Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1c55430b-aa95-3e48-9f8a-dccea2142280.roa
File:                     1c55430b-aa95-3e48-9f8a-dccea2142280.roa (raw, json)
Hash identifier:          T+EeqlHxfMUNt4uJMw+6AuzHU36T6L4ekYdNkrMPRsA=
Subject key identifier:   7D:89:2A:F7:D7:BB:2D:21:22:25:E2:49:DB:E6:B6:3C:DC:5D:BA:58
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BA39D1D446F0E8FFC9354D380
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1c55430b-aa95-3e48-9f8a-dccea2142280.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     6461
IP address blocks:        64.125.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:1d:44:6f:0e:8f:fc:93:54:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=991d0c4e-532b-4399-8dbf-549ef4079f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:6d:d9:4f:72:a7:84:a9:e0:e1:86:c2:57:
                    16:44:4d:26:85:0e:41:67:85:b2:9c:55:8b:0d:07:
                    e1:e7:93:c3:48:5e:cb:b1:dc:1f:b0:54:3a:66:b9:
                    7b:d8:cb:23:1d:8b:32:99:f3:17:28:ac:91:e9:d1:
                    35:9a:30:41:2e:df:ac:e2:cc:80:fc:4b:23:7b:6f:
                    61:b9:1b:04:d2:3b:e2:bd:ee:36:dc:16:ee:6d:ad:
                    89:73:dc:33:e0:3f:2f:b3:25:e2:16:9e:8d:dc:03:
                    2d:f6:f5:5b:8b:31:ea:30:a3:31:14:e1:ce:72:1a:
                    94:fd:b0:11:84:b8:83:8a:49:61:59:f1:14:b4:ca:
                    05:1e:a6:c9:14:85:43:04:e6:4e:8b:44:6d:28:c6:
                    62:80:37:5e:80:e4:5d:21:66:27:45:8d:1a:8a:68:
                    c6:e1:e1:02:93:52:ad:58:06:65:ac:6e:92:1b:0a:
                    a0:dd:aa:9d:f6:0a:55:e7:08:e9:7a:85:9d:42:c3:
                    60:1c:cc:79:63:16:18:78:0a:ea:45:3c:f8:d4:e8:
                    15:ed:98:93:2d:4d:79:8c:5b:a2:b5:a2:fd:5f:b0:
                    3b:ef:fd:a2:35:be:f4:21:0b:85:b1:d6:58:6d:87:
                    0c:07:3f:60:bf:5f:1d:b5:5e:58:d6:c5:28:10:ed:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:89:2A:F7:D7:BB:2D:21:22:25:E2:49:DB:E6:B6:3C:DC:5D:BA:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1c55430b-aa95-3e48-9f8a-dccea2142280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:56:a1:05:28:db:40:19:a9:2d:30:60:1f:41:85:f5:de:71:
         c0:4f:0b:83:63:89:62:31:4f:78:22:97:19:91:4f:8a:36:bd:
         fe:67:e2:5c:b5:3c:27:c3:d5:b9:02:82:f9:be:e5:cf:04:5b:
         fb:fc:ca:26:da:c5:1e:9d:e8:33:7a:86:af:5f:39:64:31:68:
         d7:81:f0:b2:ed:59:ce:95:cb:c7:dd:b9:89:90:2b:f8:0f:85:
         bf:56:99:b5:85:d1:56:dc:3e:0f:92:79:1a:50:fa:55:51:6f:
         e2:87:c3:fc:aa:c8:db:ed:94:b7:c9:4e:ba:63:01:58:ce:be:
         44:c8:dc:fd:37:34:e1:5a:06:9c:55:65:96:ca:89:05:44:b1:
         b1:fa:1d:e6:90:1e:5f:38:1d:fe:9c:56:8d:e8:7a:ba:fe:d9:
         68:06:3e:06:0b:78:13:bd:11:8f:50:31:05:6a:4a:54:18:93:
         c1:92:01:04:72:ad:b4:4a:ff:b7:0b:ce:d2:88:e1:c9:83:2e:
         1a:a8:a8:7f:fd:af:98:c8:2b:67:a9:07:92:f4:0c:8c:1f:98:
         00:a2:5c:34:df:b0:6f:30:3f:28:b2:71:1c:45:98:cb:6b:75:
         cf:63:97:cc:85:35:44:78:b9:11:a4:74:08:ee:e7:86:c0:cd:
         5d:da:40:10
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEujnR1Ebw6P/JNU04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
OTkxZDBjNGUtNTMyYi00Mzk5LThkYmYtNTQ5ZWY0MDc5Zjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljpt2U9yp4Sp4OGGwlcWRE0mhQ5BZ4WynFWL
DQfh55PDSF7LsdwfsFQ6Zrl72MsjHYsymfMXKKyR6dE1mjBBLt+s4syA/Esje29h
uRsE0jvive423Bbuba2Jc9wz4D8vsyXiFp6N3AMt9vVbizHqMKMxFOHOchqU/bAR
hLiDiklhWfEUtMoFHqbJFIVDBOZOi0RtKMZigDdegORdIWYnRY0aimjG4eECk1Kt
WAZlrG6SGwqg3aqd9gpV5wjpeoWdQsNgHMx5YxYYeArqRTz41OgV7ZiTLU15jFui
taL9X7A77/2iNb70IQuFsdZYbYcMBz9gv18dtV5Y1sUoEO0amwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH2JKvfXuy0hIiXiSdvmtjzcXbpYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMWM1NTQzMGItYWE5NS0z
ZTQ4LTlmOGEtZGNjZWEyMTQyMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQH0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAe1ahBSjbQBmpLTBgH0GF9d5xwE8Lg2OJYjFPeCKXGZFPija9/mfiXLU8
J8PVuQKC+b7lzwRb+/zKJtrFHp3oM3qGr185ZDFo14Hwsu1ZzpXLx925iZAr+A+F
v1aZtYXRVtw+D5J5GlD6VVFv4ofD/KrI2+2Ut8lOumMBWM6+RMjc/Tc04VoGnFVl
lsqJBUSxsfod5pAeXzgd/pxWjeh6uv7ZaAY+Bgt4E70Rj1AxBWpKVBiTwZIBBHKt
tEr/twvO0ojhyYMuGqiof/2vmMgrZ6kHkvQMjB+YAKJcNN+wbzA/KLJxHEWYy2t1
z2OXzIU1RHi5EaR0CO7nhsDNXdpAEA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:40:47 2025 by rpki-client