Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d169aa5-f885-354c-b449-7e7fb59d4782.roa
File:                     1d169aa5-f885-354c-b449-7e7fb59d4782.roa (raw, json)
Hash identifier:          o0jmPPKkIUAfjEF2HLHQHoqXuJ4uQWFov/nQPZc7aho=
Subject key identifier:   F9:69:AE:14:C9:9F:FD:6E:74:14:DF:AB:BB:99:6E:C5:8C:96:12:48
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B48E1B1F1C5271F90644F8D00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d169aa5-f885-354c-b449-7e7fb59d4782.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     25668
IP address blocks:        207.194.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b1:f1:c5:27:1f:90:64:4f:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=51895199-0699-4b48-9322-d8feec1cda74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:2f:84:07:4f:b3:13:20:ea:76:9f:a0:8a:
                    ce:59:a0:e3:ca:f6:bb:af:9d:23:46:a3:63:c2:e6:
                    d8:d6:3d:6a:5a:f2:0d:23:03:80:48:fb:05:3e:dc:
                    3c:38:b8:39:05:ac:59:b3:0f:e2:d2:8d:36:b8:ae:
                    87:42:64:ba:62:d8:e7:22:83:32:82:59:b9:d6:5d:
                    d3:53:68:a7:d5:e9:fa:8d:4c:c0:e8:30:0e:fd:40:
                    da:53:3c:08:2e:a2:ba:a0:3f:a6:f1:5d:81:7f:35:
                    9d:40:2f:1a:eb:66:e4:19:c6:45:83:6b:65:43:3d:
                    57:77:de:6c:04:f8:df:80:51:14:4a:7b:b7:02:f1:
                    0f:90:e8:04:0a:cd:38:de:15:fe:58:40:48:36:0a:
                    b2:68:5d:f1:5f:17:b9:f6:c0:c3:09:42:8b:41:59:
                    36:9f:5f:c1:44:29:c0:ed:e8:c5:2a:38:0a:e8:0c:
                    c7:23:3d:b8:c8:48:c1:f0:2c:a9:48:9e:3f:28:b5:
                    85:c9:df:15:dd:75:2e:26:ab:1e:20:0c:de:0c:50:
                    6b:84:1c:fe:a0:f4:12:dd:08:2c:fe:88:f7:a6:60:
                    61:1b:37:22:4f:db:38:4f:53:1c:ce:cb:87:ec:7c:
                    52:20:a2:37:a0:95:0f:10:f5:1c:48:42:97:56:f2:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:69:AE:14:C9:9F:FD:6E:74:14:DF:AB:BB:99:6E:C5:8C:96:12:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d169aa5-f885-354c-b449-7e7fb59d4782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:36:ff:20:9d:29:a5:cc:74:ae:6d:b6:3f:de:48:bf:30:7e:
         a9:d9:39:70:88:90:a3:09:78:c4:44:e1:84:c3:b6:93:ab:88:
         d9:8f:d4:94:39:95:21:4e:33:61:2c:5b:29:e9:08:61:3d:44:
         86:fa:39:4d:48:05:04:49:a0:f0:13:e7:3a:b9:b4:ba:8b:ac:
         a5:74:41:09:13:2a:73:a6:f7:48:b1:58:91:bf:bb:db:61:d2:
         d3:82:a0:af:53:6c:eb:bc:50:e6:9e:37:63:de:28:4d:ee:68:
         d2:d4:6d:53:8b:54:80:18:eb:f1:3d:cf:cd:ed:17:e7:1f:47:
         2f:ff:ae:a5:5c:5e:5c:02:dc:de:dd:70:48:09:ac:93:38:03:
         bf:25:9a:b9:3c:15:63:1d:cb:ca:0d:b5:d5:70:46:83:7e:e7:
         52:4d:80:d1:b5:41:5c:55:30:e2:7a:74:ea:16:68:56:e9:ee:
         32:f2:78:41:17:fc:92:de:5b:a2:c6:d6:0e:04:1c:64:23:95:
         99:46:e7:18:a5:03:0f:60:1d:85:31:f0:a7:0d:c7:7b:da:d8:
         7c:91:61:93:7a:65:d5:9d:df:df:3a:d9:6c:b6:de:8a:ce:14:
         ed:26:26:3e:06:7b:fd:3b:ad:01:f2:91:a0:f8:4e:92:f9:98:
         ed:7f:96:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bHxxScfkGRPjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
NTE4OTUxOTktMDY5OS00YjQ4LTkzMjItZDhmZWVjMWNkYTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsYvhAdPsxMg6nafoIrOWaDjyva7r50jRqNj
wubY1j1qWvINIwOASPsFPtw8OLg5BaxZsw/i0o02uK6HQmS6YtjnIoMyglm51l3T
U2in1en6jUzA6DAO/UDaUzwILqK6oD+m8V2BfzWdQC8a62bkGcZFg2tlQz1Xd95s
BPjfgFEUSnu3AvEPkOgECs043hX+WEBINgqyaF3xXxe59sDDCUKLQVk2n1/BRCnA
7ejFKjgK6AzHIz24yEjB8CypSJ4/KLWFyd8V3XUuJqseIAzeDFBrhBz+oPQS3Qgs
/oj3pmBhGzciT9s4T1MczsuH7HxSIKI3oJUPEPUcSEKXVvK8SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPlprhTJn/1udBTfq7uZbsWMlhJIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWQxNjlhYTUtZjg4NS0z
NTRjLWI0NDktN2U3ZmI1OWQ0NzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8LUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQ2/yCdKaXMdK5ttj/eSL8wfqnZOXCIkKMJeMRE4YTDtpOriNmP1JQ5
lSFOM2EsWynpCGE9RIb6OU1IBQRJoPAT5zq5tLqLrKV0QQkTKnOm90ixWJG/u9th
0tOCoK9TbOu8UOaeN2PeKE3uaNLUbVOLVIAY6/E9z83tF+cfRy//rqVcXlwC3N7d
cEgJrJM4A78lmrk8FWMdy8oNtdVwRoN+51JNgNG1QVxVMOJ6dOoWaFbp7jLyeEEX
/JLeW6LG1g4EHGQjlZlG5xilAw9gHYUx8KcNx3va2HyRYZN6ZdWd39862Wy23orO
FO0mJj4Ge/07rQHykaD4TpL5mO1/lmA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:17:59 2025 by rpki-client