Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/d041e63f-fee3-3510-9351-3c0aa39bf403.roa
File:                     d041e63f-fee3-3510-9351-3c0aa39bf403.roa (raw, json)
Hash identifier:          DGB2opACYlGtj66Ao3S22TM7ujmRQHTDmmagaZD/41g=
Subject key identifier:   5B:88:6D:E1:C1:1B:55:82:1E:8C:1B:0E:E6:D6:B9:61:C7:4E:CA:1B
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584B9F6786AA9F9DC9D656DF5600
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/d041e63f-fee3-3510-9351-3c0aa39bf403.roa
Signing time:             Fri 24 Oct 2025 00:49:49 +0000
ROA not before:           Fri 24 Oct 2025 00:49:49 +0000
ROA not after:            Thu 22 Jan 2026 01:49:49 +0000
asID:                     36530
IP address blocks:        130.12.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9f:67:86:aa:9f:9d:c9:d6:56:df:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Oct 24 00:49:49 2025 GMT
            Not After : Jan 22 01:49:49 2026 GMT
        Subject: CN=0da06ad8-dcad-4544-9f2d-e9e22b7cbe2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:24:b2:8f:8b:9c:dc:96:dd:0e:5f:f0:37:
                    a0:c3:e9:7a:71:0b:b7:ab:e0:a9:d7:15:48:44:f2:
                    32:1b:15:f0:85:47:d6:d9:70:6a:e8:a5:fd:45:d9:
                    85:02:27:74:c2:89:64:e6:73:4b:aa:ee:27:6f:46:
                    fd:59:f5:00:ef:22:94:a2:a0:0b:7a:af:e4:c4:25:
                    e5:c4:69:5f:13:35:fc:34:3c:d7:ab:fc:c5:29:2c:
                    b3:4d:d8:83:11:5e:13:82:ac:24:f3:6b:cf:b2:4f:
                    9d:52:e2:21:5c:cb:44:a2:d1:b3:d3:3c:36:7c:4a:
                    c9:73:67:86:d0:53:77:fd:b5:67:05:1d:5e:81:84:
                    2b:f2:32:fc:16:bc:b6:2b:99:9e:e2:ae:71:f1:77:
                    d2:f6:7c:cd:eb:58:26:ee:e4:9d:66:a5:bb:5e:28:
                    9b:ca:14:0c:f5:a6:a7:dd:09:9d:9e:4b:51:fb:83:
                    fb:75:01:20:a4:cd:2f:53:b1:f5:a3:9c:1b:e2:30:
                    93:13:de:e2:7f:f4:79:0a:8e:51:61:cc:84:41:bd:
                    5a:b3:f4:c5:36:2d:ca:d9:5a:99:a6:51:a6:e7:50:
                    19:7d:50:ee:b4:11:60:ba:c7:3d:c3:c9:3b:b8:45:
                    05:27:32:c4:e0:c9:4d:d9:20:87:7b:85:84:db:89:
                    93:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:88:6D:E1:C1:1B:55:82:1E:8C:1B:0E:E6:D6:B9:61:C7:4E:CA:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/d041e63f-fee3-3510-9351-3c0aa39bf403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:fd:4a:b5:d7:03:f9:ab:c3:d4:6f:67:87:5c:8a:c3:c3:
         7f:5f:a7:fb:1b:5f:b5:5e:c7:7a:ed:99:b9:9c:e0:8d:51:c5:
         22:db:1a:d9:b5:c2:d7:c0:34:2d:50:b0:8f:7a:9a:98:79:c5:
         80:16:14:67:e1:fd:39:d2:13:25:aa:b1:77:b8:ae:64:5f:62:
         e6:72:94:95:26:78:47:9e:f7:c2:23:dd:02:e6:69:e1:e8:67:
         bc:8d:46:ec:17:ae:c8:cd:4b:64:23:5f:c7:ac:d4:9c:3e:39:
         0f:f7:44:0a:32:39:b6:21:6a:98:b1:d1:6d:04:82:53:5d:62:
         3b:41:02:b2:5d:10:d6:4d:5a:1c:f1:4f:2a:08:06:88:70:8a:
         7f:b6:65:ab:55:30:47:d0:a8:ef:67:4f:14:60:79:34:a9:61:
         ab:87:eb:6b:3c:9e:5b:b2:25:ff:29:42:5c:47:8e:68:ba:29:
         aa:0b:14:1e:9b:b4:0d:d5:92:72:f3:91:d4:aa:c3:28:f0:cd:
         19:80:48:ff:55:84:7b:84:6d:2f:ad:fe:c6:79:64:47:0c:c1:
         72:8c:d7:06:0d:c5:a3:40:55:c8:86:fc:b0:3a:4e:74:5d:e2:
         0c:20:e2:8b:39:2d:18:a2:fa:60:c9:16:19:6f:ce:a8:56:0e:
         9e:64:e9:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufZ4aqn53J1lbfVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI1MmM3OTYtNmFiMi00ZWI5LWJhYTAtMTQ0NWZjODBj
YTg0MB4XDTI1MTAyNDAwNDk0OVoXDTI2MDEyMjAxNDk0OVowLzEtMCsGA1UEAxMk
MGRhMDZhZDgtZGNhZC00NTQ0LTlmMmQtZTllMjJiN2NiZTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwAkso+LnNyW3Q5f8Degw+l6cQu3q+Cp1xVI
RPIyGxXwhUfW2XBq6KX9RdmFAid0wolk5nNLqu4nb0b9WfUA7yKUoqALeq/kxCXl
xGlfEzX8NDzXq/zFKSyzTdiDEV4Tgqwk82vPsk+dUuIhXMtEotGz0zw2fErJc2eG
0FN3/bVnBR1egYQr8jL8Fry2K5me4q5x8XfS9nzN61gm7uSdZqW7XiibyhQM9aan
3QmdnktR+4P7dQEgpM0vU7H1o5wb4jCTE97if/R5Co5RYcyEQb1as/TFNi3K2VqZ
plGm51AZfVDutBFgusc9w8k7uEUFJzLE4MlN2SCHe4WE24mTnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFuIbeHBG1WCHowbDubWuWHHTsobMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMjUy
Yzc5Ni02YWIyLTRlYjktYmFhMC0xNDQ1ZmM4MGNhODQvZDA0MWU2M2YtZmVlMy0z
NTEwLTkzNTEtM2MwYWEzOWJmNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTI1MmM3OTYtNmFiMi00ZWI5LWJh
YTAtMTQ0NWZjODBjYTg0LzEyNTJjNzk2LTZhYjItNGViOS1iYWEwLTE0NDVmYzgw
Y2E4NC5jcmwwHwYDVR0jBBgwFoAUAv6NghE83dRBtQk6uiAx1BAps/EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMjUyYzc5Ni02YWIyLTRlYjktYmFhMC0xNDQ1
ZmM4MGNhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFog/Uq11wP5q8PUb2eHXIrDw39fp/sbX7Vex3rtmbmc4I1RxSLbGtm1
wtfANC1QsI96mph5xYAWFGfh/TnSEyWqsXe4rmRfYuZylJUmeEee98Ij3QLmaeHo
Z7yNRuwXrsjNS2QjX8es1Jw+OQ/3RAoyObYhapix0W0EglNdYjtBArJdENZNWhzx
TyoIBohwin+2ZatVMEfQqO9nTxRgeTSpYauH62s8nluyJf8pQlxHjmi6KaoLFB6b
tA3VknLzkdSqwyjwzRmASP9VhHuEbS+t/sZ5ZEcMwXKM1wYNxaNAVciG/LA6TnRd
4gwg4os5LRii+mDJFhlvzqhWDp5k6cI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:34 2025 by rpki-client