Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
File:                     fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa (raw, json)
Hash identifier:          YTjZoH74Nm3EI2cYd//g9PSqJ05WRXWUw15tbUG4wxY=
Subject key identifier:   0F:81:7D:4B:75:27:76:F6:7C:08:53:0A:52:38:F9:DA:7A:DA:47:90
Certificate issuer:       /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial:       010D0C9F4328584B48E1BF80D71FDD51D39B56C0
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     6122
IP address blocks:        165.206.0.0/16 maxlen: 24
                          207.28.0.0/16 maxlen: 24
                          207.165.0.0/16 maxlen: 24
                          209.56.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:bf:80:d7:1f:dd:51:d3:9b:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=29445b6d-10d0-489e-844b-c8711fc0f334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d7:8e:33:06:09:b7:e1:45:64:10:e0:da:fb:
                    d8:17:aa:c3:82:40:0e:de:f9:7e:1e:0f:b4:95:d9:
                    ba:4a:62:66:7f:20:3d:6a:dc:63:09:81:66:94:c3:
                    9b:24:f2:7c:70:a6:09:5a:3a:9d:47:71:90:bd:e8:
                    ef:32:cd:27:f7:5d:1f:ed:83:1b:66:bf:f3:52:6c:
                    6a:40:5e:e0:e3:00:28:e7:23:60:4b:d6:9b:8f:1c:
                    12:da:c3:e0:e7:73:bc:1e:5a:61:da:45:e6:3e:28:
                    f4:d5:48:57:e2:87:ed:96:13:af:08:bd:bf:3b:db:
                    29:9a:de:e9:65:1f:48:24:5b:e0:6b:b5:69:8b:97:
                    54:25:f4:d8:03:73:9e:b7:52:51:1c:72:20:d7:6a:
                    ff:eb:c2:35:c3:b9:44:26:83:4f:ee:44:52:1c:ae:
                    12:69:fa:86:5f:e3:c5:74:69:c8:5e:5f:7c:10:fa:
                    9d:b8:19:93:51:6d:fb:71:43:8f:a9:86:cb:52:5d:
                    e4:85:3e:93:25:43:13:c9:1f:22:fa:a1:3d:7c:cc:
                    f1:5f:08:9b:d8:2e:2e:ca:67:49:a7:9c:ff:66:74:
                    a6:f0:14:0f:f3:69:5d:81:08:eb:58:d4:a4:bd:03:
                    49:2d:38:49:10:26:2f:2b:d4:38:92:e4:30:2b:5d:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:81:7D:4B:75:27:76:F6:7C:08:53:0A:52:38:F9:DA:7A:DA:47:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl

            X509v3 Authority Key Identifier:
                keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.206.0.0/16
                  207.28.0.0/16
                  207.165.0.0/16
                  209.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:de:4e:bf:0e:71:71:13:d5:a5:5b:68:e8:16:09:3b:5d:b9:
         54:6a:4b:ff:bd:a5:bc:a4:02:51:0e:c6:fc:ca:8b:55:e4:9d:
         32:33:0a:be:65:d0:88:82:a9:92:9c:dc:10:f1:d8:58:bc:80:
         ac:19:6d:2e:1d:61:32:06:00:d1:7f:1c:aa:04:46:34:77:ac:
         1f:32:ff:b0:e2:fc:9d:2d:14:11:3e:55:53:00:dd:29:b7:cc:
         ed:6e:ca:ad:bb:31:eb:42:55:91:f7:f0:4a:14:d3:30:91:68:
         9b:a0:a0:bb:07:4b:c7:f0:47:5d:77:d8:fd:7a:10:4e:98:99:
         fb:83:b2:2d:aa:80:73:23:07:be:d7:4d:9d:01:58:2d:8d:e2:
         0f:27:08:bd:29:7b:46:70:b8:78:fb:a5:56:0e:e2:b7:fe:7a:
         64:3a:38:25:79:54:af:66:6d:31:1c:63:35:8a:31:93:5e:96:
         d9:41:e8:4a:f0:55:0e:6a:09:a7:42:b2:e8:03:82:4f:6c:f1:
         ea:3e:b7:e9:dd:37:65:05:08:06:74:90:f4:d1:e5:5c:4f:06:
         53:aa:a8:75:bc:42:69:e1:40:f8:ac:9d:66:e3:78:5c:8f:5d:
         d5:14:43:72:25:e8:e0:b9:ed:4b:51:a5:e8:2a:a1:f1:47:e7:
         22:3a:71:a7
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEtI4b+A1x/dUdObVsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJlZjdjOWItYzc1Ni00MzlhLWFjNTktMGZiNWU1ZThj
MWVlMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
Mjk0NDViNmQtMTBkMC00ODllLTg0NGItYzg3MTFmYzBmMzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdeOMwYJt+FFZBDg2vvYF6rDgkAO3vl+Hg+0
ldm6SmJmfyA9atxjCYFmlMObJPJ8cKYJWjqdR3GQvejvMs0n910f7YMbZr/zUmxq
QF7g4wAo5yNgS9abjxwS2sPg53O8Hlph2kXmPij01UhX4oftlhOvCL2/O9spmt7p
ZR9IJFvga7Vpi5dUJfTYA3Oet1JRHHIg12r/68I1w7lEJoNP7kRSHK4SafqGX+PF
dGnIXl98EPqduBmTUW37cUOPqYbLUl3khT6TJUMTyR8i+qE9fMzxXwib2C4uymdJ
p5z/ZnSm8BQP82ldgQjrWNSkvQNJLThJECYvK9Q4kuQwK11opQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFA+BfUt1J3b2fAhTClI4+dp62keQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MmVm
N2M5Yi1jNzU2LTQzOWEtYWM1OS0wZmI1ZTVlOGMxZWUvZmUxOThmMTUtNzhlZC0z
ZTIyLWI0MWYtMWY4ODJjYThmOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzJlZjdjOWItYzc1Ni00MzlhLWFj
NTktMGZiNWU1ZThjMWVlLzcyZWY3YzliLWM3NTYtNDM5YS1hYzU5LTBmYjVlNWU4
YzFlZS5jcmwwHwYDVR0jBBgwFoAUJ7ij3Un12fMQU7ZDWsI4uCWn130wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MmVmN2M5Yi1jNzU2LTQzOWEtYWM1OS0wZmI1
ZTVlOGMxZWUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwMApc4DAwDP
HAMDAM+lAwMA0TgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAFt5Ovw5xcRPVpVto6BYJO125VGpL/72lvKQC
UQ7G/MqLVeSdMjMKvmXQiIKpkpzcEPHYWLyArBltLh1hMgYA0X8cqgRGNHesHzL/
sOL8nS0UET5VUwDdKbfM7W7Krbsx60JVkffwShTTMJFom6CguwdLx/BHXXfY/XoQ
TpiZ+4OyLaqAcyMHvtdNnQFYLY3iDycIvSl7RnC4ePulVg7it/56ZDo4JXlUr2Zt
MRxjNYoxk16W2UHoSvBVDmoJp0Ky6AOCT2zx6j636d03ZQUIBnSQ9NHlXE8GU6qo
dbxCaeFA+KydZuN4XI9d1RRDciXo4LntS1Gl6Cqh8UfnIjpxpw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:21:54 2025 by rpki-client