXYt6Y+u35q+hpsyWtTsKDoB4Vsk2yb8rg4t4
jGQ+3fFZ4SlpC1e5OhAep50mdJZ6MAHEy9njpb/lVJm6TjZ/cTVi+IREpjXLfPFm
5e7FD6Na2+6vUdFz3jy2b/4prFhy58Fkprnisk+KkueQArK5cmNG6FAcjCete9jG
OjHCasN7I2HPwLYpqF+MLM3OuqHE7orOmbxpQfaIB5ZTKcnHNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGO1Ok5WXN8zx4MqjtiqpwIbgImUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4
Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvNjgyNWZlZDQtYjkwNy0z
YThjLTk3MjgtNjg1NmJmOTYyNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi
ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey
MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0
NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H47MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHglRw8SxP81UyE/A5ovi4gGrNQRe0xiYdb8xk4mhIEnUB77+tfTI2RU
M3SX8F6oFiBsj8iM0SO/59k1wDd+nClkJAvAS2coLPPPPlOqNwYBg7eydezs3088
UkT3fcSWY9l+LN/3zVAk9boJ/Bk9o6QhBVwVdXVgibfD9mF8ZRJk7YLf9MV5e2Yf
MhmzW1QaaWcN3LgNhHvp7cubBMFk7cDXxRTmVA69mtFtit/D2dIK2kNbpM2fNfh6
y/GMsOkzXHmBHgp07eXHH5SST0lh0aKfuIuRWER0n2uKgICY0CBGjPz0KLoCgJ6r
JsCVEKoBNZggmetPKK5/swngEBU3cvY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:44 2025 by rpki-client