Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa
File:                     d7e961b2-50a1-302c-b680-21a7f62e493d.roa (raw, json)
Hash identifier:          R/U1EUbcSmoE3skloen77YV2+T+RiU9RBTGRCfOPtqU=
Subject key identifier:   D8:02:AF:4D:A4:76:B7:EE:08:21:72:B4:C4:2B:C0:EA:09:90:7A:46
Certificate issuer:       /CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
Certificate serial:       010D0C9F4328584B8BE224EC5D7E788CEB814A00
Authority key identifier: 46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     22711
IP address blocks:        206.83.160.0/20 maxlen: 24
                          2620:13d:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:24:ec:5d:7e:78:8c:eb:81:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=cd30b08d-ad18-4d59-ba05-6fa9c260e88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:e3:8f:c3:aa:eb:f2:5e:62:d6:db:d4:c7:
                    09:5a:aa:9d:56:45:0e:e2:90:1b:f7:c8:12:1c:af:
                    b3:d5:23:03:34:52:30:40:e5:3a:08:12:c9:91:63:
                    a5:60:95:4c:e0:05:76:50:0b:d5:fc:46:9e:dc:b8:
                    49:9b:72:9e:1a:55:e1:14:18:bc:c0:c0:61:f9:c2:
                    86:b4:af:36:9d:ea:24:9b:da:18:8f:1e:5c:29:c2:
                    a7:e2:ba:2d:6e:94:ab:5d:3a:bb:4c:4d:64:ca:7a:
                    57:b4:01:4e:1c:a5:86:d9:d8:a1:3a:c2:78:44:33:
                    e9:5f:fe:8b:0f:48:12:45:b7:ee:80:a8:d2:d5:fc:
                    7f:47:f8:e3:b8:2c:e0:2a:6a:34:61:90:f3:5c:14:
                    b7:3c:02:e2:94:be:5d:a2:ff:e6:9a:37:8c:3e:bc:
                    e6:4a:ee:64:98:6d:e2:46:fd:6e:38:cb:e2:fa:a3:
                    b3:b3:39:bc:2a:61:f5:db:f4:6e:fa:7b:55:1a:09:
                    9e:96:4d:23:74:8f:82:5c:af:e1:f7:78:ff:d4:6e:
                    da:f8:35:56:5c:33:ff:33:a9:5f:83:66:49:00:e8:
                    e1:7c:d9:86:c8:24:7e:a1:ba:c3:21:23:61:33:00:
                    0a:5a:0d:bd:c7:cf:0e:10:cc:f4:39:54:28:09:c2:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:02:AF:4D:A4:76:B7:EE:08:21:72:B4:C4:2B:C0:EA:09:90:7A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.160.0/20
                IPv6:
                  2620:13d:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:29:e0:71:27:2a:85:6b:6e:ba:91:c4:4b:5a:39:f4:ef:c3:
         5b:0f:00:ae:bc:58:d7:41:28:02:87:4b:30:a9:ca:17:4f:92:
         29:40:5e:f5:8a:a6:fc:eb:7e:67:48:83:7c:88:ec:6f:d6:0e:
         cc:35:7d:c8:05:eb:a8:1b:2c:57:95:fc:dc:25:6a:f1:28:d5:
         83:37:c7:9f:4e:37:33:fa:af:7d:4f:e1:ff:d5:9c:5f:83:e0:
         40:50:f4:6f:66:21:2f:4a:50:f5:01:67:66:30:b1:b0:d2:8b:
         dc:22:64:1e:88:10:43:82:9b:28:fc:9e:dc:d4:df:ab:c4:51:
         a9:cd:d2:f4:91:1c:f7:30:c5:c3:35:48:9b:89:76:4b:0e:62:
         81:47:8b:48:7e:1c:c2:4d:03:07:5a:f9:89:56:31:58:58:28:
         ce:dc:5d:5b:a4:f7:8c:e6:f5:64:6b:9d:f8:ae:3d:25:24:50:
         44:b9:a1:28:fc:34:c2:b5:c2:41:d5:11:96:66:57:3c:fd:a9:
         63:39:1d:ac:90:00:e3:16:45:ec:fb:8f:b8:5b:82:6d:ec:3c:
         7c:35:2c:6d:17:83:62:8b:61:c4:ce:76:01:58:d3:b6:68:64:
         9e:62:33:6c:cf:04:b3:12:fd:1c:b3:58:2b:6b:58:e5:bc:c2:
         47:1d:e3:39
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuL4iTsXX54jOuBSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjgzNzVjZTQtZjljYi00MGViLTlmODMtNjdkMWNmYWFh
M2Y1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
Y2QzMGIwOGQtYWQxOC00ZDU5LWJhMDUtNmZhOWMyNjBlODhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaLjj8Oq6/JeYtbb1McJWqqdVkUO4pAb98gS
HK+z1SMDNFIwQOU6CBLJkWOlYJVM4AV2UAvV/Eae3LhJm3KeGlXhFBi8wMBh+cKG
tK82neokm9oYjx5cKcKn4rotbpSrXTq7TE1kynpXtAFOHKWG2dihOsJ4RDPpX/6L
D0gSRbfugKjS1fx/R/jjuCzgKmo0YZDzXBS3PALilL5dov/mmjeMPrzmSu5kmG3i
Rv1uOMvi+qOzszm8KmH12/Ru+ntVGgmelk0jdI+CXK/h93j/1G7a+DVWXDP/M6lf
g2ZJAOjhfNmGyCR+obrDISNhMwAKWg29x88OEMz0OVQoCcJUMwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFNgCr02kdrfuCCFytMQrwOoJkHpGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ODM3
NWNlNC1mOWNiLTQwZWItOWY4My02N2QxY2ZhYWEzZjUvZDdlOTYxYjItNTBhMS0z
MDJjLWI2ODAtMjFhN2Y2MmU0OTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjgzNzVjZTQtZjljYi00MGViLTlm
ODMtNjdkMWNmYWFhM2Y1LzY4Mzc1Y2U0LWY5Y2ItNDBlYi05ZjgzLTY3ZDFjZmFh
YTNmNS5jcmwwHwYDVR0jBBgwFoAURup/fr/edULFdRaspZP5BoounswwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ODM3NWNlNC1mOWNiLTQwZWItOWY4My02N2Qx
Y2ZhYWEzZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEzlOgMA4E
AgACMAgDBgAmIAE98DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEKeBxJyqFa266kcRLWjn078NbDwCuvFjX
QSgCh0swqcoXT5IpQF71iqb8635nSIN8iOxv1g7MNX3IBeuoGyxXlfzcJWrxKNWD
N8efTjcz+q99T+H/1Zxfg+BAUPRvZiEvSlD1AWdmMLGw0ovcImQeiBBDgpso/J7c
1N+rxFGpzdL0kRz3MMXDNUibiXZLDmKBR4tIfhzCTQMHWvmJVjFYWCjO3F1bpPeM
5vVka534rj0lJFBEuaEo/DTCtcJB1RGWZlc8/aljOR2skADjFkXs+4+4W4Jt7Dx8
NSxtF4Nii2HEznYBWNO2aGSeYjNszwSzEv0cs1gra1jlvMJHHeM5
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:31:14 2025 by rpki-client