Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/6ba1db2c-e004-3091-8b4a-31ecb3538b12.roa
File:                     6ba1db2c-e004-3091-8b4a-31ecb3538b12.roa (raw, json)
Hash identifier:          vaUYqQVdPDjhRQyCMcW5cw9HC53whZrX43D7I2O0pd4=
Subject key identifier:   DC:15:6A:9A:F6:10:2E:C6:4D:C2:D2:B3:71:56:5B:7A:10:D1:68:FC
Certificate issuer:       /CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
Certificate serial:       010D0C9F4328584B13D6BBA6FC5E8DB29F548D10
Authority key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/6ba1db2c-e004-3091-8b4a-31ecb3538b12.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        165.130.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:bb:a6:fc:5e:8d:b2:9f:54:8d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=886d9323-47f7-40c7-8f7b-a85460e503b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:1d:b0:8c:70:06:22:89:53:a9:a0:1f:b1:
                    9e:14:86:bb:56:ea:ea:2f:cd:c5:6f:64:a0:1f:52:
                    22:7e:0f:77:61:f5:4d:24:53:03:43:37:6f:4e:51:
                    e3:a2:23:05:98:0b:a2:6d:80:81:ee:c3:15:2d:e4:
                    ef:44:e0:cf:0b:46:ca:b1:35:34:f8:d5:71:f4:94:
                    a3:e8:9a:cd:55:28:a8:44:54:2e:fa:e4:5e:8e:2b:
                    3e:79:7a:f1:0a:49:d1:37:24:7e:cc:d5:a4:1a:4a:
                    36:0a:56:bd:83:e9:15:e3:11:f8:bd:24:05:25:e9:
                    db:69:a7:b0:ee:07:86:ae:06:4c:6e:ee:45:05:f6:
                    e0:fc:5c:37:53:c3:c4:57:ee:84:2e:df:a7:c2:84:
                    55:48:f2:5e:b0:eb:e3:3a:72:85:11:79:aa:f5:9a:
                    4d:71:d1:0d:f7:3e:77:d1:d9:5f:46:b6:c9:e4:dc:
                    4e:0f:ff:e3:80:49:48:23:a4:1b:56:d0:5a:c6:08:
                    b8:39:51:93:0a:49:7e:8e:a4:e4:a2:4b:a3:c0:c8:
                    4e:90:8a:10:7f:04:e7:32:f7:73:c8:90:f2:d1:50:
                    cb:82:17:34:82:5f:c8:c3:46:dd:d9:30:cc:af:d2:
                    49:21:c5:5d:7c:3c:40:2b:90:78:49:4e:02:75:80:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:15:6A:9A:F6:10:2E:C6:4D:C2:D2:B3:71:56:5B:7A:10:D1:68:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/6ba1db2c-e004-3091-8b4a-31ecb3538b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl

            X509v3 Authority Key Identifier:
                keyid:B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.130.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:7d:4f:4e:dd:b6:a6:ed:33:87:26:16:97:57:08:95:0f:df:
         15:4a:27:a8:88:fb:6f:ef:eb:96:27:96:69:9e:95:c4:c8:90:
         c6:6f:b6:7e:24:e7:71:ea:03:68:8e:e6:c7:bd:9e:d9:48:63:
         25:b3:7f:c6:2f:32:3c:e1:cc:95:70:46:f8:99:b9:a5:5a:48:
         e5:1c:c5:ab:8e:61:46:f9:81:9c:53:6e:ce:5e:6e:60:45:df:
         71:c1:fb:6c:29:e0:7e:1d:71:25:58:35:a0:ef:9d:30:de:26:
         ab:3f:94:ec:c8:4b:80:cb:ec:49:76:06:f7:90:6e:d4:68:22:
         5b:c9:bb:d0:0e:eb:70:86:44:36:be:d5:2c:53:3f:86:7b:93:
         cf:71:5a:04:c4:13:93:19:2a:68:9d:27:d9:39:fd:97:f4:eb:
         17:8e:2b:70:c4:e4:60:47:14:cf:b4:b2:79:d4:2a:43:cf:e9:
         c7:b4:cb:74:9e:80:88:c2:a4:ed:19:4a:2b:7f:61:27:1e:45:
         d3:f8:64:cd:c5:78:da:7a:63:ca:f8:fc:de:4a:68:10:4d:b3:
         5e:48:27:9c:87:8c:90:c6:b0:e2:ca:1a:46:0e:1d:71:8c:3d:
         f3:23:b6:bf:14:22:dc:74:00:0e:0b:03:dc:53:e9:a2:a8:8f:
         ac:8c:46:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rum/F6Nsp9UjRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzk5ODFjMWYtNWI5MC00YWM0LWJkM2EtMTdjNTQ1MjE0
NmMzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
ODg2ZDkzMjMtNDdmNy00MGM3LThmN2ItYTg1NDYwZTUwM2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7YdsIxwBiKJU6mgH7GeFIa7VurqL83Fb2Sg
H1Iifg93YfVNJFMDQzdvTlHjoiMFmAuibYCB7sMVLeTvRODPC0bKsTU0+NVx9JSj
6JrNVSioRFQu+uRejis+eXrxCknRNyR+zNWkGko2Cla9g+kV4xH4vSQFJenbaaew
7geGrgZMbu5FBfbg/Fw3U8PEV+6ELt+nwoRVSPJesOvjOnKFEXmq9ZpNcdEN9z53
0dlfRrbJ5NxOD//jgElII6QbVtBaxgi4OVGTCkl+jqTkokujwMhOkIoQfwTnMvdz
yJDy0VDLghc0gl/Iw0bd2TDMr9JJIcVdfDxAK5B4SU4CdYC3SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwVapr2EC7GTcLSs3FWW3oQ0Wj8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4
MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1NDUyMTQ2YzMvNmJhMWRiMmMtZTAwNC0z
MDkxLThiNGEtMzFlY2IzNTM4YjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk5ODFjMWYtNWI5MC00YWM0LWJk
M2EtMTdjNTQ1MjE0NmMzL2M5OTgxYzFmLTViOTAtNGFjNC1iZDNhLTE3YzU0NTIx
NDZjMy5jcmwwHwYDVR0jBBgwFoAUud4nFso2NAm9Cwz2faUhvHaAqNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1
NDUyMTQ2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYI+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL59T07dtqbtM4cmFpdXCJUP3xVKJ6iI+2/v65YnlmmelcTIkMZvtn4k
53HqA2iO5se9ntlIYyWzf8YvMjzhzJVwRviZuaVaSOUcxauOYUb5gZxTbs5ebmBF
33HB+2wp4H4dcSVYNaDvnTDeJqs/lOzIS4DL7El2BveQbtRoIlvJu9AO63CGRDa+
1SxTP4Z7k89xWgTEE5MZKmidJ9k5/Zf06xeOK3DE5GBHFM+0snnUKkPP6ce0y3Se
gIjCpO0ZSit/YSceRdP4ZM3FeNp6Y8r4/N5KaBBNs15IJ5yHjJDGsOLKGkYOHXGM
PfMjtr8UItx0AA4LA9xT6aKoj6yMRg4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:31:19 2025 by rpki-client