Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7275d87c-dbb4-3c0d-a9ef-1902b4f799bf.roa
File:                     7275d87c-dbb4-3c0d-a9ef-1902b4f799bf.roa (raw, json)
Hash identifier:          UWfzBhgtRFfyd56ghqIRaG5WZpVP8nJQGeQmssAJvE0=
Subject key identifier:   06:C9:F0:09:B4:8C:13:43:2C:CF:20:9D:F4:AE:8B:58:06:B1:83:0D
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584AF25687BE6BCA1C17B80BE480
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7275d87c-dbb4-3c0d-a9ef-1902b4f799bf.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     6079
IP address blocks:        209.122.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:87:be:6b:ca:1c:17:b8:0b:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=63c07be8-8312-41d3-8f29-9a3c8b18811e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:21:93:e7:40:16:62:01:6a:b5:6a:61:28:78:
                    66:ad:ec:cc:c0:88:93:bc:2a:72:37:c1:22:1a:a0:
                    cd:01:82:84:1c:f7:a6:d5:de:d4:d9:1d:8e:ae:a0:
                    45:8e:3f:48:2e:7e:e1:43:b1:5f:86:37:3b:d1:22:
                    53:6a:8c:71:af:bf:c3:b8:3f:f3:99:64:0f:f2:cc:
                    ed:78:3b:d3:1d:a0:19:71:d8:16:d3:21:ac:2a:a6:
                    b7:80:b0:d1:eb:1a:58:e1:cf:0a:7a:7f:df:8d:23:
                    80:59:31:4e:a0:dd:da:08:1b:bc:df:02:c6:72:a2:
                    ba:e9:83:18:cf:2a:81:da:56:a1:a2:28:cc:7f:e3:
                    14:ad:a9:87:1d:68:f5:be:4a:88:fc:56:a4:12:89:
                    f7:67:85:43:fe:a2:18:0f:0c:6e:e8:87:6a:cf:53:
                    a1:37:35:f1:bf:36:ef:2d:1e:56:05:c3:19:5b:03:
                    00:33:8c:ff:7b:c9:71:8a:92:8c:45:bf:55:f2:a1:
                    63:9b:2d:60:7f:af:c4:79:c1:7f:c4:a4:3a:96:06:
                    77:0e:12:ef:72:0d:39:04:8e:d1:05:a2:33:f9:86:
                    ce:0d:ac:08:03:43:1b:42:78:05:2f:36:78:f2:7a:
                    b4:0f:a0:53:ab:7f:df:ad:26:00:5b:1e:d8:4c:a3:
                    f8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C9:F0:09:B4:8C:13:43:2C:CF:20:9D:F4:AE:8B:58:06:B1:83:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7275d87c-dbb4-3c0d-a9ef-1902b4f799bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.122.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:cf:a3:0b:3f:82:52:0c:bf:fc:a9:ff:4c:8d:4f:18:77:34:
         20:fa:fe:85:2e:a6:c2:4f:30:18:94:d6:9d:b7:18:3e:b5:12:
         3e:88:5d:ad:d2:af:d8:69:a2:8d:4a:37:a4:98:2f:76:69:c1:
         95:59:15:10:b8:d5:80:20:fb:80:5c:1f:04:29:55:29:f9:c9:
         08:1b:b7:84:aa:db:eb:c9:7b:a6:2d:ab:5f:a8:04:39:11:a2:
         de:61:df:43:0c:b0:91:89:ff:7c:13:cd:b9:38:96:13:08:65:
         a1:3f:49:ac:92:4c:f7:a2:a8:30:50:ad:f9:f2:95:23:df:7d:
         d5:11:95:27:66:5c:de:e0:79:05:8e:a6:50:54:bd:0f:bd:d5:
         75:ad:e5:e2:53:9f:65:1d:e4:47:21:fd:fb:04:87:7e:e7:37:
         72:38:9b:e0:89:57:84:44:8c:c4:9b:3e:e0:59:59:52:10:fa:
         15:e1:8a:b2:49:24:81:74:4b:5d:19:7d:df:7c:ae:49:7e:fe:
         f0:38:65:cf:15:3a:e3:ed:b2:2c:bd:4a:93:be:6b:2a:28:95:
         1a:ab:fc:22:c0:c7:01:52:d0:14:61:fb:14:1c:8d:a6:1c:f1:
         71:ea:45:c3:71:15:9c:24:31:96:9d:5a:3d:ac:4a:1b:6e:54:
         2d:59:52:2e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEryVoe+a8ocF7gL5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2
ODczMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk
NjNjMDdiZTgtODMxMi00MWQzLThmMjktOWEzYzhiMTg4MTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyGT50AWYgFqtWphKHhmrezMwIiTvCpyN8Ei
GqDNAYKEHPem1d7U2R2OrqBFjj9ILn7hQ7Ffhjc70SJTaoxxr7/DuD/zmWQP8szt
eDvTHaAZcdgW0yGsKqa3gLDR6xpY4c8Ken/fjSOAWTFOoN3aCBu83wLGcqK66YMY
zyqB2lahoijMf+MUramHHWj1vkqI/FakEon3Z4VD/qIYDwxu6Idqz1OhNzXxvzbv
LR5WBcMZWwMAM4z/e8lxipKMRb9V8qFjmy1gf6/EecF/xKQ6lgZ3DhLvcg05BI7R
BaIz+YbODawIA0MbQngFLzZ48nq0D6BTq3/frSYAWx7YTKP4UwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAbJ8Am0jBNDLM8gnfSui1gGsYMNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0
NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvNzI3NWQ4N2MtZGJiNC0z
YzBkLWE5ZWYtMTkwMmI0Zjc5OWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli
MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk
Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw
MTRkZDY4NzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0XowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkc+jCz+CUgy//Kn/TI1PGHc0IPr+hS6mwk8wGJTWnbcYPrUSPohdrdKv
2GmijUo3pJgvdmnBlVkVELjVgCD7gFwfBClVKfnJCBu3hKrb68l7pi2rX6gEORGi
3mHfQwywkYn/fBPNuTiWEwhloT9JrJJM96KoMFCt+fKVI9991RGVJ2Zc3uB5BY6m
UFS9D73Vda3l4lOfZR3kRyH9+wSHfuc3cjib4IlXhESMxJs+4FlZUhD6FeGKskkk
gXRLXRl933yuSX7+8DhlzxU64+2yLL1Kk75rKiiVGqv8IsDHAVLQFGH7FByNphzx
cepFw3EVnCQxlp1aPaxKG25ULVlSLg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:37 2025 by rpki-client