Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0cf7e12-01ce-3a39-b0d6-6e612d28cad8.roa
File:                     b0cf7e12-01ce-3a39-b0d6-6e612d28cad8.roa (raw, json)
Hash identifier:          ZUUTEofM0xnzUsZ1p0jrYheQPcyaaneRL0TaU3AyfuM=
Subject key identifier:   C2:2D:8B:8F:D3:50:47:3E:5B:FB:98:B6:D8:0A:41:7C:21:10:FA:6A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B6797849D5879A4125DC0E1C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0cf7e12-01ce-3a39-b0d6-6e612d28cad8.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     36492
IP address blocks:        64.9.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:84:9d:58:79:a4:12:5d:c0:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=df51f55a-e2cd-45cf-a2da-809c18eb3492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:86:30:8f:77:1b:d1:47:66:36:c2:88:98:
                    f8:f9:21:04:7d:ca:50:5c:84:b8:69:82:f7:bd:dd:
                    d2:af:86:9c:80:0c:17:3e:92:d3:df:72:b7:79:71:
                    38:b2:c6:fb:e9:23:fc:a0:6d:8f:6d:6e:74:17:f7:
                    9f:e7:7a:3b:d1:6c:a5:13:e8:05:2c:51:94:38:62:
                    ec:9d:29:df:e6:33:40:5a:d9:94:47:cf:d8:41:f9:
                    b6:2f:d3:fd:e3:c2:df:84:78:d4:64:0c:bd:f8:7e:
                    c6:96:4d:b1:6e:75:ae:dc:f8:8c:ce:43:48:30:09:
                    f6:aa:b5:79:b5:ea:11:5f:fe:30:f0:b0:0e:7b:67:
                    93:33:66:6b:87:7e:3d:56:92:6f:10:98:e8:d0:6f:
                    3a:12:d4:7d:66:b5:fb:8f:ef:34:9a:d0:5c:d1:04:
                    8f:dd:54:67:93:0a:36:01:62:fc:62:bd:57:d6:07:
                    eb:1a:46:bc:61:b8:ff:d4:25:9d:0b:9e:7a:d8:02:
                    87:fd:f0:85:a9:c2:ea:54:4d:c4:b3:99:f6:53:8f:
                    18:e7:15:72:be:eb:db:e0:e0:5d:72:5f:49:2c:89:
                    88:88:9d:97:84:d2:35:b1:7c:d2:08:96:4f:74:7b:
                    da:dd:cb:92:56:a5:67:c8:3d:6c:bf:26:56:cc:d3:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2D:8B:8F:D3:50:47:3E:5B:FB:98:B6:D8:0A:41:7C:21:10:FA:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0cf7e12-01ce-3a39-b0d6-6e612d28cad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:60:bc:fe:6b:e2:f0:07:fd:8e:c7:6c:76:e6:c1:f2:f1:d5:
         71:aa:80:6d:e0:27:a1:15:8a:df:7e:ce:7e:75:87:70:ee:62:
         5d:08:51:7a:e7:ed:c2:01:bc:a9:b6:43:75:c0:09:f4:25:6d:
         c7:b9:95:3a:1c:a0:43:97:8f:b8:c3:32:07:a0:83:33:a9:5d:
         7a:b3:04:41:b5:86:fa:a8:f7:b5:67:5f:f8:aa:d6:68:96:9b:
         49:e7:14:1d:d4:c1:a8:51:b6:1c:10:21:90:7f:aa:ed:13:14:
         ec:bf:f3:a1:9a:b3:be:8e:8d:88:b4:a1:d1:ca:2f:d1:8f:cd:
         6d:52:83:47:09:cc:3c:d9:7a:90:23:c0:57:6d:30:4f:7c:13:
         ff:99:80:84:03:61:50:5b:ee:c7:68:3c:4d:fb:53:b6:cb:ab:
         70:32:13:f4:38:d9:e7:27:70:5d:f1:ef:04:fc:7e:3b:e3:b7:
         94:7c:c8:3c:3e:51:87:f5:6a:eb:84:55:42:07:cc:64:9f:11:
         db:23:99:21:86:10:ba:85:2c:f4:40:79:74:04:8a:15:5b:3f:
         65:9e:ff:81:01:9d:0f:c7:bf:39:57:d9:ce:e5:b8:f7:9d:20:
         fd:f8:f2:cb:1d:8a:72:9e:43:5a:81:fe:9b:2e:af:06:5a:38:
         88:65:3e:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4SdWHmkEl3A4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZGY1MWY1NWEtZTJjZC00NWNmLWEyZGEtODA5YzE4ZWIzNDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY+GMI93G9FHZjbCiJj4+SEEfcpQXIS4aYL3
vd3Sr4acgAwXPpLT33K3eXE4ssb76SP8oG2PbW50F/ef53o70WylE+gFLFGUOGLs
nSnf5jNAWtmUR8/YQfm2L9P948LfhHjUZAy9+H7Glk2xbnWu3PiMzkNIMAn2qrV5
teoRX/4w8LAOe2eTM2Zrh349VpJvEJjo0G86EtR9ZrX7j+80mtBc0QSP3VRnkwo2
AWL8Yr1X1gfrGka8Ybj/1CWdC5562AKH/fCFqcLqVE3Es5n2U48Y5xVyvuvb4OBd
cl9JLImIiJ2XhNI1sXzSCJZPdHva3cuSVqVnyD1svyZWzNMvpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMIti4/TUEc+W/uYttgKQXwhEPpqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjBjZjdlMTItMDFjZS0z
YTM5LWIwZDYtNmU2MTJkMjhjYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAn0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlgvP5r4vAH/Y7HbHbmwfLx1XGqgG3gJ6EVit9+zn51h3DuYl0IUXrn
7cIBvKm2Q3XACfQlbce5lTocoEOXj7jDMgeggzOpXXqzBEG1hvqo97VnX/iq1miW
m0nnFB3UwahRthwQIZB/qu0TFOy/86Gas76OjYi0odHKL9GPzW1Sg0cJzDzZepAj
wFdtME98E/+ZgIQDYVBb7sdoPE37U7bLq3AyE/Q42ecncF3x7wT8fjvjt5R8yDw+
UYf1auuEVUIHzGSfEdsjmSGGELqFLPRAeXQEihVbP2We/4EBnQ/HvzlX2c7luPed
IP348ssdinKeQ1qB/psurwZaOIhlPnA=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:08 2025 by rpki-client