Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f562549d-9cd5-3fb4-9413-8758db119327.roa
File:                     f562549d-9cd5-3fb4-9413-8758db119327.roa (raw, json)
Hash identifier:          I3Zq5Y5r9skF79s4eeJmHv8VgpRvhLFQhMW9klH3kkg=
Subject key identifier:   AF:4C:04:12:4B:57:D1:72:FB:77:C5:B1:14:48:64:83:CF:DA:0D:3B
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584B64CE1DBBDEDD29B6A1D3D440
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f562549d-9cd5-3fb4-9413-8758db119327.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        172.102.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:1d:bb:de:dd:29:b6:a1:d3:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=8f75d039-c92f-43c6-b1ce-39dce458b410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:07:19:f6:d6:c1:f2:d6:09:c0:d9:94:43:e5:
                    66:a9:48:da:12:e4:de:87:b8:b9:86:8d:6a:25:d5:
                    46:5a:3d:c1:4f:7c:c0:07:3d:a3:dd:04:d0:c0:78:
                    0f:2b:06:aa:17:91:2d:af:1e:61:15:f7:8b:4b:d4:
                    bc:c3:2d:e6:61:61:9c:60:ee:91:5c:b8:86:1d:71:
                    71:79:0a:e7:01:9d:25:4a:1e:5a:5d:95:0e:b5:49:
                    fd:c6:23:01:29:5d:82:57:e0:74:f5:64:a3:f3:7b:
                    02:41:4b:ce:9d:3a:9e:28:9c:4f:85:1c:2e:e9:ae:
                    d3:77:10:8a:00:3d:ac:86:62:4f:15:e0:d9:a7:a3:
                    d1:49:4a:7f:5d:96:3e:09:e2:33:01:e7:a3:74:93:
                    71:dd:cb:fb:d3:4d:c7:c3:50:e7:de:b7:7b:ba:27:
                    49:ca:ad:29:05:af:05:77:f3:bd:f5:e5:75:d8:c1:
                    ac:08:32:60:2d:4e:20:ea:58:83:39:04:64:22:b2:
                    3c:e0:86:bb:d1:16:01:15:fc:1e:7e:e7:ff:82:94:
                    1b:3c:c8:dc:fa:65:31:df:73:b6:52:d5:2f:ff:9c:
                    55:de:7e:92:c9:e1:fe:f4:18:55:00:33:11:0a:73:
                    cc:5f:74:98:b6:f7:4a:8d:d0:33:e2:4a:0a:0d:e1:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:04:12:4B:57:D1:72:FB:77:C5:B1:14:48:64:83:CF:DA:0D:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f562549d-9cd5-3fb4-9413-8758db119327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:da:db:1d:d1:8c:a7:f6:64:35:01:a6:01:4b:3a:49:20:d9:
         66:e6:4b:44:0c:1b:18:bc:11:e4:30:fe:f1:85:22:19:d0:98:
         a9:13:0d:e2:93:ff:02:b4:7d:a0:91:29:e9:c3:00:a6:41:e2:
         72:d7:14:0d:a7:71:4a:27:8f:07:db:27:63:67:e4:4e:c1:8a:
         4d:c9:b7:cb:c3:ce:4b:34:a6:36:22:e0:9f:46:f1:4d:e8:3c:
         a5:27:3a:04:a8:13:2e:4b:c1:92:84:46:5d:07:5e:36:9e:9f:
         59:e7:1d:00:d5:65:37:af:77:d7:16:9b:1a:07:74:fa:a6:97:
         9f:9e:28:f9:bf:2d:9f:66:45:c1:bc:bd:5f:cd:76:4e:81:2b:
         e6:98:6b:23:29:7c:1a:55:e7:1c:a0:a7:23:7d:01:94:18:c1:
         59:71:18:a7:33:e7:17:4c:5b:f3:20:cf:aa:58:09:d1:7f:76:
         fb:58:b7:4c:a5:15:99:8e:f8:cd:fb:38:b2:73:87:26:fb:45:
         a0:d9:29:7d:d4:f3:3c:3b:31:ad:70:e9:f3:f0:dd:92:6c:69:
         8f:a5:4f:fd:78:75:1d:07:99:1f:6b:ff:11:b4:a3:e7:ee:b1:
         76:67:61:00:b3:57:75:6f:6e:4f:60:04:32:e6:36:0f:28:ba:
         eb:31:ca:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzh273t0ptqHT1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
OGY3NWQwMzktYzkyZi00M2M2LWIxY2UtMzlkY2U0NThiNDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggcZ9tbB8tYJwNmUQ+VmqUjaEuTeh7i5ho1q
JdVGWj3BT3zABz2j3QTQwHgPKwaqF5Etrx5hFfeLS9S8wy3mYWGcYO6RXLiGHXFx
eQrnAZ0lSh5aXZUOtUn9xiMBKV2CV+B09WSj83sCQUvOnTqeKJxPhRwu6a7TdxCK
AD2shmJPFeDZp6PRSUp/XZY+CeIzAeejdJNx3cv7003Hw1Dn3rd7uidJyq0pBa8F
d/O99eV12MGsCDJgLU4g6liDOQRkIrI84Ia70RYBFfwefuf/gpQbPMjc+mUx33O2
UtUv/5xV3n6SyeH+9BhVADMRCnPMX3SYtvdKjdAz4koKDeF00QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK9MBBJLV9Fy+3fFsRRIZIPP2g07MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvZjU2MjU0OWQtOWNkNS0z
ZmI0LTk0MTMtODc1OGRiMTE5MzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLa2x3RjKf2ZDUBpgFLOkkg2WbmS0QMGxi8EeQw/vGFIhnQmKkTDeKT
/wK0faCRKenDAKZB4nLXFA2ncUonjwfbJ2Nn5E7Bik3Jt8vDzks0pjYi4J9G8U3o
PKUnOgSoEy5LwZKERl0HXjaen1nnHQDVZTevd9cWmxoHdPqml5+eKPm/LZ9mRcG8
vV/Ndk6BK+aYayMpfBpV5xygpyN9AZQYwVlxGKcz5xdMW/Mgz6pYCdF/dvtYt0yl
FZmO+M37OLJzhyb7RaDZKX3U8zw7Ma1w6fPw3ZJsaY+lT/14dR0HmR9r/xG0o+fu
sXZnYQCzV3Vvbk9gBDLmNg8ouusxyk8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:03 2025 by rpki-client